Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/UlWlwSVJJOp8clN8WACvC7a8Yrs.roa
File: UlWlwSVJJOp8clN8WACvC7a8Yrs.roa (raw, json)
Hash identifier: 3WtuG93JzhR2i57yTtv8liNt66qHzy4c7UhHixIk0AM=
Subject key identifier: 52:55:A5:C1:25:49:24:EA:7C:72:53:7C:58:00:AF:0B:B6:BC:62:BB
Certificate issuer: /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Certificate serial: 018EEB9E554463D5E5BB16B4A7E0A0C0D138
Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/UlWlwSVJJOp8clN8WACvC7a8Yrs.roa
Signing time: Wed 17 Apr 2024 10:33:26 +0000
ROA not before: Wed 17 Apr 2024 10:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28909
IP address blocks: 213.167.0.0/24 maxlen: 24
213.167.1.0/24 maxlen: 24
213.167.2.0/24 maxlen: 24
213.167.3.0/24 maxlen: 24
213.167.4.0/24 maxlen: 24
213.167.5.0/24 maxlen: 24
213.167.6.0/24 maxlen: 24
213.167.7.0/24 maxlen: 24
213.167.8.0/24 maxlen: 24
213.167.9.0/24 maxlen: 24
213.167.10.0/24 maxlen: 24
213.167.11.0/24 maxlen: 24
213.167.12.0/24 maxlen: 24
213.167.13.0/24 maxlen: 24
213.167.14.0/24 maxlen: 24
213.167.15.0/24 maxlen: 24
213.167.16.0/24 maxlen: 24
213.167.17.0/24 maxlen: 24
213.167.18.0/24 maxlen: 24
213.167.19.0/24 maxlen: 24
213.167.20.0/24 maxlen: 24
213.167.21.0/24 maxlen: 24
213.167.22.0/24 maxlen: 24
213.167.23.0/24 maxlen: 24
213.167.24.0/24 maxlen: 24
213.167.25.0/24 maxlen: 24
213.167.26.0/24 maxlen: 24
213.167.27.0/24 maxlen: 24
213.167.28.0/24 maxlen: 24
213.167.29.0/24 maxlen: 24
213.167.30.0/24 maxlen: 24
213.167.31.0/24 maxlen: 24
2a0a:6740::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:9e:55:44:63:d5:e5:bb:16:b4:a7:e0:a0:c0:d1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Validity
Not Before: Apr 17 10:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5255a5c1254924ea7c72537c5800af0bb6bc62bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7e:85:ab:13:4e:03:be:fc:7c:92:8e:c5:e6:
00:94:6f:8a:0c:98:c6:58:b5:12:15:51:d3:8a:86:
b6:bf:1a:36:31:f8:ef:ab:4e:b8:11:27:e8:02:1f:
cb:37:83:8d:d8:b3:03:6e:cd:cb:56:97:83:3a:8a:
b4:e4:70:b1:58:c6:de:fb:fa:93:6c:73:9b:69:22:
49:80:f1:83:33:3a:03:f5:f1:9d:79:5d:34:36:e3:
b6:f4:bc:27:ca:28:ed:18:02:b1:a2:01:3d:d6:75:
d5:d5:d1:44:2e:af:d2:7b:d2:7e:51:5f:44:68:e0:
a1:bc:33:c6:44:c8:d7:1c:3c:3a:26:d2:00:29:f8:
17:5a:5f:08:97:04:00:e3:43:c1:b0:28:e9:a7:ec:
50:51:4d:94:39:2a:5b:57:40:0e:68:2e:73:12:26:
a6:e1:82:d7:b1:5d:23:50:7f:0d:bc:13:3d:94:e3:
6f:71:87:5d:5c:ba:d9:66:fd:9b:f8:2c:22:57:5e:
b3:f8:be:17:99:93:11:db:49:ee:82:17:a2:c5:5b:
62:3f:f6:8e:d3:cf:38:7f:e4:43:23:07:70:69:59:
5b:f8:79:72:0f:b9:f9:4e:c8:f6:b7:c0:c7:2d:3a:
9d:ea:02:f4:1c:cb:bf:f2:c9:d7:56:28:67:10:93:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:55:A5:C1:25:49:24:EA:7C:72:53:7C:58:00:AF:0B:B6:BC:62:BB
X509v3 Authority Key Identifier:
keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/UlWlwSVJJOp8clN8WACvC7a8Yrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.167.0.0/19
IPv6:
2a0a:6740::/32
Signature Algorithm: sha256WithRSAEncryption
40:8c:80:63:dd:71:e2:8d:51:fe:dd:6e:9e:fe:e3:f2:9c:01:
55:dd:ee:dd:99:bd:af:c1:3d:2a:ce:55:5b:8e:52:06:f9:52:
47:12:b3:7d:25:7d:b4:64:88:82:2d:03:0d:2d:b0:d9:f4:08:
63:3f:ad:81:b5:09:bb:13:20:ff:ef:8f:d0:68:47:61:8e:72:
dd:bf:76:b6:94:cd:bf:c4:e9:1e:2e:ef:1e:cb:ca:2a:33:0e:
e7:6c:51:40:57:0d:6a:7b:cf:06:87:01:c5:29:55:16:de:42:
c7:91:12:f3:a7:06:8b:d9:82:55:aa:47:69:ea:f1:16:54:b3:
22:71:2b:98:f5:8f:f5:05:21:8b:22:05:f1:3c:8c:b9:5e:e3:
0e:d2:9b:ee:fd:54:9e:4b:dd:f1:8f:a3:86:11:3a:74:9e:fa:
f1:39:ee:c2:6b:71:ab:38:b4:6f:c4:49:63:24:ec:26:7d:d4:
2f:b7:c2:94:84:ca:95:c1:7d:38:51:70:67:fe:32:6e:74:db:
16:6d:65:02:15:f4:71:36:5b:85:72:5e:23:4b:b2:d1:a7:31:
ee:40:13:33:37:c1:51:58:74:05:22:ec:94:55:b3:21:ed:0f:
89:d3:4d:a7:8e:95:4b:cb:fd:3b:d3:8e:a3:6e:03:c5:61:e0:
26:f7:84:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:52:16 2025 by rpki-client