Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/UDsd-nYuojLeMIqeKUBvx64B-Sg.roa
File: UDsd-nYuojLeMIqeKUBvx64B-Sg.roa (raw, json)
Hash identifier: WmAT9FKjL1re7ZQ7UcMARP2aMS5fc8xf6zB8BKE8oIs=
Subject key identifier: 50:3B:1D:FA:76:2E:A2:32:DE:30:8A:9E:29:40:6F:C7:AE:01:F9:28
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 018CC500C77BB7456AF1F3C9F2305BDBE123
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/UDsd-nYuojLeMIqeKUBvx64B-Sg.roa
Signing time: Mon 01 Jan 2024 12:30:11 +0000
ROA not before: Mon 01 Jan 2024 12:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197730
IP address blocks: 91.190.152.0/24 maxlen: 32
45.156.20.0/24 maxlen: 32
194.36.170.0/24 maxlen: 32
193.28.186.0/24 maxlen: 32
194.113.209.0/24 maxlen: 32
194.36.208.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 09 Aug 2024 00:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c7:7b:b7:45:6a:f1:f3:c9:f2:30:5b:db:e1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Jan 1 12:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=503b1dfa762ea232de308a9e29406fc7ae01f928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:bf:68:7c:77:5d:62:2d:f7:43:b1:ed:64:
75:75:62:43:b6:9a:97:c7:ab:43:35:b8:d8:12:fe:
a5:e3:b1:71:d1:54:62:15:34:77:f9:a2:84:f6:7e:
67:66:ce:13:5e:0d:a7:d6:a2:ee:25:52:d6:9b:ee:
10:1c:e2:05:b5:5c:13:1a:30:b3:8b:ab:85:65:a2:
05:09:9f:b2:48:cc:dc:47:a2:e6:66:03:68:df:9e:
cd:52:0b:91:48:b3:1d:71:56:fe:79:94:4d:e8:87:
61:f8:15:a4:41:16:c8:a5:a0:0c:b3:52:79:53:3d:
7c:cc:fd:f4:47:c2:21:38:b9:64:5d:59:4e:d4:aa:
f7:2f:b0:65:f2:17:31:58:57:1f:55:a4:d1:aa:7f:
7c:de:4c:c6:8e:88:74:c6:c7:90:44:27:74:c1:2e:
e8:aa:e2:c1:87:6d:21:ee:d2:7d:3c:0d:24:74:aa:
62:a1:74:1e:a4:89:17:f3:9c:0b:c7:cb:cb:d8:39:
fd:d0:52:33:8c:30:7f:f5:0f:6d:c2:fd:99:70:29:
07:9b:6b:56:77:5d:af:0b:cb:56:87:3f:e4:02:26:
df:20:8f:65:c1:88:db:f7:6b:ad:58:48:e3:de:ce:
43:98:8b:f8:6c:50:66:d9:63:e1:c9:92:e5:6f:a6:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3B:1D:FA:76:2E:A2:32:DE:30:8A:9E:29:40:6F:C7:AE:01:F9:28
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/UDsd-nYuojLeMIqeKUBvx64B-Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.20.0/24
91.190.152.0/24
193.28.186.0/24
194.36.170.0/24
194.36.208.0/24
194.113.209.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:1c:2b:a7:b1:9c:13:47:8c:6a:ac:d9:40:0f:05:73:fd:c6:
55:9b:73:e1:cf:6e:31:a0:0b:d9:ff:04:a9:d6:f7:c9:7a:ea:
ca:8f:58:79:1d:a6:31:99:7c:0e:d2:38:ff:af:66:37:be:a3:
c7:72:7f:a0:11:bd:c6:0f:1e:5e:6a:8b:85:6b:94:2f:9d:22:
99:ab:49:02:77:30:d3:43:f6:d2:5e:55:38:fc:56:f9:d3:e8:
29:19:71:1f:35:d9:14:f4:c0:06:38:00:99:78:c9:7e:93:4c:
00:57:6e:fb:9f:e5:d6:8d:ed:92:6a:cc:d0:50:01:12:8b:fc:
74:2a:ec:d7:46:fa:93:90:0f:9e:f3:67:4b:30:df:3a:5f:57:
51:08:7f:c2:46:5a:86:32:47:58:d2:7c:c2:1d:1d:02:64:63:
5e:c2:9d:45:42:f5:5c:01:e6:b5:28:b4:77:00:58:a4:c9:fd:
0c:b1:4d:b5:f6:a6:f1:b4:bd:e7:25:74:e3:30:f3:ff:89:92:
7b:91:fd:06:5a:8e:a3:7a:96:e0:52:6f:8e:9d:5a:e3:2d:7b:
ce:ab:86:4f:05:bb:e0:8e:f9:fa:20:b7:c4:23:de:4d:99:40:
d6:b7:b9:52:a0:ad:c7:64:96:87:c7:8b:da:49:07:e9:a1:ad:
90:1e:e5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:23 2025 by rpki-client