Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/UixqfDs8dMo60NOHd6ffIsMYiRU.roa
File: UixqfDs8dMo60NOHd6ffIsMYiRU.roa (raw, json)
Hash identifier: m30yBo0YVPI5Zrdk8DLYUwv/H2XkJ7umx0l5SIBHEUs=
Subject key identifier: 52:2C:6A:7C:3B:3C:74:CA:3A:D0:D3:87:77:A7:DF:22:C3:18:89:15
Certificate issuer: /CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Certificate serial: 0192D38BA3C28B5769CB00678201B57547A3
Authority key identifier: 6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/UixqfDs8dMo60NOHd6ffIsMYiRU.roa
Signing time: Mon 28 Oct 2024 14:33:16 +0000
ROA not before: Mon 28 Oct 2024 14:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 79.171.96.0/21 maxlen: 24
185.62.60.0/22 maxlen: 24
185.67.180.0/22 maxlen: 24
185.130.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:8b:a3:c2:8b:57:69:cb:00:67:82:01:b5:75:47:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Validity
Not Before: Oct 28 14:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=522c6a7c3b3c74ca3ad0d38777a7df22c3188915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:f0:80:ef:dc:c8:14:d8:f2:79:c8:2e:04:
1f:85:26:13:bb:33:06:e1:db:ce:31:63:e5:88:62:
0c:75:49:3d:52:66:eb:e9:8e:17:bf:98:e2:a2:77:
19:29:4c:2f:67:a4:ba:09:e8:17:b1:dc:7c:aa:bc:
dd:92:68:00:5c:e9:e3:c1:bd:52:88:df:0c:86:23:
de:db:ed:3e:1f:0f:f8:5f:86:05:73:cd:95:97:af:
28:66:0c:b6:09:bb:34:6c:9e:53:0a:d9:38:63:69:
e7:a0:18:bb:f2:97:7f:d0:9b:fe:5f:55:f5:14:ce:
4b:ea:e7:23:10:93:a3:83:74:c4:86:61:9d:bb:02:
9f:26:b3:05:de:15:b8:3f:62:e4:78:75:cf:bd:e1:
84:b3:71:e1:51:4a:ee:99:aa:ff:a4:0c:29:b5:9c:
b1:7b:0e:a8:33:d3:28:1d:c9:53:db:4b:ca:e8:bc:
d5:f6:ea:b1:70:6e:ee:84:bb:04:c5:d5:9b:c0:67:
e7:9d:63:c9:a0:80:70:51:2f:b1:57:1e:20:89:cf:
d5:6c:a2:19:a1:db:1e:c2:d1:5a:8f:ea:b9:59:af:
a9:46:10:eb:2b:8b:19:fa:c5:1b:e3:2a:55:31:28:
6e:f1:91:80:b5:38:38:d4:fc:9a:85:74:d7:c4:07:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2C:6A:7C:3B:3C:74:CA:3A:D0:D3:87:77:A7:DF:22:C3:18:89:15
X509v3 Authority Key Identifier:
keyid:6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/UixqfDs8dMo60NOHd6ffIsMYiRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.96.0/21
185.62.60.0/22
185.67.180.0/22
185.130.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:6d:ba:29:45:e8:57:bf:ee:c4:a7:d0:a5:df:86:51:db:21:
a2:dc:6f:75:f4:06:ec:81:b9:ba:cd:aa:36:27:d8:52:85:82:
7a:49:57:ec:39:c2:94:2e:56:46:cc:6f:44:89:08:0b:d2:f8:
e4:a1:9b:41:42:5a:99:b2:9a:29:4b:75:f0:b2:ec:c1:50:71:
1c:65:f6:ff:05:f6:f5:a8:c4:12:52:58:b9:0e:ff:1d:05:9c:
66:6d:97:3d:8b:19:f8:b3:4c:61:7c:af:5d:3e:a2:2b:18:37:
0e:18:0a:1a:50:84:98:3d:b1:6f:2d:66:15:11:fa:9e:43:61:
08:cd:f5:a0:c8:52:0b:e2:68:ba:78:b3:72:21:47:db:d3:0f:
8a:d5:8c:61:3c:7e:cd:59:a1:e7:8e:3c:33:15:8a:5b:d3:07:
da:a0:29:79:23:06:32:b2:21:ac:fe:1f:36:60:7a:bd:a2:37:
61:7e:20:5b:50:30:2c:5d:77:d2:57:e8:ce:00:37:72:ed:3a:
72:6e:8b:6a:46:fd:74:56:93:c5:bf:1b:f0:66:18:33:f7:33:
b3:84:94:13:07:06:d6:26:0f:51:73:16:fc:4e:d3:8c:fa:86:
a6:a3:d3:87:7f:c5:05:f3:ea:c3:f1:fe:cf:10:a6:5d:3b:d4:
8b:40:37:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:24:49 2025 by rpki-client