Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/uhXpvjRRDxITPCMlUcTUeEk-_as.roa
File: uhXpvjRRDxITPCMlUcTUeEk-_as.roa (raw, json)
Hash identifier: HoLfkUBCzEBzKIYcA74cfrpN6ztAmK5dgjebHRu8sNM=
Subject key identifier: BA:15:E9:BE:34:51:0F:12:13:3C:23:25:51:C4:D4:78:49:3E:FD:AB
Certificate issuer: /CN=7ab74b01307f9c3fa756196384173115e66e6c55
Certificate serial: 018571278C98E04451B342BB131338FE1ED3
Authority key identifier: 7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/uhXpvjRRDxITPCMlUcTUeEk-_as.roa
Signing time: Mon 02 Jan 2023 06:24:55 +0000
ROA not before: Mon 02 Jan 2023 06:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25398
IP address blocks: 193.108.44.0/23 maxlen: 23
193.108.44.0/24 maxlen: 24
193.108.45.0/24 maxlen: 24
185.150.180.0/23 maxlen: 23
2a0d:7ec1::/32 maxlen: 32
2a0d:7ec0::/32 maxlen: 32
2a0d:7ec0::/31 maxlen: 31
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:8c:98:e0:44:51:b3:42:bb:13:13:38:fe:1e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab74b01307f9c3fa756196384173115e66e6c55
Validity
Not Before: Jan 2 06:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba15e9be34510f12133c232551c4d478493efdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e1:88:b2:8b:91:59:34:a0:37:94:89:a9:f9:
96:ac:fc:01:4b:53:cc:49:35:f5:e4:19:82:53:5a:
ff:51:b4:e8:a1:eb:d1:2f:d4:3b:5f:4a:34:fe:c1:
da:f7:cf:a6:84:96:5c:cb:5c:40:b1:7b:85:04:13:
92:a1:6b:8d:de:c8:e0:71:18:a6:a3:f8:68:7f:18:
85:50:f2:35:4d:ef:3e:b9:ff:07:65:2b:85:2e:7f:
29:6b:62:b4:af:ae:45:ca:0d:6b:9e:20:34:83:5f:
b1:d5:22:e4:8f:0a:cf:13:35:2a:f6:db:a4:f7:1a:
55:ca:8a:df:29:9e:58:7e:a0:eb:51:f8:fc:e1:fa:
e5:d0:f6:64:30:40:5b:83:c7:ee:31:4f:b9:dd:cd:
4d:75:9f:d2:94:0f:35:13:69:a5:e1:c4:8b:28:5e:
3a:b4:4e:bc:65:a7:f2:b7:52:d7:86:cf:d5:e1:62:
f3:2a:f0:79:2d:f0:dc:c5:e5:d1:9a:32:14:1b:75:
32:d3:89:4e:eb:3b:c1:36:a0:61:5f:95:5b:21:84:
ce:8b:8e:7c:87:5f:e7:d5:eb:24:8b:c1:5f:14:bf:
09:45:53:21:da:73:24:08:64:f3:22:e9:a4:89:1a:
f0:3a:33:45:29:bd:4b:a2:3c:10:ad:37:44:cf:04:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:15:E9:BE:34:51:0F:12:13:3C:23:25:51:C4:D4:78:49:3E:FD:AB
X509v3 Authority Key Identifier:
keyid:7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/uhXpvjRRDxITPCMlUcTUeEk-_as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.180.0/23
193.108.44.0/23
IPv6:
2a0d:7ec0::/31
Signature Algorithm: sha256WithRSAEncryption
01:b0:ab:29:01:9a:02:4d:d1:c7:e1:9c:69:1d:f0:86:c9:ba:
14:e2:88:19:55:4f:7d:74:d3:48:f8:31:d3:47:d0:ad:6b:a0:
02:85:ed:e2:f9:5d:6d:eb:4b:79:67:6a:6d:49:e6:69:6c:92:
68:37:3e:19:fe:d0:47:ce:7e:5b:c6:34:7a:7f:4e:5c:34:60:
99:75:29:1f:c3:ee:70:d0:90:30:76:94:83:8e:c9:9d:58:d2:
12:37:37:2f:79:3f:93:fa:ac:e4:1b:7a:ed:31:f9:a4:cf:d0:
eb:fc:e4:ca:8e:a6:49:41:97:23:5a:fc:9f:0d:1b:07:ee:e1:
bd:7a:60:fc:14:30:8c:30:e3:74:1c:a4:46:b0:3a:d6:ee:8a:
f7:48:91:cf:11:c6:d5:42:3f:1f:99:7b:13:3c:19:8d:aa:b4:
d8:c9:3a:0e:e1:de:10:01:a9:08:5e:78:0c:ef:2d:43:1a:90:
8d:59:ea:6d:8d:63:ae:2b:62:eb:16:42:af:3f:6d:49:c2:cc:
c1:12:8f:54:33:c0:4c:73:bd:12:b6:3f:73:a9:f4:fc:26:be:
76:a2:f7:3f:9b:40:1a:e5:7a:4c:54:0a:9d:49:a5:5a:ac:2a:
8f:e4:7b:8b:ec:eb:22:ec:57:be:bd:83:20:50:18:43:c7:90:
5c:e3:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:24 2023 by rpki-client on console.sobornost.net