Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/U1F1LHnHbDOeECXvqpLcdISteTw.roa
File: U1F1LHnHbDOeECXvqpLcdISteTw.roa (raw, json)
Hash identifier: sZ/H3oJmSBdJceuuPoD7Cd+p2tFaETst/7BCWEuj+qw=
Subject key identifier: 53:51:75:2C:79:C7:6C:33:9E:10:25:EF:AA:92:DC:74:84:AD:79:3C
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018D1B87F5FB372DD10D39E523A217C78829
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/U1F1LHnHbDOeECXvqpLcdISteTw.roa
Signing time: Thu 18 Jan 2024 07:45:11 +0000
ROA not before: Thu 18 Jan 2024 07:45:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6813
IP address blocks: 80.58.201.0/24 maxlen: 24
80.58.252.0/24 maxlen: 24
81.45.26.0/23 maxlen: 23
81.45.156.0/22 maxlen: 22
194.179.98.0/23 maxlen: 23
194.224.158.0/24 maxlen: 24
195.55.74.0/24 maxlen: 24
195.235.59.0/24 maxlen: 24
195.235.232.0/24 maxlen: 24
195.235.234.0/23 maxlen: 23
212.170.30.0/23 maxlen: 23
212.170.34.0/23 maxlen: 23
212.170.227.0/24 maxlen: 24
212.170.228.0/23 maxlen: 23
212.170.232.0/24 maxlen: 24
213.4.28.0/24 maxlen: 24
213.4.82.0/23 maxlen: 23
213.4.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 08:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1b:87:f5:fb:37:2d:d1:0d:39:e5:23:a2:17:c7:88:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 18 07:45:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5351752c79c76c339e1025efaa92dc7484ad793c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:38:d0:b5:7f:d3:36:5d:63:eb:37:fa:81:e7:
12:70:60:b2:6d:15:84:8f:c7:8b:41:3a:99:2a:c3:
c3:89:5d:8c:71:91:fe:46:ee:6b:8f:98:97:97:e7:
09:4c:23:f1:40:e4:f8:f9:cd:33:9b:a2:e4:55:15:
1d:4a:f8:86:90:b5:20:f0:0c:a1:36:35:cf:19:0f:
66:ca:be:02:ee:dc:6a:ac:b8:9f:2a:d0:e9:cd:6b:
3e:16:38:9a:80:1c:26:2a:28:cc:3a:69:b2:f1:41:
62:fa:f8:88:06:ec:f5:ba:17:7e:90:45:a9:48:bb:
e4:8b:38:b6:4f:c4:33:42:ff:d4:9a:23:34:bc:c5:
60:c1:38:e9:b2:c4:2a:0d:2c:28:5f:d5:48:23:98:
9d:58:b7:ee:2f:e1:cd:3a:c5:8d:00:4f:d5:b3:08:
5c:a9:f0:1c:a9:f0:1b:2c:f7:31:e6:67:33:28:3a:
15:68:f5:33:cd:a9:c6:60:ae:6a:ca:0b:54:6e:a5:
26:b0:bf:05:d6:52:75:45:95:f0:f7:ba:d9:92:9f:
0d:5a:37:81:fc:84:ae:48:d5:9a:42:4c:10:bc:25:
22:f1:c6:58:5b:10:3b:60:99:95:7f:7f:71:ab:32:
07:0d:f2:02:11:53:29:e8:e9:b3:0e:84:86:ae:aa:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:51:75:2C:79:C7:6C:33:9E:10:25:EF:AA:92:DC:74:84:AD:79:3C
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/U1F1LHnHbDOeECXvqpLcdISteTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.58.201.0/24
80.58.252.0/24
81.45.26.0/23
81.45.156.0/22
194.179.98.0/23
194.224.158.0/24
195.55.74.0/24
195.235.59.0/24
195.235.232.0/24
195.235.234.0/23
212.170.30.0/23
212.170.34.0/23
212.170.227.0-212.170.229.255
212.170.232.0/24
213.4.28.0/24
213.4.82.0/23
213.4.98.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:51:b3:0e:a4:dd:a5:02:50:92:85:d5:3e:95:6c:a3:a1:b6:
7f:0a:f3:a7:c3:4f:61:02:74:51:a0:06:81:c6:32:74:fe:3e:
85:79:fe:b7:80:3f:49:7d:a3:89:09:2c:9f:a6:bb:29:ba:68:
dc:83:78:67:63:59:99:b4:17:a8:5e:87:a1:f9:6f:a4:04:3f:
ab:50:ff:0f:65:21:8c:0d:30:a8:00:8a:3e:67:d5:5c:a6:9b:
72:5c:fc:19:b1:69:99:c4:3e:39:70:99:9e:5f:23:21:2e:2d:
ff:7d:91:5e:1d:eb:10:47:7b:18:37:26:41:62:6d:00:1b:bc:
af:66:f0:db:e0:ba:69:dc:b8:11:89:8f:2b:14:fc:a4:03:c1:
7a:73:88:e7:d0:c6:cb:7b:2b:16:09:e0:01:45:70:d2:bd:7b:
2c:a8:8c:c1:af:d3:7d:2b:d7:73:95:66:f0:0a:42:06:c1:41:
74:93:6c:7e:29:d1:d5:59:eb:f9:db:2d:a8:66:de:6e:71:8e:
74:3f:6f:7c:65:e3:ed:8b:dc:6d:18:92:71:42:b8:14:9d:b0:
e3:6f:a3:5d:42:fa:a2:1a:d2:98:7d:21:b3:9a:6b:e3:e4:fa:
1d:83:ba:95:4f:18:11:63:51:41:f6:2c:10:4e:b5:37:07:0b:
e9:c3:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:24:29 2025 by rpki-client