Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UEej953_V0jLMQi-9bv3oaIa-qs.roa
File: UEej953_V0jLMQi-9bv3oaIa-qs.roa (raw, json)
Hash identifier: f97uzUSsuC8J/VgFQ403ovoqb+HJE1BAnIOzoIe8AKk=
Subject key identifier: 50:47:A3:F7:9D:FF:57:48:CB:31:08:BE:F5:BB:F7:A1:A2:1A:FA:AB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193AFDDB50DFA3E1B6CB95E1C604E362C84
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UEej953_V0jLMQi-9bv3oaIa-qs.roa
Signing time: Tue 10 Dec 2024 09:19:22 +0000
ROA not before: Tue 10 Dec 2024 09:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214304
IP address blocks: 31.14.10.0/24 maxlen: 24
93.115.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Dec 2024 10:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:dd:b5:0d:fa:3e:1b:6c:b9:5e:1c:60:4e:36:2c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 10 09:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5047a3f79dff5748cb3108bef5bbf7a1a21afaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:ab:c5:30:aa:48:e2:f7:68:70:f5:35:3f:
5a:2a:c9:61:29:5b:24:86:2e:a0:13:58:38:5c:fd:
3c:1f:2f:8a:d5:af:28:e1:ea:65:ea:cc:ee:8a:a9:
47:5c:42:55:d2:b2:e8:38:09:6c:7f:3e:44:80:ba:
ed:26:44:bf:0c:a2:8a:4b:59:ba:c2:c8:9e:0d:6f:
1e:39:af:c2:ee:7b:fb:a7:7a:78:61:23:a0:2d:88:
8a:5e:80:91:e8:7a:02:bc:66:bf:bb:ba:22:01:59:
79:a1:bf:50:c8:ff:8c:72:d4:9f:68:9e:7e:3e:7d:
2e:a3:5c:47:c5:e9:83:4e:fb:80:3b:31:67:a7:9c:
af:72:87:d0:29:dc:3b:a7:3f:53:91:98:d2:c3:23:
d4:9f:97:3e:11:d9:d8:d4:f7:fe:01:a7:7e:83:e5:
83:ae:6e:bd:f0:43:62:7d:8d:c4:3b:84:5a:50:6c:
7e:61:24:62:68:85:71:d8:63:0d:7e:0b:b3:ea:35:
61:be:9a:4c:b6:4c:0b:4f:31:cb:6a:65:64:ed:f2:
c7:42:02:34:1c:14:0c:54:0e:c2:b3:86:73:94:20:
09:d9:a2:19:bf:5b:9d:03:aa:2f:e7:e3:3c:da:9c:
74:ef:9b:6d:19:2a:0d:79:04:a9:64:86:35:bb:da:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:47:A3:F7:9D:FF:57:48:CB:31:08:BE:F5:BB:F7:A1:A2:1A:FA:AB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UEej953_V0jLMQi-9bv3oaIa-qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.10.0/24
93.115.175.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fd:4f:b1:47:4b:31:83:c9:6b:88:64:23:cb:de:9f:ff:96:
df:3d:a8:3e:1d:f4:49:4a:3f:74:35:4b:e2:b3:12:50:49:cc:
17:6b:eb:f3:08:f0:d9:58:38:7e:d2:02:46:dc:8c:b0:00:17:
a6:d2:e4:dd:3a:fd:3e:88:dc:78:2b:90:bd:9e:14:e2:f0:0f:
7f:86:8a:82:34:f5:7a:72:9f:07:2e:ea:43:9f:a8:5b:a1:df:
23:07:e5:d6:81:6f:96:89:fb:aa:65:9b:d8:8a:13:62:5d:94:
17:b5:fc:61:14:3c:03:1f:6d:ff:ee:e8:78:3d:b4:f9:da:7b:
39:c6:f2:14:8b:37:d2:36:c9:06:2b:85:a2:56:cd:85:ed:c3:
1d:9d:dd:1f:36:4f:d4:fc:6e:57:a1:be:6e:de:b1:bb:e8:99:
40:81:78:4f:bc:da:e4:e4:81:47:af:9e:b3:32:74:d6:6a:dd:
12:d9:9f:36:1f:68:dc:cf:db:4a:93:59:1f:44:69:13:97:8f:
5c:88:61:d2:df:fd:d5:cb:86:1e:ee:d8:71:44:94:17:93:0e:
96:ff:99:fb:30:df:84:2e:89:68:58:86:cf:62:ec:ca:e8:b6:
0c:c6:60:b3:1c:68:8d:f2:2a:42:6f:83:33:41:bc:0e:02:6e:
f4:73:53:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:22 2025 by rpki-client