Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kuUtbuifySXqyHzFIpWg2I5xASQ.roa
File: kuUtbuifySXqyHzFIpWg2I5xASQ.roa (raw, json)
Hash identifier: yjySWm9SVPIsR7UpcZrl1gGLI+3oLTKP9Rfz3CeDx9Y=
Subject key identifier: 92:E5:2D:6E:E8:9F:C9:25:EA:C8:7C:C5:22:95:A0:D8:8E:71:01:24
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 0194228E3EDD82FC2618162D415B77561EC5
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kuUtbuifySXqyHzFIpWg2I5xASQ.roa
Signing time: Wed 01 Jan 2025 15:48:55 +0000
ROA not before: Wed 01 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44078
IP address blocks: 46.37.192.0/19 maxlen: 19
79.135.192.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 29 Jan 2025 09:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3e:dd:82:fc:26:18:16:2d:41:5b:77:56:1e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92e52d6ee89fc925eac87cc52295a0d88e710124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:40:5a:90:28:45:8f:04:de:40:84:1a:45:
8d:71:0f:a9:0b:cc:fe:8f:9a:d3:b5:fd:5b:f2:66:
a4:1c:ee:77:2e:8d:b0:a6:4b:ad:5c:89:13:f5:94:
65:56:01:71:f7:c0:b0:76:05:e6:c9:5e:3a:27:8d:
86:fb:c1:ff:29:0a:3c:ca:b9:73:59:17:27:d2:09:
01:c3:2f:e1:e0:57:3a:53:a5:9f:79:ba:ae:5a:35:
b5:cd:bb:c5:97:fe:44:b7:44:44:7a:38:7e:41:66:
28:4d:d6:5e:38:f6:a8:e1:b2:94:cf:2c:ca:d2:e6:
bc:3d:a1:00:5c:25:20:b5:51:95:78:12:4a:d3:15:
ea:bd:d9:9b:7f:38:ba:bc:87:51:a8:ad:d6:cb:af:
cd:af:98:9c:b9:12:20:99:ef:a8:a9:51:55:af:91:
e5:0b:e4:21:04:3b:fe:86:61:0a:18:66:0e:1e:fb:
e2:9c:f5:03:37:f2:c3:70:41:02:b0:f2:e6:81:e8:
d5:c8:7e:1f:2d:c0:7f:40:19:d8:f6:ef:a3:5e:7e:
50:73:f3:5d:2d:55:39:ba:d3:32:8f:01:ef:65:23:
5d:5d:ea:be:9f:95:98:04:b5:76:9b:85:d5:96:9b:
51:fd:ae:b3:da:42:e9:f2:1c:00:d7:36:28:23:fc:
60:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E5:2D:6E:E8:9F:C9:25:EA:C8:7C:C5:22:95:A0:D8:8E:71:01:24
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kuUtbuifySXqyHzFIpWg2I5xASQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.192.0/19
79.135.192.0/19
Signature Algorithm: sha256WithRSAEncryption
73:55:f7:1c:b8:2f:7e:5c:37:c0:df:99:01:79:df:24:9b:2f:
ae:43:27:d4:dc:19:97:6b:0d:b8:94:dd:1a:ea:f7:0d:ff:22:
0e:80:3e:45:fb:79:78:d0:35:15:5c:39:8b:e5:7b:f4:88:96:
cd:c6:88:55:81:87:f4:31:64:04:1a:b0:00:16:af:05:e5:ce:
de:4e:07:a4:5e:75:04:8e:86:40:17:eb:f9:a2:37:01:a4:ef:
51:18:61:85:9f:ab:3f:3f:9f:f2:33:51:09:8a:a8:4d:1d:4a:
99:d8:7c:4e:8d:a1:13:8a:eb:8a:c6:63:68:c5:f4:af:40:69:
75:10:b4:19:0a:82:16:d7:54:a8:39:86:45:b8:f0:2c:b8:b0:
17:b8:be:c4:bc:6d:6b:d8:11:d0:7c:b0:54:89:e2:e6:14:75:
b6:85:e8:71:78:3f:ae:17:6b:0c:59:d4:b6:ef:b9:2f:cd:89:
82:72:57:60:4d:aa:e4:c6:45:31:6d:5a:60:53:ed:a9:69:1e:
36:63:e7:99:3a:f3:b4:d5:81:a0:1a:16:81:66:f4:c9:62:ef:
f3:b4:45:84:28:d8:5a:1b:3a:60:b2:dc:02:32:9f:38:76:a3:
7d:0d:04:98:6b:6b:0b:2b:33:79:5e:09:26:21:0e:8c:28:a2:
cc:37:e2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:06:59 2025 by rpki-client