Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/cug6VYXcDfvBTAHgc4xBfWvuzdo.roa
File: cug6VYXcDfvBTAHgc4xBfWvuzdo.roa (raw, json)
Hash identifier: f0WTpqOoYVesXet0eZsbjdLC0WPmD+xWWp9rpBBs/MU=
Subject key identifier: 72:E8:3A:55:85:DC:0D:FB:C1:4C:01:E0:73:8C:41:7D:6B:EE:CD:DA
Certificate issuer: /CN=367070b169d11a96291004e3000f9b04d4e112d3
Certificate serial: 018CC5DC292B22F306012E1ED8F376FA04B4
Authority key identifier: 36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/cug6VYXcDfvBTAHgc4xBfWvuzdo.roa
Signing time: Mon 01 Jan 2024 16:29:49 +0000
ROA not before: Mon 01 Jan 2024 16:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202315
IP address blocks: 194.49.83.0/24 maxlen: 24
194.49.80.0/24 maxlen: 24
194.49.81.0/24 maxlen: 24
194.49.82.0/24 maxlen: 24
2a0c:c8c0:1::/48 maxlen: 48
2a0c:c8c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:29:2b:22:f3:06:01:2e:1e:d8:f3:76:fa:04:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367070b169d11a96291004e3000f9b04d4e112d3
Validity
Not Before: Jan 1 16:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72e83a5585dc0dfbc14c01e0738c417d6beecdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:e8:c4:61:85:0d:e7:e5:80:42:30:62:e6:
e4:3e:26:11:f8:85:8b:d6:90:1d:c3:19:92:b5:ed:
d5:92:bb:c3:71:c9:19:9e:ec:88:5c:94:ca:45:d3:
01:cc:24:69:8b:e2:03:d0:03:0f:8d:24:3b:c3:f2:
a5:47:15:13:da:b9:e9:82:b3:de:38:f8:af:03:53:
d1:5e:d5:1f:ac:de:27:27:20:b5:d9:9b:fb:39:a5:
e6:7d:55:cb:68:f1:23:84:53:23:5f:d3:57:07:70:
a5:01:77:9d:35:f9:2a:66:e3:3a:bd:1c:1f:ab:ee:
58:2f:5d:1b:92:aa:a0:a0:1a:fb:04:85:52:c6:11:
06:4a:c7:c0:5a:ce:c0:e8:fa:97:d3:c1:24:d0:4e:
19:a0:ee:a3:7b:40:ef:a3:da:45:c0:d2:e1:7b:2e:
b7:4a:67:c6:a3:10:f1:54:ff:a3:f8:f7:25:7b:5e:
90:47:6e:e9:a8:7d:58:db:55:18:fc:9a:c8:0b:eb:
b5:0c:2f:77:6c:e9:ed:95:48:31:62:23:61:9e:2a:
43:30:b5:be:d5:3d:74:57:49:60:b1:02:1d:ee:c8:
e8:64:75:eb:1e:ee:70:12:aa:ea:95:22:1d:9e:63:
0b:5a:e6:96:9d:23:5c:90:4e:9b:9d:51:57:bc:1c:
1f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E8:3A:55:85:DC:0D:FB:C1:4C:01:E0:73:8C:41:7D:6B:EE:CD:DA
X509v3 Authority Key Identifier:
keyid:36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/cug6VYXcDfvBTAHgc4xBfWvuzdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.80.0/22
IPv6:
2a0c:c8c0::/47
Signature Algorithm: sha256WithRSAEncryption
b7:fe:88:a6:50:ff:1d:f3:f0:93:98:7b:d4:ef:3b:6f:07:58:
bd:42:c2:af:17:d5:b7:1a:16:06:8f:52:28:b7:e8:ce:58:ed:
12:33:86:47:07:c5:77:72:a1:88:5d:b6:be:78:c4:0d:aa:19:
80:b2:f2:a1:34:92:33:1c:00:ec:20:13:fc:f6:bf:f5:80:72:
5b:e2:f9:a1:40:4f:e7:ea:ca:fb:5d:7b:f0:1a:c7:4a:c5:aa:
55:22:05:2d:fd:10:7b:fd:fb:46:78:9d:b4:ff:11:d2:44:3b:
39:99:14:76:08:aa:fa:51:0b:05:4f:4c:b7:3f:0e:fd:46:13:
fe:41:ea:76:49:78:03:d1:f6:bd:de:b7:fd:cd:2e:e5:ce:10:
4c:fe:a1:fc:24:67:96:0a:53:22:64:5b:15:c2:78:a9:ce:0f:
91:18:55:0d:9b:12:12:f9:1d:16:af:ae:ac:19:2e:02:a4:78:
02:a6:69:b2:45:f4:47:a9:3a:92:36:be:0f:c1:6a:67:1f:c4:
2c:ba:28:e7:e5:92:81:4a:1f:d8:91:99:74:88:69:de:62:4d:
60:29:b3:06:73:cf:c3:fc:a7:64:f9:cc:27:94:db:70:52:a3:
6c:ef:17:16:9a:38:e2:9b:33:66:14:68:96:25:dd:43:1b:18:
9f:ab:65:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:03 2025 by rpki-client