Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/UvqK_DX7rWGwVO015iiJ8HfpDZg.roa
File: UvqK_DX7rWGwVO015iiJ8HfpDZg.roa (raw, json)
Hash identifier: dsU2Yn0zXD52rDI9siVdAY4y2U9VBjUWixXZsZIHYTU=
Subject key identifier: 52:FA:8A:FC:35:FB:AD:61:B0:54:ED:35:E6:28:89:F0:77:E9:0D:98
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 018CC8DE4B8F817C0AF9FF811C2E066C0E01
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/UvqK_DX7rWGwVO015iiJ8HfpDZg.roa
Signing time: Tue 02 Jan 2024 06:31:00 +0000
ROA not before: Tue 02 Jan 2024 06:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210993
IP address blocks: 185.221.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:4b:8f:81:7c:0a:f9:ff:81:1c:2e:06:6c:0e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 2 06:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52fa8afc35fbad61b054ed35e62889f077e90d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:55:7a:2e:e9:9c:fb:50:42:ff:eb:a0:d6:
3b:f8:f9:ec:af:a7:19:dd:ff:d9:a3:02:32:19:5a:
4d:bd:49:0e:03:9b:43:74:82:b1:cc:e2:e6:59:7f:
11:6d:05:20:9e:ec:d7:72:4f:65:d1:83:72:c9:3d:
0d:24:f1:39:a1:d5:86:3f:95:48:8c:c7:2d:09:0b:
d4:50:d5:9f:47:24:42:9a:98:6d:be:2f:6b:53:cc:
ca:0d:41:06:da:9a:2f:a7:d9:7a:78:e7:4d:0a:6a:
03:d7:c2:85:fc:8e:f6:e9:9c:03:0e:3c:fd:18:2f:
bb:c5:16:7a:34:65:31:da:04:6e:db:ff:b8:f1:d3:
83:b0:04:b4:a3:0a:5b:d2:d5:db:01:32:0f:7e:ab:
b3:40:92:51:08:e3:e8:c0:6a:5e:f0:71:e2:37:58:
a0:5e:e9:ad:e4:88:c3:c5:23:6f:97:5e:15:85:d4:
8e:9c:1d:14:d3:f2:6a:0a:7c:39:e4:30:34:9b:15:
75:89:4f:3c:11:31:36:7f:03:03:47:c0:98:95:2c:
18:a0:b2:74:33:09:02:00:80:6c:5b:75:f7:8a:1e:
a6:fc:bf:3c:ae:31:ac:2b:b8:c2:1b:94:08:83:76:
8d:cd:b4:51:60:f9:52:ad:2f:3a:c3:3f:d6:33:96:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FA:8A:FC:35:FB:AD:61:B0:54:ED:35:E6:28:89:F0:77:E9:0D:98
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/UvqK_DX7rWGwVO015iiJ8HfpDZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b6:8a:46:fa:dd:87:70:52:d8:dc:dc:1c:1c:53:ef:2e:63:
3d:15:ca:e2:b2:a0:f3:96:90:67:1f:bc:0f:15:3d:91:13:6a:
d5:7a:8c:de:9d:09:2c:ae:3e:fa:26:89:47:c5:1c:ba:b2:07:
bc:9b:92:47:f7:94:26:44:9e:b7:9c:d3:0c:03:04:e2:6f:91:
28:17:c5:c3:6b:8f:d5:14:b6:3b:8b:6d:d9:ff:60:0c:26:e7:
2a:b6:e5:08:eb:38:48:7e:fb:1e:da:15:3c:f1:e3:0f:5c:a4:
e8:63:f8:62:8f:73:5f:25:7e:44:dc:3f:47:71:05:fc:27:57:
5f:20:59:07:9a:5a:a9:52:94:72:97:54:9d:c6:7d:f9:b7:00:
99:d4:62:d4:b0:6d:6a:f9:1b:36:68:b1:d6:c3:d8:c2:90:0c:
11:f0:71:e4:34:95:f6:27:fd:4e:67:e4:ed:76:de:6d:dc:3f:
8b:64:38:96:47:08:56:d9:a0:9f:cc:fe:64:5a:ce:bc:73:c9:
80:02:b0:36:8b:d7:82:15:21:ff:3e:dc:aa:b6:51:dc:d7:15:
b3:34:57:b2:ae:e2:ab:f8:4c:64:35:29:cd:9c:42:1e:91:66:
a3:7c:1b:9f:ea:17:15:28:18:68:22:b6:c1:56:ef:cc:36:7f:
30:3d:1d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:15 2025 by rpki-client