Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/ukviQSeEQi0yCS9NOSqON-utry4.roa
File: ukviQSeEQi0yCS9NOSqON-utry4.roa (raw, json)
Hash identifier: g0UQMe/8EJPbtX11dLlKshQFfhxRK24f5xXzhzRqcjk=
Subject key identifier: BA:4B:E2:41:27:84:42:2D:32:09:2F:4D:39:2A:8E:37:EB:AD:AF:2E
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 018EA8B1F02F9C5A5A067C4642F4C3B1AC96
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/ukviQSeEQi0yCS9NOSqON-utry4.roa
Signing time: Thu 04 Apr 2024 10:40:17 +0000
ROA not before: Thu 04 Apr 2024 10:40:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52208
IP address blocks: 91.196.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 07:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:b1:f0:2f:9c:5a:5a:06:7c:46:42:f4:c3:b1:ac:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Apr 4 10:40:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba4be2412784422d32092f4d392a8e37ebadaf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:64:e9:e6:5e:e7:72:04:dd:e3:f7:35:37:
e8:d1:6e:ee:8a:c4:b0:5f:23:1a:79:cc:e6:a4:ba:
4f:a1:ab:b6:70:57:7d:c4:c3:28:2e:98:e0:11:2b:
c5:a0:09:c9:67:4a:c8:b0:81:f5:5f:3a:99:82:36:
83:2f:52:2b:76:51:91:e5:11:83:76:4e:67:c6:e7:
9d:b6:21:13:60:b4:5f:ed:9a:f0:8c:d0:67:2a:24:
1f:d8:64:cf:9e:35:63:28:52:04:88:85:ae:d9:40:
33:69:33:3a:43:a1:d7:3d:bc:50:5f:22:97:90:4b:
11:04:4b:71:31:4b:b8:15:8e:02:07:00:88:9c:a3:
bf:0a:51:21:e8:57:29:c1:f5:78:c2:d7:af:72:12:
d1:56:af:c2:b4:a8:99:ae:7a:d8:ab:a1:c8:83:34:
f4:7d:05:8a:5a:49:b7:6c:ff:10:85:84:4f:5a:2f:
55:59:61:02:13:4d:2c:ee:bd:39:41:bd:96:39:8c:
e5:3d:66:89:24:ea:71:e4:ed:68:27:98:b3:fd:ce:
a0:39:df:7a:da:1d:b3:41:74:52:41:8d:93:b1:d4:
13:26:96:91:eb:98:b8:e2:0e:91:87:1c:80:c9:7a:
00:b4:eb:7f:f9:3b:3e:6a:ba:f8:05:3b:8e:73:3a:
00:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4B:E2:41:27:84:42:2D:32:09:2F:4D:39:2A:8E:37:EB:AD:AF:2E
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/ukviQSeEQi0yCS9NOSqON-utry4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5e:d4:75:76:37:09:78:54:82:96:bf:8f:ad:2b:32:7f:21:
10:72:b2:4b:18:1b:f4:1f:70:80:12:f6:df:5b:76:0e:8b:45:
af:f5:e4:7d:77:a9:c9:c7:59:01:f7:e0:d0:86:2d:c5:6d:90:
db:d3:c7:6a:94:f0:9c:e2:70:a7:ad:c3:56:65:00:81:da:df:
6e:a3:a2:b9:a0:ab:74:ba:49:2a:78:25:6c:a8:d4:03:58:1e:
c2:00:da:f7:d7:fb:36:30:97:c4:d1:67:d7:2b:83:f7:e5:0b:
61:be:b8:b8:4f:50:ad:19:8c:25:e6:33:23:76:fe:29:06:73:
ed:3c:56:34:6a:5c:b7:13:3c:4c:6c:af:d8:1a:7b:f7:f8:dc:
7a:37:20:fc:98:fc:76:63:99:e7:4d:6b:e9:20:87:b3:bd:04:
dd:06:ae:6e:91:a9:21:99:a6:d0:b9:e3:ad:27:8c:41:bf:a3:
71:2e:6c:11:3d:70:8c:aa:27:02:71:96:17:c7:57:a4:35:99:
73:c9:08:e8:80:de:4f:68:ed:62:ba:5f:c0:6f:fe:28:c6:f3:
65:4d:23:e8:16:44:cb:98:3a:d8:c0:7e:c5:ae:ae:14:32:3e:
ea:f5:52:2f:6a:ad:78:1f:f8:99:eb:c8:73:ee:94:8c:e9:38:
50:fb:fd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:37 2025 by rpki-client