Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/uCCaFHxiaYAPdpxF3XiKidziS-Y.roa
File: uCCaFHxiaYAPdpxF3XiKidziS-Y.roa (raw, json)
Hash identifier: xDrUSOdNU+tf8e8SuF7F/94Am6WCBJ7jwkA+uBIrW1A=
Subject key identifier: B8:20:9A:14:7C:62:69:80:0F:76:9C:45:DD:78:8A:89:DC:E2:4B:E6
Certificate issuer: /CN=2aa380e230cb334361b4861e2f694124387f8529
Certificate serial: 018CC26D6A2BAD87A97B9419C7B61B51182D
Authority key identifier: 2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/uCCaFHxiaYAPdpxF3XiKidziS-Y.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203022
IP address blocks: 185.213.128.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6a:2b:ad:87:a9:7b:94:19:c7:b6:1b:51:18:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa380e230cb334361b4861e2f694124387f8529
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8209a147c6269800f769c45dd788a89dce24be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:22:8a:9d:1c:0c:52:4a:3a:28:1a:a6:00:
08:53:d8:39:36:b4:f7:96:bd:3d:1b:5d:b3:a5:71:
cd:2d:fc:03:f1:5b:e6:57:87:a0:59:66:76:e0:85:
ee:91:cf:eb:83:e8:c9:a9:26:98:24:90:3d:48:9f:
18:fd:1f:98:83:db:e6:a5:bb:f3:d0:b5:e0:1b:f0:
cf:0a:e9:89:3b:b5:b4:bf:13:04:bd:2e:89:26:4b:
a9:07:5e:44:6e:55:ca:8f:74:27:9c:6c:66:20:24:
e8:ff:61:ea:e8:44:87:8e:52:d6:b5:4d:05:6c:0e:
56:35:86:1a:44:d2:25:bb:5f:6b:79:1c:6f:20:db:
40:5b:9a:21:5f:14:30:64:5d:2d:fd:5d:e2:e7:56:
b1:5d:9b:a4:74:34:a8:66:74:bd:c9:7e:33:5c:f2:
4f:f9:d1:8d:5e:4f:4d:0e:0f:ea:3f:87:6f:2d:67:
01:f0:3f:9b:f7:1e:c7:8c:d7:be:41:aa:c5:c9:f5:
67:99:d4:4f:86:db:a4:38:07:06:73:48:3a:82:ea:
b5:dc:1d:c3:90:41:1d:67:d0:6a:89:3a:10:57:c7:
86:28:ef:90:f2:08:57:d8:fa:f3:27:d1:ca:72:b3:
72:5b:68:61:84:c9:d6:e8:24:aa:7b:51:07:57:5a:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:20:9A:14:7C:62:69:80:0F:76:9C:45:DD:78:8A:89:DC:E2:4B:E6
X509v3 Authority Key Identifier:
keyid:2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/uCCaFHxiaYAPdpxF3XiKidziS-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.128.0/22
Signature Algorithm: sha256WithRSAEncryption
86:1a:2c:97:c1:ad:62:e8:98:a3:05:6c:2f:5b:eb:be:3b:db:
6f:3b:4d:d8:46:35:b5:40:11:49:0a:94:7d:0b:38:06:c8:58:
13:40:f7:cf:f0:34:a1:c8:7d:95:aa:eb:73:e0:39:0a:f7:70:
5a:0d:f9:dc:c2:1e:52:08:31:e1:b1:d4:90:0e:ca:c5:89:3b:
2f:df:e5:d2:f0:f2:d8:90:2b:37:1f:98:32:0c:6b:20:5b:70:
77:04:88:21:a9:6f:aa:eb:4b:54:0e:69:5e:be:b2:c9:8d:42:
5d:fb:e6:91:c4:b6:b7:9b:94:5e:1b:a9:f8:d2:10:99:19:aa:
78:d9:58:d0:58:26:7c:57:5c:58:35:40:69:01:85:3b:c4:0e:
e4:42:49:0f:b7:a1:07:b7:c9:0f:69:f8:cc:36:ec:1b:fc:9e:
1e:61:cf:ad:47:ae:5e:12:d1:22:91:a3:ac:92:71:2c:7d:44:
45:0b:79:d2:0a:20:95:ab:b5:bc:7d:fc:a8:0d:bd:ff:5a:fa:
22:a0:fb:71:5a:41:3e:26:fa:e7:4d:1d:27:b4:94:82:73:8a:
1b:5f:93:82:8a:4e:ed:3d:c8:a2:f4:d1:c4:24:35:96:92:03:
b4:b2:dd:e4:b0:cf:e7:68:e6:00:7e:fa:f5:44:f2:95:35:02:
f8:1d:a1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:22:14 2025 by rpki-client