Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/uGq1jpQliVUqZ_2S8AaiXve9Bu4.roa
File: uGq1jpQliVUqZ_2S8AaiXve9Bu4.roa (raw, json)
Hash identifier: s814d2KO9V5mWkDSdST9g6dCrrSAB2TwbmlsGhotE4A=
Subject key identifier: B8:6A:B5:8E:94:25:89:55:2A:67:FD:92:F0:06:A2:5E:F7:BD:06:EE
Certificate issuer: /CN=37778681361b1fff87ce398402efa63869e5bfd1
Certificate serial: 018CC9BCE8D587E87D933F5AD27EB5A4FF60
Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/uGq1jpQliVUqZ_2S8AaiXve9Bu4.roa
Signing time: Tue 02 Jan 2024 10:34:09 +0000
ROA not before: Tue 02 Jan 2024 10:34:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203971
IP address blocks: 185.118.48.0/24 maxlen: 24
185.118.51.0/24 maxlen: 24
185.118.48.0/22 maxlen: 22
185.118.49.0/24 maxlen: 24
185.118.50.0/24 maxlen: 24
185.222.93.0/24 maxlen: 24
185.222.94.0/24 maxlen: 24
185.222.95.0/24 maxlen: 24
185.222.92.0/22 maxlen: 22
185.222.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 06:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e8:d5:87:e8:7d:93:3f:5a:d2:7e:b5:a4:ff:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1
Validity
Not Before: Jan 2 10:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b86ab58e942589552a67fd92f006a25ef7bd06ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:89:bf:fb:18:50:23:fb:d3:81:cd:da:67:
23:c5:9e:0e:63:81:0d:04:55:66:ac:4b:f8:b4:c8:
6e:3f:1b:4f:e0:59:71:79:8a:d7:61:41:da:ba:f1:
f3:93:77:03:17:41:31:b5:f7:fa:20:9a:e1:9b:ab:
9f:72:2b:43:9b:7b:b7:42:18:2c:de:9c:fa:c9:8c:
fb:5a:bc:2d:50:cc:79:23:c7:62:fc:d6:cb:6d:72:
b2:b5:df:95:04:a4:a2:ef:1d:41:03:7e:cf:07:65:
d5:81:a2:e2:08:e2:e7:c6:a7:eb:2e:84:85:31:98:
5e:01:60:b2:a1:2d:da:6c:e5:56:03:a1:94:e2:d6:
3b:52:6b:3c:f1:b4:56:17:28:78:a1:f4:d0:b1:f4:
b8:e6:0c:ef:ff:5b:8b:5e:96:56:3c:f8:2b:5c:bb:
6a:26:52:80:f3:7e:0f:12:58:27:5f:95:25:b3:9a:
40:ce:65:20:af:1b:6d:56:9b:30:e3:2f:d8:17:18:
ca:06:43:81:3f:64:c9:4e:ce:87:78:59:4c:f8:52:
57:b2:f7:e5:f5:ce:69:24:d5:02:3b:04:e5:22:8e:
ed:47:4b:c1:c5:67:d9:d2:fd:50:b5:e3:1c:bc:d6:
a3:bb:fc:4c:5d:12:c0:0e:b2:43:2f:51:7d:89:5b:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6A:B5:8E:94:25:89:55:2A:67:FD:92:F0:06:A2:5E:F7:BD:06:EE
X509v3 Authority Key Identifier:
keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/uGq1jpQliVUqZ_2S8AaiXve9Bu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.48.0/22
185.222.92.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:ff:3a:23:42:9e:b6:73:1b:19:bf:1d:93:33:7b:0d:a4:b0:
48:9e:1b:a1:67:34:0e:e0:1b:e9:81:a1:3d:ad:88:be:38:74:
c0:04:07:85:a7:d2:69:7b:5d:11:a0:f4:a3:17:da:56:d5:29:
35:a6:f1:13:2e:3e:b5:84:c9:db:36:69:02:1d:29:b1:45:f4:
c4:6a:5a:73:db:93:00:ff:82:6f:be:f9:5a:25:b1:8f:bb:30:
ec:f1:9f:a3:f8:a5:d4:08:3b:cb:ef:fc:30:22:a6:b8:59:16:
4e:4c:dd:f1:c6:10:75:ed:bb:74:7b:c2:ba:12:b4:bb:ff:0e:
33:f9:c3:0b:7d:25:50:2d:9a:d1:3f:88:e6:9a:6a:8d:75:62:
92:20:59:58:cf:c7:4f:d6:72:63:a0:15:2d:31:ce:d0:b4:d8:
47:eb:b0:1b:80:3a:27:33:58:83:9e:6a:a5:a3:4d:a6:19:ce:
d4:03:d4:92:64:dc:34:60:12:dc:fc:2e:32:4c:e9:7a:63:87:
de:9e:8a:42:d7:00:3d:93:4d:d2:71:76:61:63:4a:48:99:4f:
de:91:6b:7c:70:3b:e8:1b:be:02:f6:e7:07:c4:8f:70:b5:3b:
3d:7b:0b:18:99:d7:ad:73:d3:3d:ff:76:36:9f:db:ef:af:d6:
03:af:79:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:30:09 2025 by rpki-client