Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uPcPP1VTzj4PdMD2v51IVRgitv4.roa
File: uPcPP1VTzj4PdMD2v51IVRgitv4.roa (raw, json)
Hash identifier: 8RXDAY9AZ8daPrhG95IuQRTSJxM1C9dHZ1DjWdTpXzw=
Subject key identifier: B8:F7:0F:3F:55:53:CE:3E:0F:74:C0:F6:BF:9D:48:55:18:22:B6:FE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019463390FBA4F2B8FAB0E21007F982435EE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uPcPP1VTzj4PdMD2v51IVRgitv4.roa
Signing time: Tue 14 Jan 2025 05:11:11 +0000
ROA not before: Tue 14 Jan 2025 05:11:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 05:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:63:39:0f:ba:4f:2b:8f:ab:0e:21:00:7f:98:24:35:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 14 05:11:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8f70f3f5553ce3e0f74c0f6bf9d48551822b6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:b1:9a:d5:40:7f:34:f0:80:56:b7:da:98:
b9:46:f3:ff:09:3d:51:b2:24:e9:ff:6a:57:88:f2:
71:d5:41:8c:b0:11:f1:67:03:43:23:17:8d:2a:5f:
8b:ee:01:8c:71:5e:87:16:bf:3a:4b:35:59:10:f5:
a8:ee:6d:d3:24:ad:23:89:20:c5:99:9a:38:3c:18:
d4:ac:b1:78:4b:d7:59:93:fe:9d:83:87:15:9a:b9:
3d:73:d5:e0:ef:9a:40:46:07:ec:55:1e:df:0c:51:
7d:de:52:b1:41:d5:45:e8:d4:bd:34:13:f7:3e:6f:
6f:76:d3:3c:c0:ff:31:1b:ea:29:a3:2c:da:41:87:
a6:14:9c:eb:0a:30:f3:f5:5c:68:d0:ab:53:4f:a7:
fd:a6:ea:62:09:b2:d6:93:aa:b2:59:90:2f:8d:03:
d1:ab:d0:0a:b5:04:c1:54:60:5a:7b:d1:ad:83:17:
6c:ed:8f:db:53:a6:65:b3:32:8b:3e:9d:59:ba:c1:
36:c4:23:28:ad:f3:16:36:8e:06:84:cb:c2:14:9c:
34:17:24:30:97:bc:23:2b:a7:48:25:7c:50:8f:e9:
23:cb:c0:6b:46:5d:58:45:cf:98:f1:d5:1d:f0:6a:
2f:e7:cd:f4:29:f8:44:99:30:bd:30:db:eb:19:01:
fc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F7:0F:3F:55:53:CE:3E:0F:74:C0:F6:BF:9D:48:55:18:22:B6:FE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uPcPP1VTzj4PdMD2v51IVRgitv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.130.0/23
89.106.69.0/24
94.103.164.0/24
94.249.153.0/24
94.249.158.0/24
94.249.195.0/24
94.249.212.0/24
94.249.214.0/23
94.249.237.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
185.13.156.0/24
185.13.159.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a0:96:96:f6:ef:ec:f5:58:48:76:12:10:7b:c6:6c:0e:9e:
47:b0:14:5b:a3:7e:fa:ff:8d:ea:f7:e9:d0:da:35:43:db:a7:
ed:34:af:b4:14:77:61:fe:4b:b7:55:96:b7:fd:30:6b:bc:1c:
1c:ac:b5:bf:41:9b:99:42:66:50:19:29:d1:86:d1:20:83:5e:
e2:69:8f:d3:b0:82:04:76:25:8d:f6:0e:77:7a:66:bf:d2:c4:
99:a0:10:d9:62:96:d0:8b:4d:eb:4b:75:4f:9e:6d:a9:f7:9f:
6a:61:50:34:0c:fb:62:af:9d:22:86:7c:53:68:c9:3b:b9:de:
fc:88:9c:46:d2:3a:9d:7b:de:0d:77:90:fb:7c:df:8b:3a:f0:
70:3e:48:f9:09:1c:4d:ae:5b:d0:74:34:fa:da:35:1c:1f:2a:
25:71:92:0f:67:02:88:dc:06:9f:22:b1:31:b4:b5:44:82:cf:
eb:2a:b5:ae:8f:11:f1:eb:78:e6:63:8d:15:8d:5b:e6:87:ec:
c0:22:68:7b:e2:17:d5:d2:2c:62:30:fb:07:d9:da:31:18:77:
f0:cf:b7:49:9d:1a:dc:93:20:ab:6f:41:08:a5:76:92:ce:35:
d6:06:69:36:d3:d9:60:7f:6d:3a:45:e3:23:33:34:68:b0:ee:
4a:11:05:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 04:17:55 2025 by rpki-client