Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uWC93ECmJ3Vo9STAYfx54f_4aYE.roa
File: uWC93ECmJ3Vo9STAYfx54f_4aYE.roa (raw, json)
Hash identifier: 7Uc8R24NFlVbM45sAFMKYyZLffqK162xRJ/WdD8as8U=
Subject key identifier: B9:60:BD:DC:40:A6:27:75:68:F5:24:C0:61:FC:79:E1:FF:F8:69:81
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194CEA5F106997D4B1CCDD651ECCC7B466A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uWC93ECmJ3Vo9STAYfx54f_4aYE.roa
Signing time: Tue 04 Feb 2025 01:49:29 +0000
ROA not before: Tue 04 Feb 2025 01:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.231.232.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 17:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ce:a5:f1:06:99:7d:4b:1c:cd:d6:51:ec:cc:7b:46:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 4 01:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b960bddc40a6277568f524c061fc79e1fff86981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:22:46:6a:be:21:51:81:68:67:e2:91:7d:
b9:84:26:95:ed:f4:7a:3f:c3:c9:d6:9d:d4:b2:d0:
0c:88:3a:d7:f6:33:63:eb:5b:f0:10:3a:db:12:60:
51:10:47:e5:66:83:26:86:1d:04:de:61:e0:14:f1:
e5:b6:44:3b:d5:a6:fc:7b:c7:17:1c:e9:c6:f2:7e:
23:e8:0c:a1:22:72:55:f0:10:00:f8:8d:54:fb:52:
f2:46:37:f2:e4:fe:0e:74:d5:a6:a2:f5:1e:c1:06:
16:62:31:90:e0:df:9c:bf:50:0e:6c:2b:cb:45:35:
f8:c7:3e:77:ad:7f:24:70:c9:d2:70:ba:70:20:4f:
49:ee:5c:87:3b:1d:8c:bf:95:f2:1c:1f:01:41:f0:
a1:bc:9b:7c:0f:1c:ea:df:9b:65:3d:7c:12:a8:df:
b1:59:08:bd:0d:a3:b0:89:d1:ee:fe:a7:77:c7:a9:
83:0e:6e:7f:f5:2d:43:0e:20:54:d4:fb:18:6f:d8:
dc:03:6a:7b:7d:a3:18:42:1c:f4:37:a3:e8:b1:a1:
26:36:b8:44:b6:d4:88:e7:e9:85:78:a1:eb:1f:53:
ee:88:17:da:05:cf:0e:01:83:7a:11:a4:a4:8d:b2:
21:70:36:ba:eb:18:e5:18:bb:bb:6b:4a:ac:2f:6a:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:60:BD:DC:40:A6:27:75:68:F5:24:C0:61:FC:79:E1:FF:F8:69:81
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uWC93ECmJ3Vo9STAYfx54f_4aYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.232.0/24
77.90.3.0/24
77.90.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5f:b8:36:ed:8f:0c:13:3a:d6:34:04:f6:02:c8:4d:af:65:
70:10:07:90:e2:96:9f:d3:89:a2:42:0f:c7:0d:18:47:9c:4b:
98:17:df:7f:22:d5:2d:a7:97:0e:36:c1:30:96:2b:27:7a:fd:
b8:d7:70:65:de:7c:b0:b1:6a:d7:28:88:b8:ab:5b:07:74:19:
fc:ca:54:b3:8d:23:5b:46:ec:90:e2:6d:bc:a4:7a:83:0c:c6:
43:f6:bd:a3:7e:3d:79:d5:c6:48:37:dc:ba:54:16:70:5a:49:
eb:14:12:4f:af:af:27:84:16:5f:76:92:ce:69:bc:43:d2:e9:
06:40:d9:40:38:1c:42:f5:d8:b1:d0:5d:00:1a:4a:2f:7f:5a:
4b:6c:31:c4:6c:9d:28:c8:3a:18:99:1b:47:58:78:c0:81:2f:
2b:d7:72:ce:4b:e4:24:b7:8e:37:4e:81:58:bc:33:c5:ac:4e:
9b:53:0e:87:6a:1c:63:94:3b:0c:33:28:9d:57:9a:ec:9e:a8:
2d:3c:9b:2d:cf:2f:ee:6d:19:5b:96:c8:f2:fc:da:e5:62:eb:
d0:3b:75:05:50:2f:c0:37:7e:39:67:d3:97:cd:06:93:49:96:
d5:d6:d5:54:5a:55:ac:f0:ed:40:a0:21:34:90:09:53:45:9a:
a5:18:d8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:17 2025 by rpki-client