Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/uy18rfNLyuQiQTCNDG2p5HtgVvM.roa
File: uy18rfNLyuQiQTCNDG2p5HtgVvM.roa (raw, json)
Hash identifier: /PktlFARYSrfZjA3NuU81XhcPjb/Y7Pow5NVwBdwcdY=
Subject key identifier: BB:2D:7C:AD:F3:4B:CA:E4:22:41:30:8D:0C:6D:A9:E4:7B:60:56:F3
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 018CC349413E8B8798B586B688E9B031BA76
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/uy18rfNLyuQiQTCNDG2p5HtgVvM.roa
Signing time: Mon 01 Jan 2024 04:30:07 +0000
ROA not before: Mon 01 Jan 2024 04:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35470
IP address blocks: 87.239.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:41:3e:8b:87:98:b5:86:b6:88:e9:b0:31:ba:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Jan 1 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb2d7cadf34bcae42241308d0c6da9e47b6056f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:42:fa:ff:4f:1e:52:70:7c:39:93:32:8d:
25:a6:5b:77:a4:df:bc:40:b6:82:8b:3c:ff:c0:7b:
b2:f9:94:93:6e:7d:52:56:27:7c:6f:41:bd:08:0a:
c9:0f:ac:38:86:35:dc:de:6e:c9:75:e9:ad:09:72:
e3:34:7e:28:11:95:8c:33:bf:ca:64:bf:03:35:58:
da:50:75:a9:eb:57:d7:eb:d2:0b:c8:4e:c6:60:4b:
a5:ef:97:f3:0b:6f:d1:6a:71:c6:8f:0b:a3:12:ac:
44:fa:94:30:3b:5b:97:a4:6d:7e:dc:49:9d:d9:ae:
8c:de:28:0b:c7:33:f7:95:4a:29:5c:12:68:55:c8:
04:f0:55:94:bb:4f:91:03:3f:6d:56:a5:73:af:de:
1b:5b:44:11:b0:9b:55:7f:8c:3a:f6:1b:3a:e5:24:
28:7e:76:54:2b:c4:fa:d6:3c:31:45:bf:25:66:b4:
c8:64:02:3b:21:d9:5e:fe:e4:15:81:e5:2b:04:8d:
e8:3d:25:c6:6b:05:d6:60:41:69:6b:0a:73:a3:90:
90:80:c0:c1:3f:88:db:a8:f2:87:7b:9a:39:28:96:
3e:84:93:6e:44:2b:ac:78:e8:5f:b6:2b:8e:31:1a:
2a:bc:00:8c:0f:35:7a:b5:11:ca:96:f1:c1:c9:bb:
5f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2D:7C:AD:F3:4B:CA:E4:22:41:30:8D:0C:6D:A9:E4:7B:60:56:F3
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/uy18rfNLyuQiQTCNDG2p5HtgVvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.11.0/24
Signature Algorithm: sha256WithRSAEncryption
15:87:65:b7:d4:ee:e3:87:65:f5:80:84:96:d3:52:7f:31:9d:
ca:a9:17:e5:6b:02:70:80:6b:81:e5:5c:b4:1e:ef:3c:a8:60:
84:b8:d9:51:ca:f9:20:e8:26:5b:cd:fd:08:bc:64:6f:50:22:
06:22:4f:49:5e:1a:34:dd:48:fe:60:72:21:2f:fc:8c:1a:a2:
88:01:cb:d6:8d:b0:20:76:1e:50:d7:b6:25:dd:f5:ea:4e:00:
62:7f:e9:ad:32:69:8a:4a:f8:d5:e4:b3:6b:34:46:c6:c7:93:
b2:55:04:a3:03:9b:aa:cc:dd:ca:fa:21:fb:17:1f:02:26:2c:
a9:97:15:3a:4b:57:26:f8:c6:98:7e:f4:35:2e:f4:87:07:5c:
d7:23:a4:99:94:83:48:51:0b:9e:d5:57:42:47:b7:c4:4a:d4:
f2:44:e0:9a:e7:1f:ee:1e:f3:2f:4f:15:d1:cd:34:f2:99:b9:
8b:5c:f5:63:c8:64:2f:ad:5f:6c:ed:34:89:83:50:d2:a3:89:
53:40:b5:e2:38:04:75:87:04:f4:55:63:73:b3:fb:18:4f:2e:
e1:00:bb:a4:e0:2d:58:7d:3d:86:f3:d8:e2:87:78:e3:32:7d:
ed:de:a0:32:aa:9d:7b:86:63:5d:ad:f5:8d:93:7f:85:75:63:
9d:7b:5d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:04:03 2025 by rpki-client