Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uyUSfT7KqhyV3Hzr8tdYVuVVxyM.roa
File: uyUSfT7KqhyV3Hzr8tdYVuVVxyM.roa (raw, json)
Hash identifier: mMpVFKtNBqsFG7qbP6ygYpmxx0C6PaGuFPTOwUWIL5U=
Subject key identifier: BB:25:12:7D:3E:CA:AA:1C:95:DC:7C:EB:F2:D7:58:56:E5:55:C7:23
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194BD617048AECC77D30E181E752B75DC8D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uyUSfT7KqhyV3Hzr8tdYVuVVxyM.roa
Signing time: Fri 31 Jan 2025 17:21:07 +0000
ROA not before: Fri 31 Jan 2025 17:21:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 93.88.204.0/24 maxlen: 24
93.88.205.0/24 maxlen: 24
93.88.206.0/24 maxlen: 24
93.88.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 18:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:61:70:48:ae:cc:77:d3:0e:18:1e:75:2b:75:dc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 31 17:21:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb25127d3ecaaa1c95dc7cebf2d75856e555c723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:09:57:49:8b:2f:71:ee:f9:4c:3b:c5:85:75:
cf:ca:dd:91:f3:bb:35:db:a2:6c:bd:4d:eb:ad:40:
fc:ec:8c:df:75:f0:77:37:29:0e:4f:ea:06:d3:f4:
77:01:3f:6a:74:6d:c3:3e:72:cf:71:df:06:5e:88:
6b:d3:92:59:83:08:a3:70:36:c3:b7:f3:02:55:07:
e1:1d:b4:d7:74:ba:35:44:1b:bd:b4:c0:35:92:29:
04:f1:41:ba:2a:6c:90:62:93:b0:c7:2d:63:1d:24:
7e:ba:54:06:03:42:ac:ed:2b:48:f0:f3:01:04:7e:
d7:34:2a:de:d9:ca:db:41:cb:b9:54:61:d7:75:f0:
30:8b:26:3f:c7:06:51:8c:c8:62:84:ee:95:61:1e:
83:f1:a4:e6:f8:26:51:d3:d6:e3:21:d1:d3:3a:d5:
6f:48:57:17:7f:54:8d:4b:56:74:25:1a:93:49:fc:
d5:2e:02:de:6b:40:58:4f:fb:33:6b:74:b1:c9:7f:
44:ef:62:89:9c:fb:ed:d4:75:27:55:f0:ed:9f:5b:
f3:3c:8e:62:20:a8:ca:cd:ee:40:ce:2c:8b:63:ef:
58:20:7e:8e:59:72:f8:d4:48:29:38:6a:82:c3:d1:
48:4b:57:1a:20:bd:41:4a:74:36:62:6a:7a:3d:61:
e4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:25:12:7D:3E:CA:AA:1C:95:DC:7C:EB:F2:D7:58:56:E5:55:C7:23
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uyUSfT7KqhyV3Hzr8tdYVuVVxyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.204.0/22
Signature Algorithm: sha256WithRSAEncryption
34:84:e4:a2:62:92:87:9e:03:b5:51:9e:5a:da:9b:ec:db:f2:
6e:3c:ec:e6:ae:b8:d1:5c:e4:95:99:62:65:1d:06:be:b2:f4:
72:8f:fc:76:8d:21:38:9c:19:05:38:a9:71:a8:52:2d:42:91:
b2:28:c1:25:f8:3a:78:a2:e3:f1:89:38:11:7d:4e:47:53:41:
ef:c3:a2:fa:11:e9:ca:a1:f3:1f:5b:7d:55:5f:a9:33:9c:0f:
2a:5a:f9:2e:a3:92:d4:39:a9:31:51:e2:c3:6e:a4:26:6a:5a:
9d:46:14:5d:00:15:64:b6:63:c1:de:84:a5:ed:64:5f:fd:d7:
ec:6b:ea:86:bb:a9:b5:4c:6f:14:64:67:1e:39:10:e5:c0:a2:
12:be:d4:5b:26:9c:52:cf:ea:10:28:81:6c:87:c5:b1:f1:0a:
63:ff:51:68:fa:d5:1a:c7:d3:45:c2:2d:6e:c0:65:7e:d8:f6:
a0:c8:e9:ef:c0:40:8a:e0:fd:49:aa:f5:02:0e:d9:41:e9:2f:
d2:cb:1c:80:d3:82:7c:41:aa:71:94:df:ce:3f:e6:c4:5b:e8:
76:ff:56:f4:91:00:d4:54:f8:19:0f:f0:9a:45:b5:b7:9a:4d:
bc:49:1e:db:d1:63:86:b4:fb:46:cd:a8:b2:6d:87:55:30:ea:
d4:98:f4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:45:53 2025 by rpki-client