Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/UxVeKJGgaOtrLnGmjywBXwoP1Tw.roa
File: UxVeKJGgaOtrLnGmjywBXwoP1Tw.roa (raw, json)
Hash identifier: OE1LL2kOJNUWiPm8uGl361Tq5ZZgzefn1HuJottA8v0=
Subject key identifier: 53:15:5E:28:91:A0:68:EB:6B:2E:71:A6:8F:2C:01:5F:0A:0F:D5:3C
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 018CC5DC7C5367A8D0D04B274C306D94B7E3
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/UxVeKJGgaOtrLnGmjywBXwoP1Tw.roa
Signing time: Mon 01 Jan 2024 16:30:10 +0000
ROA not before: Mon 01 Jan 2024 16:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15868
IP address blocks: 213.222.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:7c:53:67:a8:d0:d0:4b:27:4c:30:6d:94:b7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 16:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53155e2891a068eb6b2e71a68f2c015f0a0fd53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:fb:ae:ba:aa:68:a8:28:eb:a4:77:91:bc:
53:10:d4:70:4b:b7:f2:c2:66:e0:92:c3:19:e3:c8:
ed:ab:08:63:91:f5:c1:12:c6:0a:07:8b:90:fc:fd:
7d:49:89:8c:a5:56:17:0a:f3:ef:e4:15:ba:a5:67:
f2:ff:a7:82:dd:e0:27:fb:94:cb:b6:7a:03:08:1a:
bd:db:65:ee:5c:e9:8d:0a:b7:a0:d4:96:6a:54:6a:
a0:41:a6:33:42:74:ce:00:89:9d:64:57:69:26:0d:
60:e9:ed:3b:b6:06:25:47:5e:47:34:d1:e2:b9:1a:
f0:8c:5f:a9:f5:e3:d1:ce:57:b7:7a:29:c0:62:6a:
9c:49:0b:fd:48:93:d8:73:66:d1:59:6c:f1:c4:a7:
04:9c:55:b8:9d:7f:3c:64:2e:af:e2:92:08:5d:46:
96:66:5f:21:4a:ad:41:f5:0e:1d:eb:06:45:7d:5c:
fd:91:bf:4b:bc:5e:63:35:d8:8e:b7:f3:66:aa:b2:
dc:30:35:ec:9e:96:0f:fa:0d:d0:c4:88:c5:22:f3:
8d:99:f5:14:3b:93:e7:2f:2e:5b:f4:57:54:d8:cd:
df:fb:b1:e6:bb:16:c7:85:5c:76:b7:22:f6:45:2a:
f0:2b:15:d3:a0:65:42:f1:8d:8b:24:69:89:16:2a:
30:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:15:5E:28:91:A0:68:EB:6B:2E:71:A6:8F:2C:01:5F:0A:0F:D5:3C
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/UxVeKJGgaOtrLnGmjywBXwoP1Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.222.228.0/22
Signature Algorithm: sha256WithRSAEncryption
35:38:88:11:6f:3f:ab:96:cc:bd:2a:b5:db:11:c3:ce:30:18:
91:a8:9d:02:c3:26:b4:c9:e4:4a:cc:e0:ee:9d:53:18:ae:2a:
d4:a1:00:ac:7a:f4:7b:33:68:0d:39:7b:aa:17:e5:a2:a5:e3:
c6:f8:36:9e:9f:d8:e7:b9:22:76:82:0a:a9:f4:63:03:9f:79:
b5:91:ef:7d:47:1f:c3:21:23:4d:4c:ba:e6:e6:34:2a:15:05:
af:6f:47:5a:91:34:34:37:ab:28:4b:5b:aa:18:e4:37:91:37:
da:2a:19:f2:00:fe:eb:ff:6d:6a:ac:ff:cd:09:99:98:9f:de:
6e:e2:05:3a:e6:76:bf:d9:b9:2c:6e:57:6d:ac:c6:08:fb:ef:
44:6a:38:bd:78:5d:f7:a8:c2:3e:5b:ff:db:28:9e:a5:66:97:
57:73:2f:2d:be:bf:ce:ef:8e:e4:c6:51:9b:b6:6e:89:e0:da:
a0:72:b5:65:ca:65:6e:75:0a:df:2a:ab:fc:e2:9c:73:82:54:
04:43:b6:32:d3:e5:53:6f:cc:c8:3e:2b:40:63:98:56:db:8b:
8e:d6:a4:b6:2e:0e:37:0a:12:4c:83:47:6e:f3:dd:3c:28:32:
9b:35:30:48:7a:d9:9f:e9:f1:4b:ff:48:08:f7:2a:22:19:6a:
5a:e3:0e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:42 2025 by rpki-client