Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uav6s0Cm1u92DpKbc7FgEM3PhUY.roa
File: uav6s0Cm1u92DpKbc7FgEM3PhUY.roa (raw, json)
Hash identifier: 1D+hUFTzKP5Lq1sym5LzjBJWvVPlhM80O3fhrr83rJM=
Subject key identifier: B9:AB:FA:B3:40:A6:D6:EF:76:0E:92:9B:73:B1:60:10:CD:CF:85:46
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01951836DBD20A48D581072C901F8FD5DC92
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uav6s0Cm1u92DpKbc7FgEM3PhUY.roa
Signing time: Tue 18 Feb 2025 08:40:03 +0000
ROA not before: Tue 18 Feb 2025 08:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56755
IP address blocks: 93.88.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 13:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:36:db:d2:0a:48:d5:81:07:2c:90:1f:8f:d5:dc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 18 08:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9abfab340a6d6ef760e929b73b16010cdcf8546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:25:bc:0f:47:0a:60:47:c4:80:74:95:aa:
9d:18:1b:9c:0c:5f:43:a7:05:d5:f2:72:26:6a:99:
e6:cf:9d:0c:f8:c9:03:fe:10:42:db:73:11:82:6a:
7f:f0:69:03:52:05:22:d6:aa:0e:52:ba:26:1f:1c:
73:5a:1d:8e:c0:d0:89:bf:4d:2a:a3:60:fb:64:45:
eb:d0:ef:41:43:0e:c2:1f:6e:f7:4d:08:8a:a2:98:
f5:dc:61:6d:24:38:f4:5a:2b:c6:73:2b:8a:a4:8d:
7d:59:3d:33:dd:ee:70:43:54:e5:c9:e1:a6:d0:d5:
64:57:3a:c3:95:41:0a:ab:3e:cc:c2:4b:ff:31:f1:
44:6b:bc:a5:7e:61:4c:55:e3:e9:53:e8:97:fc:4f:
a0:3a:ed:58:ec:4e:84:1d:82:b8:49:b6:a3:2c:cf:
3b:e7:9a:09:1f:3e:63:ad:d0:54:8f:3d:81:4d:14:
8a:c9:88:99:cc:53:f7:48:e9:2e:a1:98:cc:2b:d3:
22:c4:73:11:ca:05:7b:68:f9:d8:f9:ee:e1:56:63:
a5:3e:c7:5d:93:55:26:9e:fa:bf:b4:1f:26:c9:08:
4e:69:bd:75:81:57:11:27:bb:dc:53:33:ec:52:ae:
ce:1a:4d:d4:57:be:df:02:73:77:4d:fd:cb:c7:12:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AB:FA:B3:40:A6:D6:EF:76:0E:92:9B:73:B1:60:10:CD:CF:85:46
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uav6s0Cm1u92DpKbc7FgEM3PhUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.203.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:c6:27:78:d0:5f:af:d2:82:5e:2b:fa:ba:8d:75:d5:61:e3:
2a:40:70:7e:91:d5:c0:0d:e6:8b:75:db:0b:7f:8d:6c:94:1f:
90:2b:98:f1:f5:80:aa:52:fc:be:83:f1:ba:98:61:ca:e8:f9:
8f:26:e7:03:ed:0e:7e:99:d1:2d:26:ea:0a:8e:e5:bf:24:26:
32:46:6e:18:fc:ba:bf:c1:f0:09:2b:59:07:da:30:17:14:7f:
85:4e:3e:2d:87:c8:79:cf:6e:65:6e:7e:65:05:8c:62:8d:10:
81:23:1b:cb:2b:88:ee:21:8a:3b:ba:d3:43:bc:8c:9f:7c:3c:
b6:6c:7a:d6:4a:da:ca:8c:bd:2e:62:1d:ae:ad:61:33:04:6a:
cb:50:7c:22:43:36:4e:f1:b3:d8:26:99:90:82:df:7c:ae:7f:
ed:25:7e:ce:56:18:d1:23:f1:97:b3:b4:26:49:9b:c0:64:a8:
c1:b6:0e:58:af:6a:3a:cd:89:e5:88:13:3c:df:3f:12:83:f1:
3b:66:ac:83:5d:70:86:ae:ef:2a:fa:5b:20:4f:9c:fb:b6:2b:
77:a1:bf:30:5f:6b:69:f5:c2:31:a3:d5:47:2a:93:85:b0:a1:
32:04:be:36:a2:4b:12:df:d3:08:ae:f9:ee:51:3f:d9:7f:15:
80:97:d7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:54:03 2025 by rpki-client