Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/UMstQ1YqINaPyUmhEaT4c1Alblw.roa
File: UMstQ1YqINaPyUmhEaT4c1Alblw.roa (raw, json)
Hash identifier: dvr21Ii85nocalbz2OAxH3Jqir38jOY+3zUqKlJLhR8=
Subject key identifier: 50:CB:2D:43:56:2A:20:D6:8F:C9:49:A1:11:A4:F8:73:50:25:6E:5C
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018CC3B6B5C7323720D265DF4AE0FA9960F4
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/UMstQ1YqINaPyUmhEaT4c1Alblw.roa
Signing time: Mon 01 Jan 2024 06:29:40 +0000
ROA not before: Mon 01 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212157
IP address blocks: 185.52.4.0/22 maxlen: 24
147.181.0.0/22 maxlen: 24
2a04:9a00:1040::/44 maxlen: 48
2a04:9a00:1010::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 Aug 2024 12:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b5:c7:32:37:20:d2:65:df:4a:e0:fa:99:60:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 1 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50cb2d43562a20d68fc949a111a4f87350256e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:44:b9:75:f9:8c:bc:a6:ce:37:0d:d5:bd:
9f:de:71:d0:16:8f:dc:f8:fc:18:b0:fa:ee:ee:47:
e7:08:a9:60:66:cd:79:15:8e:8f:30:6e:9b:34:9a:
71:9d:d6:ba:8c:e5:54:ca:37:63:1f:95:13:8b:e0:
05:1c:ef:62:75:f8:71:b9:99:9c:86:6d:f4:53:28:
88:f3:90:25:b5:10:50:1b:19:3c:64:25:bc:0d:4c:
e6:f4:b9:99:ce:b9:8d:c4:e2:31:d2:ba:ac:49:70:
2a:c4:c8:50:11:8a:21:0b:09:dc:e9:3f:fa:d9:4d:
a9:f6:c9:be:f1:d2:ae:c5:2a:66:9b:2a:07:33:ab:
2f:26:4a:0f:4a:f5:e9:90:23:22:d7:5f:cc:bd:66:
9f:fd:7b:1f:b4:ae:f8:f6:83:71:6d:e6:9b:10:d2:
26:06:c3:4b:bf:76:b1:32:56:0f:98:52:ae:3b:19:
b7:3c:b1:ba:25:a7:df:6d:eb:f2:e6:d4:89:6e:b3:
23:aa:2c:30:06:e2:41:d9:16:6c:22:c9:54:2a:b7:
4b:4a:65:0c:49:58:9e:ff:fe:cd:ba:9e:8f:7c:02:
9e:1e:9b:17:66:60:3b:74:2d:5f:9e:a3:fd:67:8e:
b3:74:9a:f3:72:7e:82:d1:51:8a:6d:2a:2e:10:a7:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CB:2D:43:56:2A:20:D6:8F:C9:49:A1:11:A4:F8:73:50:25:6E:5C
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/UMstQ1YqINaPyUmhEaT4c1Alblw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.181.0.0/22
185.52.4.0/22
IPv6:
2a04:9a00:1010::/44
2a04:9a00:1040::/44
Signature Algorithm: sha256WithRSAEncryption
28:98:b5:43:28:c4:55:82:f5:b0:80:9b:ea:6d:94:9a:dd:07:
12:d6:ae:a7:6f:e2:d6:b3:4a:90:74:c9:aa:29:35:b8:cf:a6:
f9:89:58:78:ef:f9:da:60:96:e8:83:01:e1:70:13:09:b6:45:
32:48:52:78:71:43:b7:37:8b:f0:26:be:32:fb:b9:4a:f1:63:
4e:62:1f:40:c1:d3:10:cd:11:31:19:9b:2f:7c:81:ed:00:47:
ec:30:52:77:65:a4:71:4d:d6:88:8b:ba:83:fc:8a:42:95:b7:
1e:91:55:5d:ad:47:32:5a:f8:b7:f4:78:b9:e1:8b:32:d6:c0:
b9:fb:b8:a2:94:ed:04:26:52:a6:d0:ea:81:55:f6:c0:50:61:
9b:c5:1d:38:a3:07:ae:08:63:2c:87:30:5f:b9:b0:d1:e2:06:
ca:f0:ec:63:e3:b3:5c:2c:5c:50:e0:eb:29:0c:2b:4c:8e:8c:
ff:d8:f2:5e:4b:ff:92:73:ff:2f:0d:96:4d:ef:d5:d1:bb:e1:
85:b3:65:65:3c:08:3a:09:89:25:cf:ce:31:8f:50:21:3f:73:
b7:b3:fe:67:8a:71:46:29:b7:b2:c6:5c:35:b0:ec:01:51:06:
94:1d:46:42:16:07:de:67:28:61:b5:e7:4d:72:45:7f:7f:ba:
4e:92:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:30 2025 by rpki-client