Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/0UZ9urkUakP4_KSKwVaRpgwyOgY.roa
File: 0UZ9urkUakP4_KSKwVaRpgwyOgY.roa (raw, json)
Hash identifier: L5ReEriC75eRgH0rq1aQZCUZqy9p+PzVUXxMUuy4bMs=
Subject key identifier: D1:46:7D:BA:B9:14:6A:43:F8:FC:A4:8A:C1:56:91:A6:0C:32:3A:06
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0194221FFE21FDAC6A4A02BD5BE4C91F70F1
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/0UZ9urkUakP4_KSKwVaRpgwyOgY.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 212.16.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 12:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fe:21:fd:ac:6a:4a:02:bd:5b:e4:c9:1f:70:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1467dbab9146a43f8fca48ac15691a60c323a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:aa:54:90:ad:30:5f:c7:17:74:fd:d3:47:
ae:8e:cb:e5:91:11:30:f1:21:5c:60:71:10:b3:04:
81:a3:1b:f8:0a:09:d1:20:d0:03:dd:23:02:7a:9c:
7f:9e:17:80:7d:38:df:8f:88:ec:0b:14:6e:b1:42:
e6:ca:2e:c6:b5:e1:db:6f:6b:4a:f8:1a:b1:85:45:
95:d4:98:09:fc:14:43:f6:f4:5e:5f:7c:0b:49:6b:
f9:df:b7:f2:26:e9:45:c8:97:0b:a2:cd:ab:40:55:
cd:e2:a2:aa:41:49:08:58:f1:41:69:a9:e6:fd:c4:
22:53:25:22:31:41:9d:10:ed:46:5d:1b:38:38:31:
e2:06:5a:e6:33:fb:07:d1:68:9b:c4:b3:09:50:d4:
aa:5a:85:ff:91:a1:1a:05:32:ef:8b:63:3f:5c:07:
47:ea:32:1f:f6:b7:bb:8e:98:07:92:60:86:f7:e3:
ee:6f:71:97:1a:12:e5:14:72:9b:0e:59:ce:73:33:
1b:f2:6e:25:8c:fb:69:6a:70:e7:26:a3:78:35:75:
bf:08:24:c2:03:d2:17:2c:77:1b:ed:34:e2:11:17:
e1:24:2c:47:2b:61:f1:10:10:30:d0:c8:81:8b:41:
aa:5c:0d:94:44:bb:25:ff:fd:0a:71:16:a6:3d:40:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:46:7D:BA:B9:14:6A:43:F8:FC:A4:8A:C1:56:91:A6:0C:32:3A:06
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/0UZ9urkUakP4_KSKwVaRpgwyOgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f4:ee:31:21:8b:70:f3:a4:36:3a:9c:c5:ef:f4:6b:fd:1c:
40:83:35:7c:3b:06:85:3a:3d:41:57:9d:13:b5:a5:54:40:5c:
b1:40:b7:cf:bf:7e:f3:5f:40:5c:83:10:d1:87:ce:a7:c0:fe:
04:c0:4a:d2:2e:fe:64:c1:1d:b6:82:bc:81:47:41:4e:5e:51:
fe:05:69:70:36:80:b5:f2:93:b9:95:ee:12:c0:b6:51:54:ba:
3b:f6:d9:d6:86:2d:99:56:33:7d:bc:a8:7a:c6:c1:f5:dd:2b:
ff:de:db:dd:7f:4a:6e:05:fd:f9:c2:7c:aa:1c:02:47:26:1a:
b5:72:29:d3:fe:e7:73:49:f6:74:14:5e:20:74:14:94:b1:a6:
b2:a2:66:5c:22:4e:63:c5:bb:5e:6d:7e:c5:82:22:be:b7:d8:
22:82:d2:03:92:36:7a:23:6f:a1:a9:82:6d:04:db:f1:91:a4:
80:dd:d7:d5:b6:92:ea:51:98:43:38:72:89:84:ce:92:7d:35:
a6:67:b2:21:b5:7c:82:72:9e:f3:f0:5d:86:66:42:f5:a6:0f:
b8:e4:e0:b0:e5:0e:89:74:a9:33:e3:c9:a0:dc:17:b7:c1:7f:
8f:78:8b:7b:0c:6c:f4:98:8e:f4:57:3d:6a:df:ae:00:8d:cf:
2b:1b:2d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:51:39 2025 by rpki-client