Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/uatX_CmG54A1PWiXNHEO5hKh3SY.roa
File: uatX_CmG54A1PWiXNHEO5hKh3SY.roa (raw, json)
Hash identifier: 0gUizD629rrkVdaK0KNVm9Yrt5mZFrgTB2fKs4TOd/s=
Subject key identifier: B9:AB:57:FC:29:86:E7:80:35:3D:68:97:34:71:0E:E6:12:A1:DD:26
Certificate issuer: /CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Certificate serial: 018CC5DC3866963C0AEEE5D7102F62C3ABD1
Authority key identifier: 0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/uatX_CmG54A1PWiXNHEO5hKh3SY.roa
Signing time: Mon 01 Jan 2024 16:29:53 +0000
ROA not before: Mon 01 Jan 2024 16:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43436
IP address blocks: 185.6.140.0/22 maxlen: 23
193.58.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:38:66:96:3c:0a:ee:e5:d7:10:2f:62:c3:ab:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Validity
Not Before: Jan 1 16:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9ab57fc2986e780353d689734710ee612a1dd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:1b:8e:32:90:e8:c3:cf:ae:98:61:6c:77:
e1:a2:c6:0c:f4:ec:d4:a5:38:dc:0a:75:f4:8c:8f:
3b:ec:0f:b3:6d:56:85:f4:13:af:2b:cd:4d:73:e0:
ed:ee:56:50:8b:5a:fb:50:b9:6e:36:7d:75:f4:17:
e7:0c:87:55:e3:d8:f6:df:88:ea:6f:ab:cb:5c:28:
66:37:1d:e9:8c:6b:25:46:27:ff:cd:94:81:0a:d6:
91:c0:c5:98:27:48:ab:ab:02:11:0c:3f:1e:f2:35:
ee:d6:0e:87:ef:e4:48:13:3e:59:aa:ce:a8:3e:45:
95:45:c3:96:9f:4a:2c:e4:2d:cc:f1:90:42:b4:ca:
af:12:93:a5:d0:33:53:7f:d2:47:63:05:e1:9a:6a:
9c:d1:91:56:fc:d7:9f:dc:de:af:5e:27:6a:17:6b:
fa:34:56:0f:55:12:a4:92:45:3a:bd:5e:93:d1:a2:
4d:bc:20:6c:59:25:03:03:66:5b:bc:16:78:4d:a6:
28:9f:1d:97:a7:4e:31:01:77:88:d3:73:88:eb:aa:
5b:dc:93:7b:40:2c:bc:2e:ac:12:d5:7d:1d:68:60:
1f:9d:78:c4:32:f7:2b:5b:57:49:73:96:f7:24:d2:
06:e8:81:14:9f:36:1e:79:1f:9b:40:a0:95:9f:cf:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AB:57:FC:29:86:E7:80:35:3D:68:97:34:71:0E:E6:12:A1:DD:26
X509v3 Authority Key Identifier:
keyid:0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/uatX_CmG54A1PWiXNHEO5hKh3SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.140.0/22
193.58.247.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:23:e7:b5:45:d5:86:3c:d1:99:a4:33:30:7f:d2:06:1d:18:
86:66:1d:02:bb:ae:0e:74:04:b3:a4:72:09:55:f1:f2:e6:d6:
d6:d5:49:49:dc:11:ea:6d:2c:f3:21:8c:39:fc:db:54:19:dd:
7c:46:b0:c6:03:59:dd:1b:90:08:44:61:84:b7:9e:50:fd:fd:
cf:14:9c:00:e5:29:07:2a:31:cc:77:25:02:41:62:88:7b:20:
b7:20:8b:1d:81:10:66:ca:6c:9b:25:27:fe:ef:b9:f0:73:90:
cd:83:f8:23:8b:89:45:9b:46:43:2e:29:37:83:d3:ed:72:48:
77:ff:17:e2:52:2c:b3:8b:96:a1:a1:39:a7:58:8b:88:a8:f0:
c2:22:0b:c9:1d:b5:8d:35:49:54:4f:40:78:c1:b8:35:1e:4e:
df:04:46:fb:17:20:e6:73:a5:6b:c9:cd:27:44:7e:b5:c8:ca:
d4:19:28:24:27:36:37:d0:63:25:a4:78:db:a9:a2:1e:9e:0a:
e5:a3:17:a9:7d:e7:36:9e:dc:1b:82:9a:e5:13:97:e4:7c:96:
15:98:6d:86:7e:93:c3:1b:50:29:35:43:1f:9a:c5:c7:93:31:
fc:d3:86:0d:8e:f5:68:38:28:2d:c2:53:af:af:59:ec:b6:dd:
69:51:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:53:30 2025 by rpki-client