Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/uzGQG4hRtt3tLe0Tcwb1AP_uc-I.roa
File: uzGQG4hRtt3tLe0Tcwb1AP_uc-I.roa (raw, json)
Hash identifier: QmbY3qwQv/YidIVa+1zmKTcTGwZhYOArynsEEJaPQQY=
Subject key identifier: BB:31:90:1B:88:51:B6:DD:ED:2D:ED:13:73:06:F5:00:FF:EE:73:E2
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 019425217296DBEF80A6EF4F3C307E51708D
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/uzGQG4hRtt3tLe0Tcwb1AP_uc-I.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212269
IP address blocks: 194.37.92.0/24 maxlen: 24
194.37.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 09:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:72:96:db:ef:80:a6:ef:4f:3c:30:7e:51:70:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb31901b8851b6dded2ded137306f500ffee73e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:0d:d1:04:65:75:84:97:e3:c6:ea:c1:2a:
94:60:d6:14:48:97:cc:27:e3:ea:ed:b0:74:67:a0:
2e:49:96:0a:5b:64:2c:78:47:7f:a7:f5:fb:51:6b:
3f:19:9c:e2:58:a4:0b:8f:3b:a5:84:e0:c2:d9:48:
19:38:71:d6:f1:5f:6e:30:ae:46:f8:fb:06:99:6a:
63:de:fa:75:9a:f8:8a:50:02:c3:02:2d:b7:b1:9f:
35:b3:06:4a:80:ef:62:72:8e:80:99:80:50:7d:b0:
d9:59:e9:42:0e:56:30:a3:f9:43:61:4f:55:0a:4f:
8c:a4:6d:ea:7e:4d:ce:1f:3d:21:9d:89:c3:79:6c:
ae:03:d8:a5:f8:55:41:84:dc:f6:71:e5:bc:36:9f:
7e:06:e6:4c:a0:a8:00:2f:df:df:e1:d8:40:da:62:
61:e6:f9:b5:37:23:84:34:64:65:50:d9:17:fa:70:
95:52:ce:58:f2:ff:41:e4:4f:3a:04:a9:c2:02:5f:
7d:e9:dd:77:17:c1:07:02:a6:ab:62:9a:63:32:59:
9d:c5:a4:16:a1:d5:ba:5a:6b:3b:c0:4e:03:9d:14:
9c:38:55:16:75:44:3a:ee:2c:c7:8d:79:56:b2:de:
6e:ae:b8:1d:ca:80:44:42:39:40:7b:33:ee:3f:6c:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:31:90:1B:88:51:B6:DD:ED:2D:ED:13:73:06:F5:00:FF:EE:73:E2
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/uzGQG4hRtt3tLe0Tcwb1AP_uc-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.92.0/24
194.37.94.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ff:77:78:25:bd:da:6f:b4:ba:3c:30:67:ca:39:10:57:e2:
0a:b9:54:04:ca:2a:5f:04:11:9f:3c:c1:2d:77:44:be:cc:56:
67:5d:c1:b9:b3:2a:24:7e:69:f1:60:4e:fe:c7:11:97:77:8d:
3f:5e:47:cb:fd:60:bb:44:c4:25:5e:9e:9b:2a:a4:54:83:2e:
b6:df:6d:93:51:95:28:65:10:80:3f:6e:0b:11:58:23:20:f7:
c8:e3:d9:78:cf:5d:45:fe:72:ea:9e:f6:12:17:fb:b3:c6:d6:
05:f6:21:1d:d4:9c:42:c0:b7:ec:9b:d1:16:ac:24:e9:23:87:
82:f3:1c:52:97:5a:67:f8:ba:81:cd:04:58:f3:47:24:90:03:
e1:e6:21:38:8c:da:84:b7:87:d3:3d:77:df:13:ca:c5:95:ac:
6e:f0:44:e2:29:2c:31:b5:9d:cf:db:05:d5:04:ce:83:54:23:
36:7c:9b:19:73:da:ef:f2:46:97:14:2c:c1:58:e7:64:b9:7e:
2f:2c:31:67:e6:d7:30:a5:29:b9:e0:89:cd:77:2f:ed:22:cc:
13:e9:68:52:4a:28:3f:61:19:02:13:05:1c:48:09:13:e4:7a:
46:52:33:65:f7:cd:62:71:ae:a1:c6:46:9c:58:07:b6:08:5a:
25:f1:13:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:33:36 2025 by rpki-client