Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/uEUKpSCRpXURaC7TBZ_YD69b5QA.roa
File: uEUKpSCRpXURaC7TBZ_YD69b5QA.roa (raw, json)
Hash identifier: IXEZzo3rZctlJuS82O41cSYCl4NuOwraQtgUQAQ1tKA=
Subject key identifier: B8:45:0A:A5:20:91:A5:75:11:68:2E:D3:05:9F:D8:0F:AF:5B:E5:00
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 018CCA2A0763F8A5918ECC99B7A8F2DEA959
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/uEUKpSCRpXURaC7TBZ_YD69b5QA.roa
Signing time: Tue 02 Jan 2024 12:33:21 +0000
ROA not before: Tue 02 Jan 2024 12:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205954
IP address blocks: 130.193.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:07:63:f8:a5:91:8e:cc:99:b7:a8:f2:de:a9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Jan 2 12:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8450aa52091a57511682ed3059fd80faf5be500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:9c:ad:08:00:4c:32:67:4c:5d:e2:7d:aa:
7b:ef:9e:cb:4e:ff:37:7a:a4:19:ab:78:85:6d:04:
55:95:99:36:20:72:f8:a9:e3:3f:a1:52:3f:20:e8:
37:4f:1b:6a:7b:89:54:15:d8:0d:d6:61:64:73:05:
74:2a:c2:ac:76:7e:25:61:6e:8a:3d:b5:fb:a0:b8:
ec:8f:d6:5e:26:11:b1:75:27:02:2c:62:43:ec:6c:
1b:80:bd:4d:4c:b2:95:27:45:a4:77:82:6e:c0:94:
ef:7b:1a:3d:cc:e4:76:48:18:24:1d:55:cb:96:a4:
d8:2c:5a:b6:90:33:cd:ef:be:68:3d:fa:e7:72:d2:
c9:c8:84:21:14:dc:17:69:50:d8:f7:ac:7f:06:aa:
36:e2:89:92:da:51:e1:28:9e:d9:98:84:d9:7d:05:
d2:b7:bd:f5:62:85:66:78:08:aa:b1:15:f4:30:8f:
6c:60:fe:c1:eb:09:10:9b:50:44:42:f2:83:85:23:
23:bf:5d:92:df:be:49:f5:5e:37:47:80:8c:61:75:
de:8d:a0:6d:3a:14:fd:cb:15:3b:d8:60:99:d8:9f:
14:c2:8c:c6:8c:f8:6f:b0:c8:47:bf:be:80:01:7f:
5c:d2:9f:9a:10:a8:e8:88:1b:7b:a7:a9:cc:9b:c7:
50:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:45:0A:A5:20:91:A5:75:11:68:2E:D3:05:9F:D8:0F:AF:5B:E5:00
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/uEUKpSCRpXURaC7TBZ_YD69b5QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:2e:67:f4:8a:15:cc:da:e3:d3:98:c6:08:59:b3:5a:a7:e5:
1c:51:b4:12:e1:33:c4:e0:35:c0:10:44:92:dc:70:fe:fc:7c:
33:a4:14:22:41:29:57:78:49:6d:29:32:7c:4c:9f:0f:16:8c:
78:e6:39:b0:b5:5d:39:f5:dd:af:90:3d:34:40:00:2e:db:ce:
98:07:f8:44:7f:46:b3:27:49:2e:4e:fe:40:06:26:4e:b4:16:
1b:df:6c:e5:97:fb:91:f1:af:d9:ab:9e:f8:28:43:22:84:b8:
d5:24:f1:c1:52:4c:14:0f:34:4b:9c:6c:fa:3d:fb:5f:e1:5e:
03:33:e4:42:f7:7d:52:f6:4e:b2:9c:81:fb:b0:c7:e8:2b:86:
d0:36:39:70:c7:40:68:56:b7:31:c4:0f:44:6e:00:ba:40:e8:
19:2d:26:84:b5:2e:73:fe:ff:71:5a:6d:55:67:12:2e:56:2f:
85:bd:dc:6f:16:b7:7b:18:17:55:7a:b4:fc:15:c5:06:1b:5a:
c9:15:49:b3:bb:0f:a8:39:d4:ed:57:5d:b6:97:03:1d:2c:75:
da:22:31:37:17:7f:02:4d:ce:ba:b0:93:f7:f8:33:cd:3f:8b:
1f:5b:c3:5d:27:46:3c:0d:62:a5:70:3e:25:fe:0c:7c:3d:1c:
12:b1:7a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:38 2025 by rpki-client