Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/UAGaTbPrgaHFdLZi0zU6eDo3Wwc.roa
File: UAGaTbPrgaHFdLZi0zU6eDo3Wwc.roa (raw, json)
Hash identifier: M/1fHFdkC6Aq575Pv9s9JxuPga51WhBeXB/sO8KVZ3A=
Subject key identifier: 50:01:9A:4D:B3:EB:81:A1:C5:74:B6:62:D3:35:3A:78:3A:37:5B:07
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 0193B5E71C3AEE1E850319D2D60F80A90777
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/UAGaTbPrgaHFdLZi0zU6eDo3Wwc.roa
Signing time: Wed 11 Dec 2024 13:27:22 +0000
ROA not before: Wed 11 Dec 2024 13:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203937
IP address blocks: 91.210.236.0/24 maxlen: 24
185.125.4.0/24 maxlen: 24
185.253.233.0/24 maxlen: 24
194.42.118.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 12 Dec 2024 14:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:e7:1c:3a:ee:1e:85:03:19:d2:d6:0f:80:a9:07:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Dec 11 13:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50019a4db3eb81a1c574b662d3353a783a375b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4c:02:25:a6:9e:0f:e1:9d:b0:68:b7:0b:89:
0b:ee:b6:c4:c6:2d:2b:25:ba:5f:7b:28:fc:17:f8:
81:ca:e3:34:c7:68:0f:25:3e:a0:9d:c7:e0:87:b3:
6c:ba:cc:62:6b:f7:46:d3:b2:d6:80:0b:a4:e0:36:
21:47:77:f7:1e:6c:5c:e7:f9:53:31:47:2f:5e:37:
76:86:cc:c3:7b:a6:ef:1d:f1:61:39:3d:4e:11:ef:
2c:3f:dc:6e:aa:e1:d4:f7:62:e8:ae:2a:a4:5b:b8:
ab:45:b3:d8:04:9e:60:e9:14:39:12:c1:4d:be:04:
44:71:9f:de:f1:09:56:31:1c:12:7f:65:f9:06:ea:
39:46:b5:8f:85:e3:87:62:3a:68:1d:b9:e3:67:56:
d2:9a:d3:bd:41:67:8c:d2:5a:f8:8d:9a:56:4d:b8:
c0:5e:fc:8b:cb:3e:e1:2e:45:1a:01:0c:e9:1f:0a:
44:40:2c:06:4a:af:14:1b:2f:17:2e:de:63:b6:9b:
0e:61:a9:d4:80:33:90:55:b0:a5:d0:e9:9a:4a:fe:
9a:96:dc:fe:42:81:03:04:ed:f4:cc:f2:23:73:43:
4c:26:9d:1e:93:f4:52:d1:91:0c:00:92:38:67:13:
54:6f:6f:45:74:5c:a6:1d:29:8d:da:39:4a:e4:35:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:01:9A:4D:B3:EB:81:A1:C5:74:B6:62:D3:35:3A:78:3A:37:5B:07
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/UAGaTbPrgaHFdLZi0zU6eDo3Wwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.236.0/24
185.125.4.0/24
185.253.233.0/24
194.42.118.0/23
Signature Algorithm: sha256WithRSAEncryption
91:21:d3:d7:54:ac:03:2c:cc:6a:ba:15:43:33:5d:3e:db:de:
c9:1e:5a:85:9d:24:45:25:06:b3:42:e0:49:f2:2f:3d:76:7f:
d3:6f:63:cb:de:16:df:78:67:47:1f:6d:78:db:6c:dc:15:ea:
e6:06:cf:71:98:1e:77:5e:b4:f1:aa:be:4f:b4:76:ca:37:ae:
bf:04:e8:de:4a:58:0b:01:ad:90:ed:fe:a5:90:34:cf:0f:68:
be:e3:a7:06:92:b5:cc:8c:c4:e7:df:b5:f5:8c:97:64:d9:23:
38:86:ad:b7:40:0e:da:38:80:65:c9:c3:7f:05:13:19:98:37:
5e:75:8f:9d:6f:53:fe:6e:de:f1:4a:45:c8:49:e2:9e:e9:f5:
7d:22:b5:ce:c9:c3:0a:9e:d3:ac:af:8d:7c:44:e0:43:e8:aa:
e6:5c:55:38:a7:41:54:08:74:e2:c6:13:c7:82:e2:98:32:94:
55:be:14:28:5d:fd:0a:81:6a:94:0e:27:b1:58:2e:43:e7:c2:
c4:d9:bb:6f:ad:f4:f5:fc:3c:be:f7:16:7b:ae:1b:b7:2e:0c:
a5:71:1c:87:a9:d2:59:95:e0:05:89:7f:d8:68:8f:12:4d:95:
0a:6c:b2:79:f4:3c:fd:09:1e:44:11:1d:df:3a:f1:fe:4b:7b:
9d:e7:c8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:21:57 2025 by rpki-client