Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/UUoR4oI8yhilOFDxCAujdDfpLaU.roa
File: UUoR4oI8yhilOFDxCAujdDfpLaU.roa (raw, json)
Hash identifier: VqYU8iYPXRsvJ7LHDU2PmmyIExxHtTepG/BADouokTE=
Subject key identifier: 51:4A:11:E2:82:3C:CA:18:A5:38:50:F1:08:0B:A3:74:37:E9:2D:A5
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 018CC3B6A2855B0819B76031FA792E189191
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/UUoR4oI8yhilOFDxCAujdDfpLaU.roa
Signing time: Mon 01 Jan 2024 06:29:35 +0000
ROA not before: Mon 01 Jan 2024 06:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35055
IP address blocks: 185.190.64.0/22 maxlen: 24
185.64.120.0/22 maxlen: 24
45.14.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a2:85:5b:08:19:b7:60:31:fa:79:2e:18:91:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Jan 1 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=514a11e2823cca18a53850f1080ba37437e92da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:bc:b2:d9:0e:47:68:9f:70:7c:b6:fa:f7:
1e:ba:41:fe:13:15:0e:98:b4:9a:c3:24:f2:53:f3:
e2:5f:a3:47:2f:c2:dd:c8:15:82:76:0f:2c:06:81:
69:5c:75:a8:cf:7a:8b:37:e4:7e:b4:84:ed:69:81:
73:f1:27:0e:f2:cf:c4:c8:5d:4e:55:e2:9f:3e:77:
0d:29:e2:ff:d0:f8:6a:50:22:66:5c:17:35:8c:11:
da:b1:0b:4e:5e:f1:0f:1f:55:97:c1:71:74:6e:91:
e4:45:eb:4f:03:47:57:36:0e:8e:f5:fe:b4:e4:2f:
a5:14:18:24:ba:df:0a:f9:0a:43:27:78:6a:c5:82:
c3:50:9a:94:ca:db:b2:3a:07:7c:c4:fe:82:4f:51:
f9:c4:03:2a:a6:6a:ed:aa:d0:32:f6:b1:97:f0:cf:
5b:0b:6d:60:76:e9:93:5c:6c:02:18:9c:ee:22:8a:
bf:5d:f8:1b:37:f0:d6:dc:0e:ae:d0:5c:12:60:a3:
a6:60:78:5f:40:77:1d:8c:07:4f:c9:fb:2f:47:e7:
93:86:7d:97:8e:bc:e6:b9:aa:fd:c2:08:36:bd:cc:
d8:64:fe:78:b6:fc:ae:50:16:4a:1b:8b:3c:f0:83:
61:8f:76:85:0a:47:f6:72:7f:e2:9e:9d:90:31:25:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4A:11:E2:82:3C:CA:18:A5:38:50:F1:08:0B:A3:74:37:E9:2D:A5
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/UUoR4oI8yhilOFDxCAujdDfpLaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.240.0/22
185.64.120.0/22
185.190.64.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:e8:e3:90:62:28:2f:80:ff:26:e7:54:e1:11:65:c1:f7:88:
c4:e5:73:4d:53:9f:c7:b2:7d:68:05:ea:89:d9:5c:e3:ce:eb:
68:c3:d6:1b:9f:61:24:27:74:19:bd:12:b5:57:9e:39:bf:02:
88:20:e8:bc:80:35:47:0b:2c:f4:99:ae:ce:c9:6b:b4:2a:ad:
5b:a8:5e:0f:28:63:43:6b:cd:4d:ba:70:74:7f:cd:f9:3a:ca:
9d:ad:0b:1b:56:ae:2d:bc:3d:7c:ce:e6:6a:03:63:1b:56:30:
53:6f:03:1d:8f:82:1d:cf:42:c0:55:5d:4e:50:bc:7e:2c:5c:
10:68:0c:5a:43:b9:1a:62:df:e8:75:4a:ec:64:c6:3e:0a:05:
32:6b:e7:f3:4d:e6:f0:e9:3b:dc:f5:cc:a3:6b:cf:44:80:7f:
4d:51:48:e2:44:a1:00:af:7e:d1:81:74:d3:91:d2:52:1a:7d:
a6:32:62:63:95:81:6f:5a:40:b7:26:92:64:7a:8e:63:3d:3f:
f7:df:9a:68:ad:03:b2:95:6b:83:75:0a:db:66:d7:31:5c:20:
c7:21:08:5c:11:cc:b4:10:0a:cb:88:58:41:e9:cf:dd:0c:27:
88:c2:8a:83:b7:4c:6f:3e:6e:76:30:8e:28:eb:f1:1e:dd:bd:
6e:84:4f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:46:24 2025 by rpki-client