Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/BE-Ug-hv9uvCaQhGpjhAeIFLb1k.roa
File: BE-Ug-hv9uvCaQhGpjhAeIFLb1k.roa (raw, json)
Hash identifier: B5eOWshJSmrWw0HY0+liKBLskjuLJprxt/c5G6/L5zI=
Subject key identifier: 04:4F:94:83:E8:6F:F6:EB:C2:69:08:46:A6:38:40:78:81:4B:6F:59
Certificate issuer: /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial: 0194AD82522ED420E6C9FDDCE18B2B798D9E
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/BE-Ug-hv9uvCaQhGpjhAeIFLb1k.roa
Signing time: Tue 28 Jan 2025 15:23:06 +0000
ROA not before: Tue 28 Jan 2025 15:23:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12779
IP address blocks: 86.105.14.0/24 maxlen: 24
91.245.234.0/24 maxlen: 24
2a0c:79c0:2::/48 maxlen: 48
2a0c:79c0:4::/48 maxlen: 48
2a0c:79c0:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 Jan 2025 22:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ad:82:52:2e:d4:20:e6:c9:fd:dc:e1:8b:2b:79:8d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
Validity
Not Before: Jan 28 15:23:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=044f9483e86ff6ebc2690846a6384078814b6f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:5b:d1:00:a3:74:8d:2f:3f:96:c9:ae:09:
e0:bd:3f:36:c0:98:87:d5:4c:14:b2:69:88:a2:c3:
63:bb:0c:42:19:89:11:fa:79:32:e3:9a:7c:09:71:
b5:cb:ac:4e:d1:de:da:2e:1f:b4:36:77:17:ad:9d:
02:60:23:89:bc:14:39:50:05:3c:08:a0:02:a9:2b:
13:62:5a:3d:fa:c2:28:38:af:bd:30:b6:e0:b4:40:
77:98:73:a2:24:cf:a1:ee:a1:7f:66:05:58:32:bd:
36:ae:5b:b5:a3:21:ba:34:91:7a:4c:4e:f7:98:ff:
c9:ec:74:19:d9:7f:d6:50:77:e7:51:e4:ac:93:41:
e2:cc:5a:d9:78:10:05:a2:e8:47:16:bb:e4:7d:bf:
00:1a:12:4f:d6:3a:da:0b:49:75:b0:87:5f:3d:ee:
c1:cd:e4:5b:75:4c:c4:3d:13:87:7c:d7:d1:63:b2:
b3:cd:22:5c:e6:66:12:71:b0:a8:0f:ff:a2:0e:bf:
92:88:ad:24:3b:41:11:2b:b2:36:f3:0b:d6:e5:5d:
1d:d2:0c:5d:a2:06:f2:f3:fc:51:dd:26:66:11:f5:
81:44:29:15:03:2e:2d:32:4d:cb:64:5c:ef:a3:bb:
3f:c0:88:ae:7e:82:b3:46:03:65:e2:36:52:ab:5a:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4F:94:83:E8:6F:F6:EB:C2:69:08:46:A6:38:40:78:81:4B:6F:59
X509v3 Authority Key Identifier:
keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/BE-Ug-hv9uvCaQhGpjhAeIFLb1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.14.0/24
91.245.234.0/24
IPv6:
2a0c:79c0:2::/48
2a0c:79c0:4::/48
2a0c:79c0:7::/48
Signature Algorithm: sha256WithRSAEncryption
24:30:b8:03:3f:bb:92:39:8f:b8:cd:cc:d6:75:e4:6d:4c:dc:
4c:d6:8c:49:b0:ac:c2:06:7e:18:f1:fc:84:02:69:95:fb:fe:
0b:57:0d:49:d3:5f:62:05:8b:c6:44:3f:83:ba:76:17:b3:37:
41:33:6f:2e:fc:e8:44:4e:61:35:1b:65:9c:37:e0:8d:36:0f:
be:d2:78:7c:e3:d4:73:08:f0:5f:34:a4:c2:38:08:f0:d6:bf:
24:de:e6:c0:e1:2a:9b:5b:c1:3c:5b:3d:41:cf:d9:48:5c:25:
e5:58:c5:16:c5:8b:c9:25:26:0b:51:79:a0:ca:10:0e:40:46:
ef:26:f4:b4:7a:57:d2:55:ff:86:b1:d4:02:36:35:a9:f4:bb:
ee:1f:d7:69:23:2b:99:f8:86:bc:13:18:80:88:0a:95:3f:2a:
94:aa:de:78:f6:e1:ba:ea:45:ce:39:46:35:80:90:31:18:a6:
52:d1:76:44:76:15:4a:ca:c4:6d:0a:e7:07:8b:09:93:d5:95:
9a:4f:dc:98:0d:12:8f:4f:09:fb:6f:39:78:24:7b:bc:0f:db:
fb:4c:ac:32:58:60:b6:24:1b:38:0d:cf:fa:e1:67:11:62:aa:
67:d4:ce:d9:97:6e:f6:d5:da:3c:60:5b:06:ea:d3:dd:df:bb:
32:d0:81:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:01:37 2025 by rpki-client