Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/Uni1pV_7CI5p9RslbUKky2sIpV8.roa
File: Uni1pV_7CI5p9RslbUKky2sIpV8.roa (raw, json)
Hash identifier: m04p4Y5Hue9YNtW1im5SeQxiPcvF86V09G1LbFkhPkQ=
Subject key identifier: 52:78:B5:A5:5F:FB:08:8E:69:F5:1B:25:6D:42:A4:CB:6B:08:A5:5F
Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial: 0191C0E07C5BC516D758F590D6090009D5A1
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/Uni1pV_7CI5p9RslbUKky2sIpV8.roa
Signing time: Thu 05 Sep 2024 06:30:22 +0000
ROA not before: Thu 05 Sep 2024 06:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49371
IP address blocks: 185.124.12.0/24 maxlen: 24
185.124.13.0/24 maxlen: 24
185.124.14.0/24 maxlen: 24
185.124.15.0/24 maxlen: 24
185.236.28.0/22 maxlen: 22
2a03:9000::/32 maxlen: 32
2a03:9000:200::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 05 Sep 2024 10:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c0:e0:7c:5b:c5:16:d7:58:f5:90:d6:09:00:09:d5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Validity
Not Before: Sep 5 06:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5278b5a55ffb088e69f51b256d42a4cb6b08a55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:7d:3e:e7:3e:a8:10:be:3a:38:9a:1e:bb:
dd:c7:5f:44:a3:0b:36:ce:b8:e6:c1:00:01:e1:3e:
57:a5:4a:ae:31:0a:12:66:f9:b4:bf:36:a3:db:15:
dd:76:09:62:0b:c5:e8:f0:ee:3f:58:3c:70:6f:dc:
eb:eb:6d:42:73:ac:7a:16:d7:6d:fa:c6:48:5c:64:
20:ca:1d:62:bd:f3:a0:98:41:b5:1e:bc:d9:e9:ae:
38:b4:58:db:d4:bf:fd:9d:88:77:5b:35:65:49:1b:
b8:24:d6:20:d4:1a:95:07:1d:8b:0f:d0:71:ef:a9:
0e:9a:9d:f3:55:f3:49:ab:76:96:59:20:ef:10:4f:
f7:8b:21:09:86:f9:5e:fc:2b:dd:64:b2:07:46:2d:
94:45:e0:73:13:2e:ec:8a:a0:11:d2:c9:7d:d8:0f:
b6:8f:d8:24:84:9f:58:43:9f:ca:84:5b:e7:a0:05:
4b:72:a9:53:5a:41:6a:ca:08:06:bb:13:1d:53:ee:
6d:0e:ba:d2:3c:bb:09:ac:6c:de:78:8e:35:92:5c:
85:9d:23:fe:5e:68:58:37:58:e7:9a:dc:ce:f5:c3:
45:9f:31:90:ed:ad:68:1c:8a:d4:a4:d5:88:10:eb:
5a:e0:b3:58:0b:40:62:6b:d5:1c:a0:68:f5:59:95:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:78:B5:A5:5F:FB:08:8E:69:F5:1B:25:6D:42:A4:CB:6B:08:A5:5F
X509v3 Authority Key Identifier:
keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/Uni1pV_7CI5p9RslbUKky2sIpV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.12.0/22
185.236.28.0/22
IPv6:
2a03:9000::/32
Signature Algorithm: sha256WithRSAEncryption
44:72:68:e8:46:f5:8b:64:c8:cd:8e:0c:63:6f:7f:b5:21:6a:
c3:31:8b:c9:1a:1e:c6:82:04:f5:f0:78:c4:e9:0f:1e:56:10:
ca:b8:ab:93:3d:f9:b3:dc:22:6a:00:b9:26:d3:63:73:ce:1c:
c2:0d:36:14:d9:77:bc:c4:5b:a2:40:db:a7:19:b8:f3:d5:1b:
21:ee:c9:ba:2a:65:1c:9b:db:0c:bf:ae:12:1d:2e:dd:3c:87:
b9:a3:db:2d:59:02:3b:5f:b8:0f:9e:53:b9:f7:ba:38:da:15:
ce:af:01:95:d9:9e:e1:81:0b:31:57:0f:1f:20:da:52:f1:62:
89:9d:9a:5f:cf:6f:70:e9:78:24:75:4e:db:b6:a5:f8:77:59:
d7:a5:a9:41:21:01:1e:98:3c:5a:22:70:96:e4:06:6a:12:88:
4f:71:da:45:af:0e:62:63:fa:74:89:9e:00:b1:b5:b0:95:5a:
c7:f1:03:56:a7:7e:a7:7c:b8:c6:32:44:08:ea:bf:ac:a3:af:
d0:c7:38:4a:c7:50:c6:4a:63:bb:6e:e3:8e:b2:d3:cb:4b:ac:
cb:c8:33:18:9d:49:fc:34:d6:22:11:c3:cf:73:aa:a0:f8:9a:
3e:2c:85:0f:33:0c:d3:ec:f3:42:26:45:06:ce:c5:91:15:5a:
b9:88:c8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 13:05:01 2024 by rpki-client on console-fra.rpki-client.org