Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Ue6_0_nQtR6PvclikFrfsBx08Q8.roa
File: Ue6_0_nQtR6PvclikFrfsBx08Q8.roa (raw, json)
Hash identifier: dvwYX5855++U6GjE7FKo8aEb5NUmRoYzuU86dLEDaRI=
Subject key identifier: 51:EE:BF:D3:F9:D0:B5:1E:8F:BD:C9:62:90:5A:DF:B0:1C:74:F1:0F
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0195B38F54DD140F7149EAA3AE62B686D7FC
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Ue6_0_nQtR6PvclikFrfsBx08Q8.roa
Signing time: Thu 20 Mar 2025 12:37:49 +0000
ROA not before: Thu 20 Mar 2025 12:37:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60223
IP address blocks: 195.96.129.0/24 maxlen: 24
2a07:f240::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 22 Mar 2025 18:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:8f:54:dd:14:0f:71:49:ea:a3:ae:62:b6:86:d7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Mar 20 12:37:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51eebfd3f9d0b51e8fbdc962905adfb01c74f10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:b7:17:0e:c1:18:bf:85:39:7d:3d:07:3d:
c8:09:20:78:d4:ce:b0:84:81:67:6f:4e:10:65:bc:
12:80:7e:ba:7d:ea:16:f2:f7:ad:eb:7e:3c:e3:fe:
e5:94:6b:fc:3f:68:7e:be:23:f8:89:64:77:94:11:
1d:32:ea:b1:c5:b2:e9:d7:50:c8:dc:94:34:b3:8b:
aa:11:f3:a7:0e:72:99:c2:d8:eb:89:27:4b:88:17:
54:3a:88:59:95:7a:a2:26:2b:c6:a6:a3:e7:5b:70:
b1:c2:e5:74:ec:3e:40:c5:c8:39:c7:ea:df:3c:95:
f0:1a:9b:23:24:43:71:dd:d7:f8:0e:22:88:39:84:
15:97:70:e7:20:8d:10:4d:6f:d5:f7:bb:90:40:ad:
58:6b:53:3f:d5:f6:f0:40:a6:fa:87:12:a4:7c:9f:
8b:e7:63:6b:8d:a3:53:14:34:7d:c0:7a:88:7e:0f:
3d:a9:d9:84:71:81:de:41:91:18:66:e7:08:fb:3b:
c0:5e:2e:d2:5f:5d:99:06:8f:65:4f:36:f0:ba:d8:
7b:8e:f7:fd:74:dc:dc:4a:76:0a:66:bf:a8:80:cb:
c7:a5:97:68:41:60:2e:7f:00:3c:94:17:c9:51:92:
57:9d:ad:fb:65:ef:de:fa:ea:82:01:b2:19:65:98:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EE:BF:D3:F9:D0:B5:1E:8F:BD:C9:62:90:5A:DF:B0:1C:74:F1:0F
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Ue6_0_nQtR6PvclikFrfsBx08Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.129.0/24
IPv6:
2a07:f240::/29
Signature Algorithm: sha256WithRSAEncryption
63:ad:4c:94:92:6b:94:c2:e8:0c:3e:12:34:b9:86:23:74:a9:
94:b1:48:7e:ea:9a:bb:2e:5d:fb:01:e5:21:fa:79:42:a7:ec:
80:9a:c3:89:ff:bb:d2:12:b3:e5:ee:da:92:3a:ec:5a:23:cc:
f6:71:96:f9:d9:4c:65:d3:9d:c2:19:4b:7d:a6:70:18:55:86:
d2:79:e4:44:62:06:2f:e4:49:e5:d9:d4:86:a9:13:cf:25:1d:
d5:b5:2c:8e:30:b5:86:9f:4e:58:46:25:39:0a:45:8e:eb:5f:
cf:4e:0b:3f:85:80:81:b2:1b:f3:1f:6d:41:f5:38:9f:c2:33:
e7:95:af:a5:e5:8a:53:3d:33:28:38:3d:2d:8b:f5:d3:74:9e:
5b:37:0e:ca:47:34:69:17:4b:1a:d4:06:55:61:0a:51:53:1c:
61:30:1b:c6:9e:45:7d:7d:3e:03:c1:49:87:bd:82:0a:0f:70:
dc:81:6c:a4:28:a9:e2:dc:26:1c:87:50:ba:27:22:d3:0a:6a:
08:80:c2:63:6d:ec:ae:da:30:bd:ea:13:56:0c:c6:43:ec:d3:
c8:9c:a0:99:8c:a9:d4:c2:3d:07:f8:e8:f8:90:85:7a:c9:05:
c9:9d:4f:9c:35:ce:24:9b:55:0c:fd:c1:68:a2:a3:36:5c:37:
ac:2b:4c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:02 2025 by rpki-client