Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/uHIA7AZCavn_ofxqBN8AL3x97D0.roa
File: uHIA7AZCavn_ofxqBN8AL3x97D0.roa (raw, json)
Hash identifier: Z4K9N6yk4kTioAGhacHxsTVkYip75eeuG9ln7EO0hxo=
Subject key identifier: B8:72:00:EC:06:42:6A:F9:FF:A1:FC:6A:04:DF:00:2F:7C:7D:EC:3D
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 01944A693F4F689E02777BDDF755B9B649E1
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/uHIA7AZCavn_ofxqBN8AL3x97D0.roa
Signing time: Thu 09 Jan 2025 09:33:18 +0000
ROA not before: Thu 09 Jan 2025 09:33:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.0.0/24 maxlen: 24
140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.10.0/24 maxlen: 24
140.150.12.0/24 maxlen: 24
140.150.14.0/24 maxlen: 24
140.150.15.0/24 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
140.150.22.0/24 maxlen: 24
140.150.23.0/24 maxlen: 24
140.150.24.0/24 maxlen: 24
140.150.25.0/24 maxlen: 24
140.150.26.0/24 maxlen: 24
140.150.27.0/24 maxlen: 24
140.150.28.0/24 maxlen: 24
140.150.29.0/24 maxlen: 24
140.150.30.0/24 maxlen: 24
140.150.31.0/24 maxlen: 24
140.150.32.0/24 maxlen: 24
140.150.33.0/24 maxlen: 24
140.150.34.0/24 maxlen: 24
140.150.35.0/24 maxlen: 24
140.150.36.0/24 maxlen: 24
140.150.37.0/24 maxlen: 24
140.150.38.0/24 maxlen: 24
140.150.40.0/24 maxlen: 24
140.150.41.0/24 maxlen: 24
140.150.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 02:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:69:3f:4f:68:9e:02:77:7b:dd:f7:55:b9:b6:49:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Jan 9 09:33:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b87200ec06426af9ffa1fc6a04df002f7c7dec3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:79:a8:3e:ad:e2:18:38:76:c3:4a:80:70:78:
65:c8:2e:3c:36:85:3d:95:01:ca:e9:3f:d6:a1:67:
1c:f6:11:a0:d3:dd:d6:1d:26:a6:39:64:93:90:4d:
8a:fe:a3:5c:87:82:44:e6:46:ad:05:a4:ff:57:41:
e1:03:df:82:e1:23:08:fb:e3:34:11:c5:2f:c2:10:
e9:22:fc:5c:f4:19:85:b5:8e:c3:c6:64:b8:88:21:
7d:22:09:0c:81:f5:9d:fb:9f:f4:31:a0:5d:3e:6c:
42:e7:93:9d:f4:45:35:c4:88:5f:23:fe:a0:cf:a1:
aa:16:cc:0a:56:e8:7e:ae:c0:9a:7d:22:fc:62:64:
41:cf:75:3f:6d:25:0f:f4:4d:e5:a7:12:f0:e9:1a:
84:65:3f:b7:9b:7f:79:c0:29:94:5e:4a:59:da:88:
ef:dd:b7:7b:91:1d:05:a2:e6:3c:41:3e:8a:92:59:
cb:ec:d2:18:29:2a:64:1c:c2:66:ea:9c:a1:92:19:
13:93:9c:89:41:3b:87:9e:2e:06:f2:ca:2d:42:1b:
25:01:e9:25:0d:bd:e6:27:fb:32:ad:f4:2e:58:da:
93:39:f6:1e:f2:30:8d:43:b8:e4:e0:ea:2a:25:0f:
3d:d6:a4:b9:78:e8:7d:2e:cd:8f:13:30:60:eb:eb:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:00:EC:06:42:6A:F9:FF:A1:FC:6A:04:DF:00:2F:7C:7D:EC:3D
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/uHIA7AZCavn_ofxqBN8AL3x97D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.0.0/21
140.150.10.0/24
140.150.12.0/24
140.150.14.0/23
140.150.18.0/23
140.150.21.0-140.150.38.255
140.150.40.0-140.150.42.255
Signature Algorithm: sha256WithRSAEncryption
28:ef:e6:cd:44:7d:a0:ae:ab:3b:9e:fd:cc:fd:d8:2f:f4:7b:
1e:f0:e2:ff:af:a6:0d:17:d2:f4:e3:45:98:11:f2:c2:5b:31:
c1:1c:ed:ce:d9:69:16:60:ec:84:fc:53:04:fa:99:05:1a:3f:
bc:3a:28:52:66:15:4c:e0:b9:a4:98:15:50:5b:dd:03:2c:24:
6f:1d:a3:64:7c:b0:78:d5:e4:6e:1a:52:5e:5b:83:2d:9d:3a:
9f:4b:93:49:36:80:2f:61:77:ec:e4:ef:8f:c6:b9:31:fe:2b:
e8:d0:6f:16:84:76:02:98:88:71:25:96:7a:5f:a1:94:09:97:
e3:f8:8c:e5:3b:6a:99:51:f5:d0:ec:d1:56:43:07:55:72:c0:
25:a7:d9:85:32:f5:d9:b4:e9:d8:70:1c:32:7b:e6:1c:f2:9f:
0e:11:8f:5f:70:7b:df:b2:7f:14:8f:88:67:90:f0:bc:7f:2f:
92:de:ca:67:c0:54:02:ae:d0:b3:45:7f:7b:da:46:7d:a1:8d:
a8:31:5f:f4:8d:b8:e4:42:82:f7:6b:7b:d7:47:fa:0b:54:c9:
07:c8:0e:60:c1:66:53:d0:23:41:80:c4:bd:42:a9:9a:bb:6a:
35:77:f1:62:d3:1b:70:d4:f2:32:bf:b1:4f:33:0d:af:a6:ca:
ad:82:01:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:31:44 2025 by rpki-client