Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/uCOmrTYkCgJPFH1ftm5Kx_l9LBQ.roa
File: uCOmrTYkCgJPFH1ftm5Kx_l9LBQ.roa (raw, json)
Hash identifier: ctYQR+Zy7jUgkrvCITnf1EysHhdHiU0sv2pw0Y48wIs=
Subject key identifier: B8:23:A6:AD:36:24:0A:02:4F:14:7D:5F:B6:6E:4A:C7:F9:7D:2C:14
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 018CC3B705CAE3C5C448A7F5961185A03D9E
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/uCOmrTYkCgJPFH1ftm5Kx_l9LBQ.roa
Signing time: Mon 01 Jan 2024 06:30:00 +0000
ROA not before: Mon 01 Jan 2024 06:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21323
IP address blocks: 195.29.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:05:ca:e3:c5:c4:48:a7:f5:96:11:85:a0:3d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Jan 1 06:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b823a6ad36240a024f147d5fb66e4ac7f97d2c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:ec:a4:1e:40:b2:7a:88:69:4e:80:cc:f9:
47:b2:17:53:23:d1:d2:ee:4b:a5:31:f8:a3:fa:47:
fe:e5:b0:61:7f:86:fd:f0:9d:ca:6f:0f:f6:ac:a6:
6d:2f:8d:9c:84:3e:7b:8d:1a:73:02:7b:4b:7c:b4:
62:a9:4e:69:4e:ac:97:35:9e:29:8f:13:42:3e:c1:
dd:bc:00:57:91:15:07:e0:b4:e1:3a:5d:ee:40:26:
bd:8e:ee:b8:f6:2e:52:7d:eb:ce:8a:eb:72:15:68:
8d:4c:9e:19:cb:b6:8e:87:b3:d0:d5:f5:04:89:dd:
f4:35:c3:2f:ba:12:6b:8f:3b:68:02:52:63:2b:f1:
0e:18:71:af:a7:95:da:3c:91:d3:04:1f:40:1a:7d:
d6:bf:b9:a2:12:04:4f:9a:1a:ab:ea:5f:be:4a:e9:
aa:f8:f4:03:94:2a:67:7f:3f:fc:e9:e5:3a:c7:c3:
1f:14:0f:52:e3:37:79:33:54:7f:6b:fc:79:4a:6b:
e0:e6:6f:ab:21:20:a5:83:39:9f:48:de:6e:3d:4a:
00:7e:23:a2:af:20:37:20:27:37:3e:53:e4:0a:50:
d6:e8:5e:64:b9:3c:37:39:68:d9:75:30:c6:b6:87:
df:d2:b8:29:55:6a:63:31:34:a5:39:77:06:62:96:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:23:A6:AD:36:24:0A:02:4F:14:7D:5F:B6:6E:4A:C7:F9:7D:2C:14
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/uCOmrTYkCgJPFH1ftm5Kx_l9LBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.29.91.0/24
Signature Algorithm: sha256WithRSAEncryption
23:10:c2:7c:ce:c4:df:bd:d7:3e:52:48:c3:2e:f4:f9:5b:96:
7b:01:8b:44:e9:f9:b8:02:cf:32:51:e4:c4:e3:0f:57:bd:b6:
d8:50:5f:74:2e:18:e2:cb:63:51:bb:e1:24:51:cb:bf:be:fe:
e0:26:4b:58:87:6e:81:95:1a:45:1a:e8:e2:d1:95:a4:56:cd:
ac:5b:36:dd:bc:cd:dc:57:ef:36:7a:fb:4b:51:8b:f5:d0:a4:
05:1c:a2:ed:91:24:a9:d2:6b:8b:62:bf:a4:f4:c5:0c:51:26:
ad:9f:0f:76:ae:67:d7:90:ad:d7:74:88:e3:54:eb:f6:4b:9e:
e4:52:c5:54:1b:94:89:15:89:9b:95:c9:25:49:65:3b:f1:b3:
2c:5d:ca:22:3a:a1:94:21:ea:2f:b8:47:4a:76:f7:e6:2f:ba:
03:de:19:a5:e4:df:0a:f7:8d:da:a5:e9:2e:65:72:ba:b3:ab:
20:0c:62:41:5b:fa:7b:f9:36:d0:da:fe:d4:2b:8e:fe:8f:9e:
b6:a1:92:19:ac:40:81:0d:aa:b4:db:17:52:46:a6:e5:ac:00:
25:7c:4c:4e:5e:e4:6c:4b:e9:0f:2a:6c:9d:ba:b0:da:8c:b7:
25:e4:61:61:18:11:56:41:43:c7:3b:19:72:66:b3:e3:3d:ff:
a9:38:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:07 2025 by rpki-client