Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/Uab_6_vNjhE2Aqs7D54k_kKjwG4.roa
File: Uab_6_vNjhE2Aqs7D54k_kKjwG4.roa (raw, json)
Hash identifier: yYqJDG1ObrIm9F71TD6ZYa+zoQ0qjGMOW6+yHd0HBMU=
Subject key identifier: 51:A6:FF:EB:FB:CD:8E:11:36:02:AB:3B:0F:9E:24:FE:42:A3:C0:6E
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 01938B832C60C62F50B820BB8C53FD49ED56
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/Uab_6_vNjhE2Aqs7D54k_kKjwG4.roa
Signing time: Tue 03 Dec 2024 07:54:09 +0000
ROA not before: Tue 03 Dec 2024 07:54:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201902
IP address blocks: 5.182.8.0/22 maxlen: 24
185.59.92.0/22 maxlen: 24
2a02:6a20::/48 maxlen: 48
2a02:6a20:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:83:2c:60:c6:2f:50:b8:20:bb:8c:53:fd:49:ed:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: Dec 3 07:54:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51a6ffebfbcd8e113602ab3b0f9e24fe42a3c06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:1c:ac:59:bd:08:16:92:99:56:df:15:be:
7c:71:b3:57:04:ca:1c:27:43:64:b7:3c:30:73:dc:
9c:7b:8d:e0:d8:74:b5:e8:a8:00:94:fc:28:67:de:
b5:73:e7:ea:d9:1b:c6:ad:af:ff:31:8d:28:d4:8f:
77:e8:b2:c2:54:0d:09:ce:a7:2f:c0:81:51:04:64:
90:18:29:cc:6f:6e:e2:57:c5:9a:e5:7d:97:92:1e:
2f:f6:d0:4c:89:06:74:bd:a9:37:f9:32:ee:c9:b4:
0b:ca:f7:7f:b0:6b:a6:a5:dc:4c:91:ec:f7:0b:c3:
60:b2:6f:7c:52:ef:96:a2:d2:6f:6e:39:96:c3:59:
f2:82:f4:56:8b:0a:ae:6b:5c:8b:d7:05:84:b9:57:
aa:8f:05:96:bb:c0:fb:4c:7d:30:83:f4:3c:4b:84:
64:38:e5:db:c6:a4:f0:ad:6f:7c:88:c4:e1:5b:04:
5d:c0:8f:15:32:33:a0:c2:8d:93:ec:fc:4c:6b:58:
20:53:e5:3a:a5:02:32:07:a8:e8:5b:36:0d:a6:ed:
b0:71:f4:4b:7a:73:e0:50:26:3f:b0:05:3c:6b:c8:
13:f2:e9:91:41:c5:13:81:8f:d3:3b:7f:cc:be:ae:
cb:58:c8:8b:a0:fd:b4:0c:af:a5:59:4a:15:20:61:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A6:FF:EB:FB:CD:8E:11:36:02:AB:3B:0F:9E:24:FE:42:A3:C0:6E
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/Uab_6_vNjhE2Aqs7D54k_kKjwG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.8.0/22
185.59.92.0/22
IPv6:
2a02:6a20::/48
2a02:6a20:10::/48
Signature Algorithm: sha256WithRSAEncryption
89:93:fc:96:61:d1:79:32:ad:8c:0d:5c:38:a5:ce:f2:02:62:
86:55:6a:78:90:fd:13:65:cc:ee:64:98:6b:f5:b0:7f:0b:67:
40:a7:73:9d:29:93:d4:2c:bb:cf:84:12:e0:11:ee:2e:bd:7d:
f6:84:0a:f7:a8:55:3f:9e:83:be:1a:32:9c:89:b9:c4:34:f6:
5b:d2:b0:bc:3f:59:b5:67:e3:8a:b6:e1:24:1c:ec:54:89:72:
13:59:55:ca:dc:de:d9:0a:d1:98:23:62:4b:48:12:ef:ed:1c:
2b:03:2e:dd:6a:9c:9c:a5:23:ca:49:91:ce:4c:cc:10:59:66:
63:80:43:c6:13:60:87:80:36:2f:31:53:22:1b:6d:5e:06:88:
41:9e:36:89:79:5a:53:27:d5:c8:09:17:78:be:cb:a5:09:59:
4e:c3:7a:16:81:06:c1:10:36:dd:24:bb:25:b2:f5:12:06:5e:
53:0e:4f:21:1a:2e:ac:af:1a:d8:bb:bd:d8:0a:ea:59:61:28:
3e:e4:db:d9:61:97:ca:b7:55:2f:a5:f8:6a:bc:9d:c6:7a:ad:
49:61:0f:0f:e2:ed:ac:b2:66:71:3b:8f:d8:47:82:ab:15:bd:
fd:17:19:90:b1:97:03:e4:f0:2d:a2:78:56:f8:d5:89:2a:3d:
0f:67:d6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:04 2025 by rpki-client