Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/UB0c3qlL_02C5LegS0DcETOmwS8.roa
File: UB0c3qlL_02C5LegS0DcETOmwS8.roa (raw, json)
Hash identifier: 95FYtX4gPnnkeyPzAGfFuKdyLCX6hjnHZwKPjcpqkhQ=
Subject key identifier: 50:1D:1C:DE:A9:4B:FF:4D:82:E4:B7:A0:4B:40:DC:11:33:A6:C1:2F
Certificate issuer: /CN=c30aef396394ea5950dc7956ab1bf491364622a4
Certificate serial: 01856C1C7FEC2F7176E717579BEB774338FE
Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/UB0c3qlL_02C5LegS0DcETOmwS8.roa
Signing time: Sun 01 Jan 2023 06:54:45 +0000
ROA not before: Sun 01 Jan 2023 06:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12496
IP address blocks: 93.89.128.0/20 maxlen: 20
91.135.0.0/20 maxlen: 20
217.144.80.0/20 maxlen: 20
212.69.32.0/19 maxlen: 19
2a02:390::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:7f:ec:2f:71:76:e7:17:57:9b:eb:77:43:38:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4
Validity
Not Before: Jan 1 06:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=501d1cdea94bff4d82e4b7a04b40dc1133a6c12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:dd:e4:09:b8:c9:49:52:6e:e8:b8:54:29:
95:c0:39:40:0e:5b:7e:79:15:dd:2a:02:42:40:51:
93:1c:3b:f0:41:9e:bb:c1:17:22:d6:68:d5:2a:d5:
79:f5:c7:3a:cc:ac:44:91:29:39:fc:9b:8e:c1:76:
e1:b3:a8:ac:84:61:a5:75:a0:74:a5:c1:a1:b7:17:
0c:73:a6:72:d8:4e:44:39:7a:5d:bf:a1:af:96:7c:
dc:21:e8:d8:87:4f:06:ca:26:1e:96:c3:2e:7a:6b:
0b:b5:77:7b:e5:bb:39:a7:a5:b0:b8:cf:e4:aa:20:
0c:97:97:eb:8e:8a:74:e0:ae:7c:a3:6e:03:24:e6:
24:c0:ce:93:7b:d5:89:15:6b:cd:1c:8f:62:ec:75:
47:af:6f:88:eb:ce:1e:dd:7e:85:65:a2:e0:33:52:
d9:c0:91:af:9e:b2:5d:9f:41:0d:f9:c8:4b:9d:3d:
20:8b:46:55:03:de:c4:26:06:06:8e:a7:39:59:dd:
74:5d:aa:17:59:82:3d:34:a6:8e:ae:1d:bd:73:ff:
00:0b:3e:a0:75:2e:62:78:a5:5a:32:47:38:13:61:
3b:a3:7d:de:2b:44:b1:b0:88:bf:5d:50:78:a0:eb:
0d:27:dc:32:c7:08:f0:0c:76:68:db:5f:37:63:0f:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1D:1C:DE:A9:4B:FF:4D:82:E4:B7:A0:4B:40:DC:11:33:A6:C1:2F
X509v3 Authority Key Identifier:
keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/UB0c3qlL_02C5LegS0DcETOmwS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.0.0/20
93.89.128.0/20
212.69.32.0/19
217.144.80.0/20
IPv6:
2a02:390::/32
Signature Algorithm: sha256WithRSAEncryption
4e:50:9e:69:81:2e:62:10:40:e8:fd:84:77:03:8c:13:b2:a5:
f6:c0:b1:ab:f0:e4:38:ef:3e:ea:1b:f3:82:f0:34:17:53:ef:
11:d9:0b:1f:99:c6:60:03:2a:86:33:88:40:3c:a0:d1:51:24:
db:f0:75:a2:cc:c2:cb:ba:b0:84:e8:f0:62:cb:2f:fc:c9:bc:
09:92:4a:bc:a6:c4:a0:c4:09:57:6a:17:f4:cb:75:3c:6e:ba:
b7:c1:a6:b5:e8:59:b7:8b:1f:92:d5:71:4f:cd:fa:0a:0a:2e:
83:22:60:7d:83:c0:0c:67:c0:6a:27:e8:1d:cc:fc:12:e4:0b:
a2:e6:25:7c:9e:8d:85:f5:31:4d:fb:ab:e1:45:0d:58:01:36:
cd:3e:15:0a:50:6d:93:77:30:e8:10:87:25:89:bb:cf:a9:b0:
88:19:83:fa:47:79:cd:f9:00:eb:cb:73:8a:9a:fe:67:4b:b8:
fd:06:7c:5d:50:1a:2a:90:b3:f1:dc:ec:a0:d5:ec:3f:dc:d1:
ad:81:c1:77:8b:ce:aa:33:d4:ce:19:21:31:d6:54:65:f0:a4:
96:d5:c5:0d:42:c4:d5:4a:44:f3:f2:ae:07:6d:86:22:52:df:
68:93:e8:1e:b4:fb:e2:69:6a:ee:d0:99:5c:59:da:a4:6c:59:
42:36:82:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:52 2024 by rpki-client on console.sobornost.net