Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/uVSf6JT9Lv3YFXWiy6XS_AUwQAI.roa
File: uVSf6JT9Lv3YFXWiy6XS_AUwQAI.roa (raw, json)
Hash identifier: AYNoB1FtNKGb/zHoO9sxV88N40tUkw8WpI8Usim+33g=
Subject key identifier: B9:54:9F:E8:94:FD:2E:FD:D8:15:75:A2:CB:A5:D2:FC:05:30:40:02
Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial: 0191DC748291E845D7C8D2584378C04E11A0
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/uVSf6JT9Lv3YFXWiy6XS_AUwQAI.roa
Signing time: Tue 10 Sep 2024 15:01:48 +0000
ROA not before: Tue 10 Sep 2024 15:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.115.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 18:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dc:74:82:91:e8:45:d7:c8:d2:58:43:78:c0:4e:11:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Validity
Not Before: Sep 10 15:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9549fe894fd2efdd81575a2cba5d2fc05304002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:79:06:00:f6:a8:38:31:2e:b4:b6:1e:2b:
dc:74:d7:b7:9a:78:90:93:96:12:4c:17:e6:70:90:
ef:04:81:21:aa:a8:8f:ed:72:e1:ca:78:b4:51:dd:
48:9d:6b:53:cb:04:4e:60:fa:f5:34:44:56:93:a0:
f1:2f:c3:f5:8f:cb:b3:d5:26:1c:16:a0:c0:d6:2d:
f8:4c:89:5e:a0:03:9b:36:e6:39:aa:4e:72:c6:78:
d4:bb:fa:d0:11:92:74:48:2c:e3:7c:76:70:0f:cb:
1b:ed:fc:24:7f:61:48:bd:a3:02:5e:58:6a:97:0f:
e4:dc:78:17:cb:8d:ce:c3:5c:2d:72:3b:e5:ed:b9:
49:49:f1:e3:40:92:25:b0:4a:4d:4d:b9:c6:e3:50:
64:d0:3c:6d:34:9b:69:54:11:6d:6f:75:5e:d7:68:
45:8e:02:11:11:5e:9a:6c:f8:a5:bf:0a:bb:0f:d8:
9f:ff:62:77:14:dd:db:9e:68:74:21:72:26:72:b9:
01:d5:1e:36:f7:52:a5:17:ae:a9:bb:93:5d:76:f5:
53:f9:0b:19:8e:28:ea:ac:61:fd:71:cd:59:12:63:
53:4b:fe:8b:c4:5c:24:4a:19:bd:0d:37:55:82:27:
0c:c3:75:cf:cd:10:93:f5:c6:51:66:d6:98:c9:d8:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:54:9F:E8:94:FD:2E:FD:D8:15:75:A2:CB:A5:D2:FC:05:30:40:02
X509v3 Authority Key Identifier:
keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/uVSf6JT9Lv3YFXWiy6XS_AUwQAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.161.0/24
Signature Algorithm: sha256WithRSAEncryption
70:54:57:53:27:fb:5d:08:a2:32:10:eb:d1:9d:76:6f:09:e1:
d9:0f:10:a0:52:b6:bc:4f:2b:48:7a:1a:fb:6f:29:0b:b4:17:
1d:92:a9:02:6e:6b:fd:86:78:7d:c3:11:f8:ce:86:54:f2:8c:
1d:3b:37:7c:c0:a5:91:66:ae:47:e6:aa:98:a8:fb:82:a8:3e:
06:ad:1d:9e:be:07:b6:ae:c1:0f:3d:f4:1f:32:e4:02:dd:dd:
7e:88:73:25:29:82:59:77:59:4b:70:c6:89:d3:b2:05:c5:31:
69:de:fd:0d:04:52:70:a6:c4:69:74:c2:d4:33:23:4c:ee:1e:
98:04:be:87:f6:76:1b:90:c5:88:b9:30:27:43:c2:13:72:02:
19:d5:91:38:cd:ce:4d:b5:4e:8b:af:3f:f6:53:07:e8:46:b3:
a3:f1:1f:30:19:60:4e:60:32:75:26:17:c7:67:d9:67:b2:b3:
73:34:fb:5c:ea:cb:8e:d4:21:58:7f:ef:64:be:01:49:82:d6:
dc:7d:a0:3a:68:12:14:34:de:52:cc:da:66:c3:a3:03:f0:18:
8a:23:88:a7:72:49:67:b0:00:ea:67:09:47:5b:09:4f:39:2e:
95:74:ae:6e:33:f2:b8:42:d1:37:33:ac:c2:8a:9c:d8:3e:a4:
cc:9a:23:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:38 2025 by rpki-client