Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/uvW8FLt64TifMcg6Go7MJf0nkQM.roa
File: uvW8FLt64TifMcg6Go7MJf0nkQM.roa (raw, json)
Hash identifier: A/15bNHuKIJki2UprZSB5lMkEqVBIHX8e9CCIuMIIq0=
Subject key identifier: BA:F5:BC:14:BB:7A:E1:38:9F:31:C8:3A:1A:8E:CC:25:FD:27:91:03
Certificate issuer: /CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Certificate serial: 018CC26D3BB2FAB3152EB07287D864FFBF76
Authority key identifier: 1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/uvW8FLt64TifMcg6Go7MJf0nkQM.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42013
IP address blocks: 2.58.132.0/24 maxlen: 24
2.58.132.0/23 maxlen: 23
2.58.132.0/22 maxlen: 22
194.5.235.0/24 maxlen: 24
91.229.247.0/24 maxlen: 24
185.99.44.0/24 maxlen: 24
185.99.44.0/22 maxlen: 22
185.99.44.0/23 maxlen: 23
185.99.47.0/24 maxlen: 24
185.99.46.0/24 maxlen: 24
185.99.45.0/24 maxlen: 24
185.99.46.0/23 maxlen: 23
2.58.133.0/24 maxlen: 24
2.58.135.0/24 maxlen: 24
2.58.134.0/23 maxlen: 23
2.58.134.0/24 maxlen: 24
212.47.82.0/23 maxlen: 23
212.47.83.0/24 maxlen: 24
212.47.82.0/24 maxlen: 24
185.61.22.0/23 maxlen: 23
185.61.23.0/24 maxlen: 24
185.61.22.0/24 maxlen: 24
185.61.20.0/22 maxlen: 22
185.61.20.0/23 maxlen: 23
185.61.21.0/24 maxlen: 24
185.61.20.0/24 maxlen: 24
185.209.111.0/24 maxlen: 24
185.209.110.0/24 maxlen: 24
185.209.110.0/23 maxlen: 23
185.209.109.0/24 maxlen: 24
185.209.108.0/24 maxlen: 24
185.209.108.0/22 maxlen: 22
185.209.108.0/23 maxlen: 23
2a0b:4d40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3b:b2:fa:b3:15:2e:b0:72:87:d8:64:ff:bf:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baf5bc14bb7ae1389f31c83a1a8ecc25fd279103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:28:7d:f1:9d:fc:52:d4:36:c3:13:70:d8:
97:d9:85:1f:a5:97:16:1f:6a:26:47:6c:d2:fb:7d:
be:43:6c:d1:3e:d6:69:7d:4d:52:da:b0:90:73:cf:
41:79:6a:66:59:0d:a7:1d:ce:cf:f6:a1:b6:c3:e0:
78:ef:e3:ed:fd:8a:d4:bc:0a:9e:ad:c6:4b:11:bd:
31:31:1e:ab:11:20:59:eb:31:79:27:fb:6a:2c:cd:
f4:05:e9:f5:40:b5:2f:fd:6b:01:44:4c:3b:06:ac:
15:80:bc:b6:4d:4c:ed:08:35:c1:fb:61:5f:dd:71:
3d:06:91:3e:00:db:32:2a:07:fd:fc:7c:42:39:c7:
0b:75:0c:0f:c0:81:73:51:35:f5:30:4b:d9:48:b0:
4b:ec:35:1d:3b:fa:54:09:62:5d:ca:d6:10:e4:6d:
7b:d4:59:89:ed:bf:92:94:fb:19:40:53:e9:ec:14:
6e:de:9c:59:d0:4b:65:69:89:3a:88:e7:01:92:f0:
50:f9:a9:6d:b3:92:e5:91:14:d0:37:1e:34:e4:0f:
e2:9a:c8:9a:c8:27:42:53:b7:cb:2c:36:52:d0:ed:
c1:58:b2:99:ec:f4:ed:1d:6a:65:f9:79:d7:3c:71:
5a:da:ea:aa:4e:25:86:0b:9e:41:27:90:6d:9d:fb:
40:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F5:BC:14:BB:7A:E1:38:9F:31:C8:3A:1A:8E:CC:25:FD:27:91:03
X509v3 Authority Key Identifier:
keyid:1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/uvW8FLt64TifMcg6Go7MJf0nkQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.132.0/22
91.229.247.0/24
185.61.20.0/22
185.99.44.0/22
185.209.108.0/22
194.5.235.0/24
212.47.82.0/23
IPv6:
2a0b:4d40::/29
Signature Algorithm: sha256WithRSAEncryption
39:35:12:fc:2f:08:31:b2:47:66:5f:f3:29:3f:cd:73:32:de:
ca:14:a9:03:ee:e0:47:5e:04:2d:4c:fe:c2:a4:06:d7:34:17:
ca:28:eb:c2:71:43:84:33:1b:7f:7a:20:7a:74:bb:01:6e:c9:
fb:a1:f8:53:22:56:b0:ca:c9:a9:64:75:21:f9:19:59:21:8e:
47:8e:66:82:2e:ba:ce:59:d2:71:17:03:53:1f:6b:da:0b:f9:
a6:36:d0:b2:a4:39:17:4d:bf:f5:bc:1c:47:07:29:4a:d2:d9:
67:40:a4:b1:2f:2a:d1:00:4e:58:c5:8e:e3:77:0c:c2:06:75:
6b:92:07:6b:fc:9e:95:91:eb:15:58:54:1d:b6:45:a5:97:7b:
da:7f:9e:b9:4e:d4:19:de:69:43:e1:80:45:bb:1c:f1:d7:b5:
26:7b:1a:80:a2:97:36:30:69:a0:8e:1d:d1:56:da:bf:bc:9e:
19:44:75:38:69:a7:30:47:c7:9f:14:5b:fa:9e:0f:59:b0:17:
d1:4b:cf:90:16:39:53:e7:53:d6:3c:ff:33:0d:6d:93:94:b2:
24:18:30:de:73:8c:5b:13:99:66:7b:53:87:1a:8e:42:1c:a4:
0d:0d:a2:60:2e:cb:0c:7f:6e:83:85:ff:61:8d:db:cb:b9:51:
7a:b4:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:59 2025 by rpki-client