Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/UXt26AaVQuMUFis4BbNTCphCcck.roa
File: UXt26AaVQuMUFis4BbNTCphCcck.roa (raw, json)
Hash identifier: PLgukYWfHCnnHa9LXjVcJnr8aTEBkbqhXNHE58szZes=
Subject key identifier: 51:7B:76:E8:06:95:42:E3:14:16:2B:38:05:B3:53:0A:98:42:71:C9
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 0193B1F8F2A8C08B7EEDB84E7F610E2C18B4
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/UXt26AaVQuMUFis4BbNTCphCcck.roa
Signing time: Tue 10 Dec 2024 19:08:22 +0000
ROA not before: Tue 10 Dec 2024 19:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 137.174.0.0/17 maxlen: 22
137.174.128.0/18 maxlen: 22
137.174.192.0/19 maxlen: 22
147.123.32.0/19 maxlen: 22
147.123.36.0/22 maxlen: 24
147.123.128.0/17 maxlen: 22
155.204.0.0/17 maxlen: 22
155.204.119.0/24 maxlen: 24
155.204.128.0/18 maxlen: 22
155.204.200.0/21 maxlen: 24
155.204.208.0/21 maxlen: 21
155.204.216.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b1:f8:f2:a8:c0:8b:7e:ed:b8:4e:7f:61:0e:2c:18:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Dec 10 19:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=517b76e8069542e314162b3805b3530a984271c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2c:eb:80:58:15:cc:55:9a:3c:9a:6b:ba:93:
f6:e5:01:5c:b8:be:88:45:23:1d:6c:a9:92:c0:0f:
ab:49:3d:24:c3:53:b4:a6:1a:f7:8b:9e:67:8b:15:
66:a3:2b:54:48:ea:22:f4:05:a0:9a:dc:b7:e8:74:
9d:2b:82:ad:67:6c:4b:3d:fb:16:4b:24:2d:4a:90:
4b:81:0e:dc:73:17:61:13:40:b9:a7:0e:13:6d:76:
6e:0d:c8:55:23:2e:0d:9d:5c:22:56:d5:cd:3f:54:
60:3b:22:b0:10:f1:f4:de:46:76:c8:01:19:13:a8:
e9:fd:ff:d8:9a:9f:86:f2:14:4d:24:7d:68:0f:c7:
f1:c9:2a:2a:68:e6:38:c6:de:f7:31:13:96:6c:79:
83:06:06:9a:25:fd:65:2b:72:aa:28:b9:95:d6:fd:
75:bc:4c:6a:e1:05:91:0f:3d:96:e2:e3:de:49:4f:
24:04:3d:ce:6e:43:10:e4:01:b7:5b:2f:6b:0e:22:
18:0c:65:8b:91:03:04:90:6a:f7:3a:72:76:50:a0:
e6:35:86:ef:43:65:cf:7f:b7:42:cd:dc:20:9f:82:
79:70:2c:cb:e8:6a:00:20:dc:c4:30:09:34:d3:b6:
eb:7f:1d:f9:c8:7d:53:bc:e7:32:bd:85:e6:ec:e2:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7B:76:E8:06:95:42:E3:14:16:2B:38:05:B3:53:0A:98:42:71:C9
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/UXt26AaVQuMUFis4BbNTCphCcck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.0.0-137.174.223.255
147.123.32.0/19
147.123.128.0/17
155.204.0.0-155.204.191.255
155.204.200.0-155.204.223.255
Signature Algorithm: sha256WithRSAEncryption
0d:29:3e:9f:9c:c3:be:6d:24:e6:64:a3:83:d0:e7:4d:d2:32:
c1:04:58:f3:1a:e1:42:5f:78:88:ff:99:37:09:9b:57:c9:8f:
bc:78:05:c8:0f:e4:d5:dc:ba:cc:7b:29:34:74:54:60:d3:a6:
12:3a:1a:db:9e:10:51:8f:3c:e4:f3:20:12:2c:d6:68:ed:4d:
7c:41:8d:4a:e1:bf:22:a3:d7:a9:a7:5e:05:f2:de:85:a9:95:
bb:10:b7:64:53:ab:ce:04:ad:0f:c5:5b:39:30:78:6c:15:6d:
95:57:73:d0:a4:94:c0:84:9b:b7:b5:51:ff:0c:b2:88:a8:3d:
d7:1e:7c:6d:56:1f:b1:65:f9:da:85:44:d5:6c:b9:4f:81:14:
29:4f:06:d8:a8:a3:b9:1b:22:97:28:d9:82:b8:47:d7:79:02:
85:de:d0:ad:8a:c4:3a:e9:8f:44:5a:cb:2e:07:b5:95:e1:76:
f1:fa:8e:1f:ad:07:ae:50:54:af:f6:d4:67:57:e5:8d:71:58:
24:42:9c:48:a3:a5:fe:50:91:2a:aa:e3:a2:c7:4d:e1:14:4e:
5e:cc:e1:e7:ba:08:cb:2b:cd:c7:ff:80:97:ba:d3:25:e1:b9:
46:1c:7a:96:a2:23:11:4a:5c:9c:f7:d0:47:f8:5f:c7:92:d2:
7a:ef:72:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:19 2025 by rpki-client