Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/UV87Q5z65vMSycNlO55TIQ1LRp8.roa
File: UV87Q5z65vMSycNlO55TIQ1LRp8.roa (raw, json)
Hash identifier: Ri2Q1mGRbzSDKTcY4vn7yRNt/LqqtMItZnGOmQgiY8M=
Subject key identifier: 51:5F:3B:43:9C:FA:E6:F3:12:C9:C3:65:3B:9E:53:21:0D:4B:46:9F
Certificate issuer: /CN=b43a71ca60d74e45d2b9748ab1066529fd01337e
Certificate serial: 018CC94DDFFDE33824B3A378A4947433BA55
Authority key identifier: B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/UV87Q5z65vMSycNlO55TIQ1LRp8.roa
Signing time: Tue 02 Jan 2024 08:32:53 +0000
ROA not before: Tue 02 Jan 2024 08:32:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62373
IP address blocks: 185.240.60.0/22 maxlen: 22
185.229.140.0/22 maxlen: 22
185.38.4.0/22 maxlen: 22
2a04:7501::/32 maxlen: 32
2a0c:7380::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:df:fd:e3:38:24:b3:a3:78:a4:94:74:33:ba:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43a71ca60d74e45d2b9748ab1066529fd01337e
Validity
Not Before: Jan 2 08:32:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=515f3b439cfae6f312c9c3653b9e53210d4b469f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:1a:59:92:9b:26:cc:99:4b:04:42:60:f7:
7b:a5:5f:03:e2:74:ad:a0:66:ab:74:86:03:7c:26:
81:4a:05:85:85:c8:b8:34:c6:e5:e6:07:57:5a:c0:
e3:04:c2:87:25:ad:82:0a:50:75:35:52:87:7d:70:
a5:7d:2c:6c:56:41:ba:3b:b4:84:fd:06:37:f6:02:
f7:d6:ae:d3:6f:05:b7:f9:40:6b:76:8d:28:5f:9d:
d4:2d:36:25:dc:1c:7c:a3:13:a3:6c:51:6a:53:1e:
b1:8d:cb:29:4f:33:ae:93:3e:d7:11:17:64:f8:d7:
92:05:5b:6b:f5:59:d7:60:f5:23:29:07:b9:bc:cd:
ab:d4:00:3c:f7:2c:cd:e4:12:8d:b2:c7:ea:8d:7d:
26:dd:fb:e2:74:19:2c:fe:85:9f:61:ba:2f:01:aa:
c3:ca:0b:18:1e:43:5b:54:ba:af:76:58:75:2d:80:
17:02:2d:a1:7d:45:a0:95:5a:87:48:13:cd:76:88:
be:f1:21:3e:8e:75:1e:ee:0c:d7:51:71:76:44:5f:
6d:1e:94:25:2d:29:97:a8:bb:81:83:7c:80:56:84:
bd:42:b0:f0:22:3a:a6:b1:16:ba:9c:6d:9d:fa:69:
26:dd:55:56:b7:fc:fc:42:e4:b4:35:e7:6a:1a:a9:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5F:3B:43:9C:FA:E6:F3:12:C9:C3:65:3B:9E:53:21:0D:4B:46:9F
X509v3 Authority Key Identifier:
keyid:B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/UV87Q5z65vMSycNlO55TIQ1LRp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.4.0/22
185.229.140.0/22
185.240.60.0/22
IPv6:
2a04:7501::/32
2a0c:7380::/29
Signature Algorithm: sha256WithRSAEncryption
b8:c0:6f:93:ae:de:d5:d8:f4:f0:5c:1f:05:90:aa:45:7f:c2:
9e:1d:b2:91:7c:68:a8:fd:60:f2:6f:b6:6e:17:e3:0a:23:5f:
7c:19:13:e1:74:2d:fc:89:8a:f1:c2:e7:d3:63:92:e2:e8:e1:
36:7c:e7:4b:8a:d7:fa:36:6d:45:39:e2:ba:c8:e3:07:31:01:
ed:c6:f4:2d:ee:7e:fb:3b:79:e0:17:bf:f7:a5:6b:00:4f:97:
63:21:14:d2:c7:1a:ae:72:86:16:f6:9e:51:8d:38:fa:52:db:
f8:74:bd:b4:07:59:57:a5:86:c7:00:18:93:63:5b:38:02:7d:
9e:51:e6:7c:4c:cb:20:4a:7b:32:db:06:21:00:1f:a8:b7:dd:
fd:e7:e6:0b:f2:7c:34:05:7f:69:cb:d7:65:43:be:c5:6c:04:
37:c8:59:e9:44:b3:09:9d:25:e2:9d:39:18:cc:fa:97:f5:5d:
a2:e7:90:2a:d5:57:5e:d2:b5:60:cc:0a:9a:fc:d9:e1:f3:90:
44:4c:be:64:7d:10:d5:ac:94:23:02:6b:c1:e4:40:45:31:15:
0f:33:60:b3:f4:d7:6e:0c:8f:c2:76:62:43:82:07:e9:80:61:
b0:f6:f5:0f:10:dc:29:5e:2e:0d:46:68:a9:15:85:24:7b:96:
5e:f8:c4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:30:55 2025 by rpki-client