Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/uBFEHclxBVpixV7qyLhX4ZQxJH0.roa
File: uBFEHclxBVpixV7qyLhX4ZQxJH0.roa (raw, json)
Hash identifier: yrSsEEiromFprrV+0Rvkgpd0YB9q+kTrRW3QenB2cYE=
Subject key identifier: B8:11:44:1D:C9:71:05:5A:62:C5:5E:EA:C8:B8:57:E1:94:31:24:7D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369F686ED2C16DC09BCFD391A747B44
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/uBFEHclxBVpixV7qyLhX4ZQxJH0.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207388
IP address blocks: 80.244.15.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 14:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f6:86:ed:2c:16:dc:09:bc:fd:39:1a:74:7b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b811441dc971055a62c55eeac8b857e19431247d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:a2:0e:3a:f2:6b:e1:6d:19:5d:e0:56:6d:
d9:5c:77:4c:2d:60:91:9a:f1:4c:15:85:c6:26:9d:
09:24:67:9d:a1:ce:2d:d9:60:e9:a2:3a:a7:9d:95:
4a:17:4b:7f:4c:af:17:5b:f6:7e:d0:51:85:b0:d1:
9b:4c:b4:41:a3:c2:f0:4d:99:f8:d3:3b:79:b2:f1:
43:27:44:9f:7f:f7:b4:17:fd:83:30:fe:cc:c5:1e:
2e:ab:2d:36:b1:4d:cf:2b:6a:77:bb:35:c6:71:70:
90:17:74:b7:a0:e5:6c:06:df:61:da:85:9e:2b:76:
cf:26:07:ba:10:54:6f:2a:01:85:9f:6d:b4:c3:49:
4a:0e:a0:87:fd:40:06:1a:39:f7:85:49:c6:3f:2d:
2a:58:bb:88:48:0a:c9:68:ea:77:9a:51:f5:33:6b:
39:94:79:99:6f:2c:de:23:50:11:11:c3:a0:10:ea:
bb:16:3e:05:ff:6a:d3:83:e8:df:d6:8a:b4:a0:a5:
a9:f0:ad:86:bb:49:32:c1:a1:e4:3a:cc:ea:7a:fd:
06:1c:0b:bc:01:05:c2:76:1e:dd:70:b2:cd:e2:42:
61:3f:60:b7:56:cf:d9:d6:19:9c:c9:91:ed:86:75:
67:51:18:32:21:6b:a1:1c:0a:e5:cb:79:c4:58:2d:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:11:44:1D:C9:71:05:5A:62:C5:5E:EA:C8:B8:57:E1:94:31:24:7D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/uBFEHclxBVpixV7qyLhX4ZQxJH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.15.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:48:d3:40:28:20:90:1b:57:e5:f7:8f:9a:ac:d5:58:78:dd:
d9:ff:40:09:c9:99:62:25:ee:90:86:3d:73:3a:1c:4c:05:b3:
9f:24:df:fd:da:68:86:fd:9f:5c:8d:4a:da:92:20:71:5a:0c:
35:72:7a:83:b3:00:84:9b:98:c8:2b:e3:9e:ee:77:94:a1:1e:
5d:60:4f:7f:01:05:27:0f:4b:e6:14:f7:4e:c8:cd:6f:9f:89:
cb:a0:c2:07:e4:e1:67:af:9f:2c:9a:ce:43:b4:0f:82:76:97:
57:01:40:b0:1a:55:eb:eb:b3:6c:7d:b0:27:0f:54:46:ac:ba:
dc:e5:94:42:b1:6f:28:3d:64:34:4a:a2:8a:0e:0d:a6:52:0c:
3c:fa:f1:3b:ed:be:96:e0:5a:d1:1e:37:57:bb:a7:92:77:1a:
60:f2:ff:6e:74:ca:8a:39:ae:46:71:44:d7:35:e2:fd:b7:24:
fa:54:3b:70:73:d4:d8:b9:08:ca:9f:9c:46:18:9e:f4:2f:c9:
57:7a:24:2f:dd:62:2b:df:6f:74:e3:c5:99:0f:a5:d9:bb:02:
2e:71:a5:9d:d1:d2:63:6b:a3:25:ac:20:89:f9:48:aa:15:11:
03:0f:e6:06:44:c9:89:8f:74:b1:4a:64:61:ba:d1:1d:f2:27:
f3:0e:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:28:03 2025 by rpki-client