Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/uT2jyyHB35qYHPbAQ57WHe5AcWc.roa
File: uT2jyyHB35qYHPbAQ57WHe5AcWc.roa (raw, json)
Hash identifier: qckHkVOUXIsDJvWLi3y7B6CQLKduqUg5eUOhqgPoc1c=
Subject key identifier: B9:3D:A3:CB:21:C1:DF:9A:98:1C:F6:C0:43:9E:D6:1D:EE:40:71:67
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 018EA33D44D61E856BBA041271C39C8C21E7
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/uT2jyyHB35qYHPbAQ57WHe5AcWc.roa
Signing time: Wed 03 Apr 2024 09:14:45 +0000
ROA not before: Wed 03 Apr 2024 09:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203937
IP address blocks: 185.253.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 12:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:3d:44:d6:1e:85:6b:ba:04:12:71:c3:9c:8c:21:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Apr 3 09:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b93da3cb21c1df9a981cf6c0439ed61dee407167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:42:6d:c1:22:8d:4b:30:a8:45:cd:08:85:24:
be:f1:11:77:9a:21:5d:9a:f6:a1:13:91:fe:91:ee:
0d:e9:70:35:ef:70:17:68:e8:8e:a0:bf:b8:e3:38:
e4:c3:05:3a:d8:78:19:5f:6e:91:0a:01:98:a0:99:
ef:93:93:78:20:58:5c:83:bf:09:bb:11:ce:e4:b6:
85:f7:16:7f:a7:54:a1:fd:49:fa:de:34:ec:a1:99:
b4:f7:67:83:2f:50:44:f3:be:c1:54:dd:37:4f:92:
24:e0:6c:be:a1:88:01:5f:70:dd:19:f2:c2:27:0b:
d2:ae:15:a1:10:03:02:ff:3c:be:bf:81:96:41:b6:
0e:3b:bc:f6:b5:22:53:4a:ee:e3:b3:b3:9d:1f:7b:
58:7a:50:51:58:00:46:52:29:e8:12:d9:98:3e:f2:
be:4e:43:be:15:86:aa:57:21:98:a0:68:7b:42:e3:
05:e8:4f:ba:19:1e:99:95:4b:8b:b2:b7:0e:d0:fb:
77:e1:a9:b3:95:ae:75:f6:bb:c7:fc:a5:b0:d2:e8:
86:d9:46:67:87:b5:b0:bd:d9:be:60:2f:f1:c5:2d:
53:9e:2d:e2:2a:b4:37:3e:f4:81:e8:80:51:82:90:
ed:f0:41:7f:fc:15:ce:f7:91:38:78:12:53:42:99:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3D:A3:CB:21:C1:DF:9A:98:1C:F6:C0:43:9E:D6:1D:EE:40:71:67
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/uT2jyyHB35qYHPbAQ57WHe5AcWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.235.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ee:63:3e:78:7a:d3:42:c2:c7:30:b6:dc:2c:db:4a:f3:f3:
22:5a:41:a0:22:93:2b:1b:d2:f9:c6:92:d6:7e:bc:9c:1f:d5:
a5:8e:9c:d8:40:e2:3c:df:ab:4c:ab:46:fe:a5:48:09:19:16:
62:01:19:49:6d:1d:98:ff:35:70:d1:6f:2b:cd:3f:0d:ab:49:
69:89:e9:be:30:92:2f:1a:ca:fc:9f:84:32:61:7e:92:e5:d7:
d5:d2:8f:a2:ca:44:ff:16:42:55:b7:04:ca:34:f7:67:39:17:
f8:da:fc:73:bb:79:8a:5d:b9:eb:28:40:a6:9c:4a:86:96:43:
d1:c8:0c:a6:d5:40:dc:e2:40:42:70:fe:0d:0f:02:e8:f4:2b:
96:ea:a9:1c:b5:93:68:0d:9f:26:a0:e8:48:e9:1c:88:ef:42:
03:30:b6:14:f3:0c:64:58:8b:ae:6c:6c:ad:30:d8:ad:1b:2a:
4d:24:22:3a:6c:94:7a:41:72:b4:40:20:74:45:b2:48:4c:66:
bf:26:7b:17:27:1c:56:97:dd:d6:03:e0:e7:04:fa:d7:b0:92:
34:ac:c3:68:b7:bf:ce:f7:54:36:44:30:7b:1b:06:ec:ff:d4:
67:6e:e1:6f:74:8b:c1:63:57:68:74:af:16:35:69:2b:7f:25:
4f:f3:8d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:07 2025 by rpki-client