Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/UxujQRy1ic2Xdp7bTyoYP9I6JW0.roa
File: UxujQRy1ic2Xdp7bTyoYP9I6JW0.roa (raw, json)
Hash identifier: iXnEaBLrymbn1SjzFqUfD/xHxSXcpnAuE6Kk69Oagjg=
Subject key identifier: 53:1B:A3:41:1C:B5:89:CD:97:76:9E:DB:4F:2A:18:3F:D2:3A:25:6D
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01912DBF698CE69DA9E016356645ECEBDC6D
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/UxujQRy1ic2Xdp7bTyoYP9I6JW0.roa
Signing time: Wed 07 Aug 2024 16:50:04 +0000
ROA not before: Wed 07 Aug 2024 16:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44050
IP address blocks: 5.101.89.0/24 maxlen: 24
45.156.212.0/22 maxlen: 22
95.215.0.0/22 maxlen: 24
188.143.128.0/17 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78::/32 maxlen: 48
2a00:1d78:666::/64 maxlen: 64
2a0c:8700::/29 maxlen: 29
2a0d:8fc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 08 Aug 2024 15:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2d:bf:69:8c:e6:9d:a9:e0:16:35:66:45:ec:eb:dc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 7 16:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=531ba3411cb589cd97769edb4f2a183fd23a256d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:bf:41:9a:67:0f:35:94:ce:80:c7:f8:0e:
3a:a1:44:5d:fd:bc:5d:5a:54:65:bf:d7:90:b7:99:
aa:e0:83:3f:1a:f8:8e:04:78:ac:2a:48:25:ca:e9:
73:05:31:b6:ee:94:de:c8:a5:95:86:b9:a3:1a:d4:
d2:08:2f:7e:2b:85:ad:8f:b9:40:e6:a8:33:82:7f:
2a:d5:25:5d:18:f7:04:fb:e3:b6:ea:82:89:36:47:
3f:03:bd:2b:ba:1a:b1:ab:d3:c6:a4:62:46:8f:57:
2b:c3:ed:69:6a:fd:85:a8:76:eb:20:1a:67:3d:9f:
31:17:2d:0e:03:7d:d9:63:92:a4:6b:cb:bf:6b:15:
91:34:69:dd:70:14:91:ec:63:bc:d8:73:f9:49:33:
9a:5d:16:ac:db:26:47:34:77:20:5c:c4:18:c8:5c:
d5:10:2e:f2:eb:03:89:10:99:9f:3d:a6:f4:8b:7c:
5d:7a:4c:ef:a8:cc:85:63:b3:bd:4f:09:5f:ca:60:
09:7e:80:a6:45:4e:73:7d:dc:14:13:9e:73:7b:18:
55:ca:dc:9a:cf:68:18:8c:b8:d3:99:5e:7d:38:de:
18:e5:09:e3:34:c9:d2:c1:63:89:88:f0:74:c4:7f:
e5:e8:b4:2b:81:8a:84:25:26:2c:32:4d:2f:a9:09:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1B:A3:41:1C:B5:89:CD:97:76:9E:DB:4F:2A:18:3F:D2:3A:25:6D
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/UxujQRy1ic2Xdp7bTyoYP9I6JW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.89.0/24
45.156.212.0/22
95.215.0.0/22
188.143.128.0/17
195.2.240.0/23
IPv6:
2a00:1d78::/32
2a0c:8700::/29
2a0d:8fc0::/29
Signature Algorithm: sha256WithRSAEncryption
c2:5b:8a:e7:96:75:f8:19:43:ff:ea:af:7e:c3:37:21:f7:dc:
1d:82:13:36:fe:90:90:a6:56:39:8b:86:8e:e6:c3:3a:60:50:
8a:6d:36:8b:54:50:e1:f1:75:50:1c:a0:67:90:d8:b6:c0:31:
25:32:24:8e:2b:f7:b0:49:47:94:80:0e:2f:33:e3:4c:d2:54:
ec:12:98:84:13:00:e3:5a:08:f8:cd:e5:b8:d4:1b:e0:bd:a4:
b6:c0:d9:52:bb:0d:57:5e:27:45:af:9e:31:c9:dd:e6:78:46:
8a:bf:46:48:85:0d:32:01:2f:fa:9f:70:a1:6c:00:6f:e9:b7:
eb:1f:91:a1:dc:9b:f2:c2:9d:3e:8e:85:87:de:f1:d5:82:b9:
dd:10:b3:af:9f:2f:9d:9c:13:d5:5d:1a:49:63:d0:bb:5e:11:
6a:40:88:d5:0b:bb:ea:2d:a0:7c:0d:2e:69:ba:7e:e6:96:d5:
4e:ae:f8:93:00:9d:18:67:cf:a1:9b:4d:ca:8a:f4:30:f2:8a:
4b:29:de:c4:78:58:27:0d:f2:19:72:fe:4c:e8:b2:4b:64:c8:
2b:1d:3e:81:2a:8c:bf:70:a5:13:17:5a:9a:d9:a7:d9:05:64:
fa:77:8c:b0:9c:63:c4:e5:73:93:9f:3a:29:98:d4:97:28:ac:
b9:a6:ce:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 18:46:30 2024 by rpki-client on console-fra.rpki-client.org