Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/UT6aqi-wtf_nnNSWQDg0_ECH85U.roa
File: UT6aqi-wtf_nnNSWQDg0_ECH85U.roa (raw, json)
Hash identifier: XM9yJ5oqoHp3XRkU00BlGCYBEUl4EmHpjyPlslxbnhw=
Subject key identifier: 51:3E:9A:AA:2F:B0:B5:FF:E7:9C:D4:96:40:38:34:FC:40:87:F3:95
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 0191928E91F43D31F7835B21C8167682470F
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/UT6aqi-wtf_nnNSWQDg0_ECH85U.roa
Signing time: Tue 27 Aug 2024 06:38:22 +0000
ROA not before: Tue 27 Aug 2024 06:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41997
IP address blocks: 109.237.112.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 27 Aug 2024 06:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:8e:91:f4:3d:31:f7:83:5b:21:c8:16:76:82:47:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Aug 27 06:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=513e9aaa2fb0b5ffe79cd496403834fc4087f395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:09:9c:11:92:1a:e3:70:4c:96:cf:5e:e1:
6a:60:55:18:30:dd:12:15:34:56:9b:61:dc:f3:e0:
b7:29:5c:cf:0a:4d:7b:e6:b2:91:c3:74:e3:30:34:
33:a4:7a:70:6d:bf:e0:e6:71:63:0d:19:79:26:0c:
e2:14:ed:1c:df:ad:50:cb:46:7d:e6:0b:d4:6b:6f:
33:27:a4:a3:d9:39:49:09:b3:fd:a1:b9:71:50:76:
a6:93:91:43:75:54:ee:5f:d3:9c:9d:f7:75:ad:15:
df:e8:0d:27:56:38:57:15:2e:0a:88:ff:30:8d:72:
5c:d7:7a:a8:98:0f:e3:b0:e9:40:65:51:1c:88:4b:
22:3c:97:d4:39:ca:2b:ab:ef:5b:83:2e:ed:fd:0f:
37:75:54:47:00:12:2a:03:fe:8d:1e:43:6b:c8:25:
75:f5:cc:66:00:ee:c0:a5:d2:75:08:68:0b:d1:8f:
f8:50:80:27:b1:de:4a:5c:0c:1a:5a:02:ff:13:19:
ab:d5:ed:c5:f5:27:61:3d:b2:63:18:fb:af:3b:dc:
ed:e7:e4:de:1a:75:d5:dc:03:4c:8e:e6:06:74:0f:
52:cd:eb:3c:13:1c:f9:e8:ea:d2:ad:aa:44:1e:9e:
be:cf:85:ff:fe:72:d3:64:9e:fd:ca:c7:29:74:04:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3E:9A:AA:2F:B0:B5:FF:E7:9C:D4:96:40:38:34:FC:40:87:F3:95
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/UT6aqi-wtf_nnNSWQDg0_ECH85U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.112.0/20
Signature Algorithm: sha256WithRSAEncryption
31:8f:72:c7:ff:88:2d:10:f5:07:f2:43:60:a6:54:7a:1d:50:
d2:07:e3:7c:3a:f0:b1:84:d0:7a:d1:9d:48:9b:33:d7:ff:75:
4a:e0:59:3f:b6:f1:7d:f6:93:9c:6f:73:73:fd:6d:83:b2:53:
c0:69:6d:52:d0:53:80:d1:c6:92:34:b1:4d:4f:95:ed:75:57:
8b:97:53:0d:6f:af:fe:c4:f8:dc:8a:77:dd:d9:61:65:09:60:
5e:7a:7a:d4:14:b3:2f:1c:65:1d:7f:af:2f:97:da:54:98:40:
12:12:be:c7:91:02:72:fd:cb:0d:a7:cb:1c:bf:c8:67:e7:4c:
7f:ba:f0:08:21:63:62:2f:e1:71:91:f3:d0:40:cf:ef:59:fc:
e5:b4:d0:84:1c:f5:6f:6c:e3:fc:d0:74:1e:fb:28:b8:de:84:
98:8f:16:4e:2b:09:99:4d:c1:87:db:8f:59:b0:ef:20:a5:f4:
b8:73:68:50:c7:f5:0f:c2:31:e7:8c:99:bc:10:b6:08:a4:55:
01:07:86:41:e9:3d:25:8b:de:f5:37:db:99:3c:d6:09:5b:45:
05:e6:d4:aa:c1:6c:d6:22:61:80:5e:a5:da:88:e7:7e:ea:c6:
10:98:b8:de:be:13:3e:ca:79:51:94:1f:98:d1:d7:58:8a:fa:
cb:1a:e6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:33:45 2025 by rpki-client