Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/upU9Y6W2IvUme8lAoL3CSpCONn4.roa
File: upU9Y6W2IvUme8lAoL3CSpCONn4.roa (raw, json)
Hash identifier: oIqHmR1WdHiRLrN1GJPEVcpea/tnY7CRNwVVlUUTdCU=
Subject key identifier: BA:95:3D:63:A5:B6:22:F5:26:7B:C9:40:A0:BD:C2:4A:90:8E:36:7E
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018F345D8B54E7F0B55C3910A493AA9F7066
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/upU9Y6W2IvUme8lAoL3CSpCONn4.roa
Signing time: Wed 01 May 2024 13:34:56 +0000
ROA not before: Wed 01 May 2024 13:34:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52053
IP address blocks: 185.255.112.0/24 maxlen: 24
193.38.250.0/24 maxlen: 24
194.156.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 11:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:5d:8b:54:e7:f0:b5:5c:39:10:a4:93:aa:9f:70:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: May 1 13:34:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba953d63a5b622f5267bc940a0bdc24a908e367e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:d8:80:8c:22:ec:96:1a:64:c0:af:eb:be:
af:49:62:4f:7d:1a:d6:9e:b0:82:aa:a2:39:e4:24:
a2:17:a9:d4:c8:33:a6:6a:2f:29:cb:07:80:5b:0e:
04:d1:00:d7:c3:bc:0b:79:1d:df:a3:1b:45:16:19:
fb:1d:64:8a:7a:d5:1b:c4:8c:83:f5:9b:0b:6b:0f:
64:74:6f:13:d7:57:ad:46:05:80:b6:f9:28:28:5d:
0c:90:25:1a:32:2d:1c:b7:09:69:29:b1:47:b3:a8:
74:b6:13:69:e2:e4:8c:5d:96:99:ae:2c:2c:df:ef:
7c:91:ed:ed:1d:fa:44:71:16:24:09:42:88:9b:ed:
4c:d4:7b:8c:c6:b1:ad:b8:5b:68:64:66:db:e8:3e:
24:7a:aa:8d:12:b0:32:42:09:ae:06:aa:6c:76:45:
81:22:78:c3:5b:7b:e7:68:a3:9d:a8:cf:03:1d:40:
f0:e1:ba:3d:05:cd:5a:a7:da:55:23:dc:5f:a4:b1:
73:80:8d:7c:dd:a6:41:e4:dc:48:79:4c:12:4f:dc:
02:47:b1:aa:68:15:9d:b2:b4:4f:5e:01:91:9a:a1:
16:ca:ce:41:32:df:cb:1f:34:ce:4b:c1:6c:67:16:
79:64:5d:08:f7:3a:2e:46:c6:d3:48:22:e4:3a:2d:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:95:3D:63:A5:B6:22:F5:26:7B:C9:40:A0:BD:C2:4A:90:8E:36:7E
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/upU9Y6W2IvUme8lAoL3CSpCONn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.112.0/24
193.38.250.0/24
194.156.79.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b8:62:70:f1:04:d6:66:06:0a:44:b2:da:af:a6:b0:28:a9:
7a:1f:a5:2f:c7:05:f1:58:94:3e:68:a0:73:23:be:bb:30:11:
9a:b1:0e:cb:f0:61:86:fb:65:fc:79:6e:7a:ec:5d:0f:cc:ce:
70:45:8e:ba:56:99:6a:ec:01:e6:3e:c3:dc:dd:0a:15:d8:78:
cf:7c:8d:d8:ba:77:03:67:b1:a7:fe:51:4a:31:39:b9:f5:40:
a4:49:93:55:f7:04:19:02:98:b3:50:8f:ac:a8:44:38:84:8f:
db:b7:7e:15:ba:99:e2:b4:0d:63:d7:f7:59:bc:df:a6:c4:c8:
93:13:f5:fb:94:ce:70:c9:af:03:1f:34:50:a2:20:bc:8c:d3:
d1:73:8b:7d:90:58:b8:fb:04:b0:5f:e1:1a:e7:fc:1a:1b:4f:
e5:31:c0:d2:52:41:79:47:7a:ef:1f:b4:92:43:3d:05:e3:66:
c5:8f:8e:7d:6c:1d:90:85:31:d4:a9:29:9b:27:be:bb:80:5a:
b7:0f:aa:ea:c2:63:e5:d1:2c:48:88:d7:63:79:3a:94:ce:f0:
84:c0:92:fb:46:ac:d6:fc:4e:92:06:46:f1:6e:28:ba:99:32:
1b:1a:17:f7:b2:d5:e9:2c:09:64:f8:a9:52:14:e5:0c:39:3c:
8b:4a:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:37 2025 by rpki-client