Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/Uq52uQ-SPEOQv-XeS_SJ7oZvhrs.roa
File: Uq52uQ-SPEOQv-XeS_SJ7oZvhrs.roa (raw, json)
Hash identifier: J7tzSzL9jdSts8aYJG8D+qxk4iBXYvfWFA7AiEPVUS8=
Subject key identifier: 52:AE:76:B9:0F:92:3C:43:90:BF:E5:DE:4B:F4:89:EE:86:6F:86:BB
Certificate issuer: /CN=1954e32570bbfb9af11c2381e81c797c2f40087c
Certificate serial: 018CC2DADC7B9ECF6CFD6DA4A8504470B257
Authority key identifier: 19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/Uq52uQ-SPEOQv-XeS_SJ7oZvhrs.roa
Signing time: Mon 01 Jan 2024 02:29:32 +0000
ROA not before: Mon 01 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 144.2.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:dc:7b:9e:cf:6c:fd:6d:a4:a8:50:44:70:b2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1954e32570bbfb9af11c2381e81c797c2f40087c
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52ae76b90f923c4390bfe5de4bf489ee866f86bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:38:12:1a:92:ee:10:72:61:62:ad:4f:64:
25:73:96:67:7a:4d:1f:b7:db:cf:d1:c8:dc:a1:da:
aa:6c:17:13:6d:2e:f5:b4:65:da:57:6a:4e:c8:49:
60:ad:0c:e9:ba:a9:de:59:4a:96:07:95:8b:bc:59:
be:4e:18:d5:ed:b5:24:41:a2:a5:2d:5a:5b:7b:9e:
92:33:b8:6f:dd:c5:97:c7:cb:17:dc:75:df:06:03:
01:fa:2d:19:e9:67:59:bd:56:48:d6:2e:f0:f6:ae:
50:4b:35:42:29:1f:35:a9:eb:2f:e7:cd:07:ec:5a:
5b:45:2f:d3:eb:d6:6e:31:9e:46:1d:c3:d8:41:5a:
83:99:92:ed:c9:c9:a1:f4:78:0f:26:ff:c1:de:9e:
8d:e4:b4:31:db:14:1b:36:d0:2d:ce:54:83:62:40:
64:57:a0:29:b1:8e:b3:33:7c:f4:cd:ef:c3:78:50:
cf:38:a3:2d:7a:7e:29:bd:f6:30:82:55:eb:5b:d2:
80:62:65:06:4e:71:4d:6e:ac:43:ec:28:e5:f6:2a:
a4:38:64:cf:86:e1:46:30:d5:93:ce:8f:37:36:9a:
05:1c:62:06:00:e4:e5:3b:7d:e1:b2:57:05:f0:1a:
42:e9:d7:d3:e5:31:4a:36:66:7c:60:0b:84:6e:8e:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AE:76:B9:0F:92:3C:43:90:BF:E5:DE:4B:F4:89:EE:86:6F:86:BB
X509v3 Authority Key Identifier:
keyid:19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/Uq52uQ-SPEOQv-XeS_SJ7oZvhrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.170.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d3:50:82:6a:27:08:3d:fd:60:7e:c3:12:7c:9b:6f:b8:a8:
13:28:90:23:f7:6c:c7:2f:34:fc:e3:94:31:e8:37:aa:d8:3a:
d5:85:3b:54:50:c8:43:9d:ef:18:4e:85:f1:4b:0a:9c:8d:ad:
df:47:3f:9e:70:94:aa:8a:af:b4:bd:8c:63:10:18:ba:62:42:
bc:f7:f1:08:b2:48:a6:92:79:b2:d7:7a:33:d8:57:17:8b:ba:
3a:69:dc:ca:5d:c7:78:8e:09:31:c4:4d:7e:4a:17:d5:25:d0:
13:2b:ff:44:7c:bb:24:5d:36:65:bd:cb:11:e5:78:88:6b:b9:
89:21:c1:09:0d:cf:05:f9:73:bc:b7:78:6b:88:96:6b:4b:58:
f8:14:ad:f6:75:68:26:59:56:ab:83:70:f1:c8:40:40:ae:be:
98:29:ca:c5:b9:bc:f0:49:66:df:78:ae:f8:db:be:2a:7c:ea:
1e:ec:9e:34:e7:e8:f4:2f:5d:1c:9a:ea:bc:76:0e:3e:5a:92:
31:c5:94:a1:ee:3d:b9:ac:ca:56:36:18:c8:57:ab:26:2e:b5:
d4:f1:5d:01:00:d6:35:95:62:6b:34:47:9c:54:49:1f:92:b0:
de:99:e8:6c:b6:65:42:a5:51:fb:ac:e9:9d:3d:86:30:33:10:
e5:3b:f9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:53 2025 by rpki-client