Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/uz6cEAQwy4VYABODy1ol0PsBawI.roa
File: uz6cEAQwy4VYABODy1ol0PsBawI.roa (raw, json)
Hash identifier: 8xyGHkOoQFFIuz2w9difMCgPtWaBGhwsM7NSfye0XgQ=
Subject key identifier: BB:3E:9C:10:04:30:CB:85:58:00:13:83:CB:5A:25:D0:FB:01:6B:02
Certificate issuer: /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Certificate serial: 018AB731030AAD8E531D98650382049C483A
Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/uz6cEAQwy4VYABODy1ol0PsBawI.roa
Signing time: Thu 21 Sep 2023 10:02:37 +0000
ROA not before: Thu 21 Sep 2023 10:02:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201704
IP address blocks: 212.63.96.0/21 maxlen: 21
37.98.200.0/22 maxlen: 22
185.65.184.0/22 maxlen: 22
89.42.164.0/22 maxlen: 22
2a03:1d20::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:31:03:0a:ad:8e:53:1d:98:65:03:82:04:9c:48:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Validity
Not Before: Sep 21 10:02:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb3e9c100430cb8558001383cb5a25d0fb016b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:2f:01:35:00:2d:cd:53:76:46:55:a3:3e:
60:2f:dd:6c:60:0a:86:39:a1:bf:cf:31:d4:97:55:
52:f2:6e:bd:7b:e5:9e:ff:c2:42:a4:ac:51:76:89:
36:e0:be:1f:32:c4:55:18:77:e1:ff:e1:e8:7d:8a:
1b:58:3d:77:cd:8c:c3:bb:3d:3d:01:31:15:3b:98:
40:26:7b:c2:fe:12:92:d4:07:18:c5:5b:1b:e2:70:
53:d5:fa:5e:d5:a1:ce:0f:92:14:14:5e:11:8f:b4:
0a:d1:32:7b:d9:8f:c7:ae:ae:1c:9f:dc:e2:16:75:
48:23:8b:f4:94:06:0b:96:a0:51:0a:a0:8c:b6:eb:
1a:7a:b4:f7:75:9e:d0:f7:87:55:86:43:4d:b7:43:
41:ad:13:c9:c0:41:27:f7:75:ee:e9:1d:92:99:93:
1a:ee:ea:96:9a:c8:34:64:3e:57:b4:24:10:73:58:
ce:77:26:bd:b0:a7:7b:cc:83:3a:c5:c1:fd:ba:c9:
d9:11:94:99:26:39:71:cf:6b:0b:38:e3:42:74:ee:
db:e6:82:55:45:56:1f:ef:ea:7b:b2:f7:06:96:5c:
49:9b:cc:d3:f7:d8:77:34:f6:7a:17:8d:14:ce:6c:
d1:41:12:dc:5b:11:21:44:48:ee:ad:d4:b7:b0:55:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3E:9C:10:04:30:CB:85:58:00:13:83:CB:5A:25:D0:FB:01:6B:02
X509v3 Authority Key Identifier:
keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/uz6cEAQwy4VYABODy1ol0PsBawI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.200.0/22
89.42.164.0/22
185.65.184.0/22
212.63.96.0/21
IPv6:
2a03:1d20::/32
Signature Algorithm: sha256WithRSAEncryption
4f:c6:71:10:87:30:96:4c:ba:09:4e:29:17:0d:65:8e:53:7e:
03:52:42:23:5a:0f:c9:72:da:74:74:7c:2b:a5:a4:c7:e0:4b:
ee:dc:15:a0:8e:a1:12:70:de:f8:fa:04:dc:02:bc:c2:eb:01:
a4:dd:ef:1b:ff:8d:6a:22:5f:e9:02:f5:c8:8a:8d:a1:45:10:
33:3e:e7:24:f9:d9:4a:d1:bb:a4:4c:3a:79:fa:cc:eb:9a:3f:
be:8f:9b:96:fe:89:06:bd:92:91:6c:32:1d:6f:af:1e:90:bb:
09:9f:f3:52:20:cc:93:cf:df:54:da:27:2c:d5:66:ea:ca:e7:
a3:06:cc:b6:10:b5:59:77:68:c2:dd:02:bd:d2:75:a7:e2:87:
e1:ae:86:ff:a1:ac:a6:d8:05:cd:14:9d:a1:d6:74:d6:0e:8a:
e1:6b:9f:81:9e:b8:f5:0c:94:bf:6b:bf:8c:4c:5a:0b:f3:ab:
53:f3:11:22:7d:a1:03:fb:b3:25:0f:32:ad:3c:95:09:18:a9:
4b:49:b8:1f:5f:4e:2a:67:2c:50:6c:5e:36:81:6a:ff:23:2c:
7d:fb:44:26:22:71:04:d1:cf:22:c2:3a:13:ec:82:b0:bc:23:
5e:ca:66:2c:34:dd:93:9b:ef:b3:07:a9:e8:ab:1f:2c:ef:c5:
18:05:0a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:38 2024 by rpki-client on console-ams.rpki-client.org