Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/Ueb_ZvkqSgnQOYaF2CgMWn2TFkM.roa
File: Ueb_ZvkqSgnQOYaF2CgMWn2TFkM.roa (raw, json)
Hash identifier: YfrBZS/HxDLgkqXEoU0pbqaHFiNWo+fNm4AHhpc2E9k=
Subject key identifier: 51:E6:FF:66:F9:2A:4A:09:D0:39:86:85:D8:28:0C:5A:7D:93:16:43
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 019427B5A17DD2BFCB60A2182CDB25F891F9
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/Ueb_ZvkqSgnQOYaF2CgMWn2TFkM.roa
Signing time: Thu 02 Jan 2025 15:50:02 +0000
ROA not before: Thu 02 Jan 2025 15:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203396
IP address blocks: 145.12.0.0/16 maxlen: 24
145.12.216.0/24 maxlen: 24
145.12.217.0/24 maxlen: 24
145.69.0.0/16 maxlen: 16
145.69.0.0/19 maxlen: 19
145.69.25.0/24 maxlen: 24
145.69.40.0/21 maxlen: 21
145.69.47.0/24 maxlen: 24
145.69.56.0/21 maxlen: 21
145.69.96.0/19 maxlen: 19
145.69.100.0/24 maxlen: 24
145.69.101.0/24 maxlen: 24
145.69.102.0/24 maxlen: 24
145.69.103.0/24 maxlen: 24
145.69.104.0/24 maxlen: 24
145.69.105.0/24 maxlen: 24
145.69.106.0/24 maxlen: 24
145.69.107.0/24 maxlen: 24
145.69.108.0/24 maxlen: 24
145.69.109.0/24 maxlen: 24
145.69.110.0/24 maxlen: 24
145.69.128.0/17 maxlen: 17
145.69.210.0/24 maxlen: 24
145.69.216.0/24 maxlen: 24
145.69.221.0/24 maxlen: 24
145.69.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 15:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a1:7d:d2:bf:cb:60:a2:18:2c:db:25:f8:91:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jan 2 15:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51e6ff66f92a4a09d0398685d8280c5a7d931643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:d6:ad:62:f4:1e:0d:cf:0c:77:41:9c:46:
1e:02:47:22:98:76:84:ec:11:31:a9:09:f9:28:58:
10:7a:e8:20:0f:c2:72:7d:0a:68:88:47:46:1f:dc:
27:7c:f4:d3:c7:52:40:b5:73:72:62:b0:44:80:5f:
d5:e2:00:81:5f:47:ec:b1:ad:65:b2:1f:27:44:b1:
59:99:80:6b:20:f5:04:e7:c0:e8:8b:e1:46:32:74:
c4:f6:4c:f2:15:9c:4a:a8:ca:58:8c:46:e9:08:9b:
3d:1e:c5:a9:0d:aa:77:98:91:25:71:3b:07:97:70:
e7:38:26:77:f1:a0:b7:c9:94:9b:8f:3a:83:f2:91:
2b:4b:c6:2c:c2:03:1a:9f:70:c2:ec:ad:b9:5b:2a:
99:fe:54:6b:c5:d8:a7:e9:59:b0:ba:85:ea:7e:b5:
51:e3:cf:09:0e:13:7b:d6:4e:f1:f2:fb:b9:0c:76:
67:81:b4:75:8f:77:f1:c3:d5:32:f7:7d:97:07:77:
5a:50:ba:95:9a:f1:57:e6:23:a9:40:9c:a7:4f:54:
7d:7b:04:07:49:91:14:76:ee:62:62:2b:8b:49:d7:
a8:30:92:4b:81:36:ea:e2:85:66:94:ee:2d:11:b8:
81:86:9a:b8:29:33:28:3e:64:6b:b6:f0:f2:3c:29:
b8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E6:FF:66:F9:2A:4A:09:D0:39:86:85:D8:28:0C:5A:7D:93:16:43
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/Ueb_ZvkqSgnQOYaF2CgMWn2TFkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.12.0.0/16
145.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:0a:b3:0b:bb:07:37:88:49:e3:8b:9f:56:34:f2:c8:db:b2:
02:4a:7d:5a:90:dc:74:2e:89:25:0f:a2:82:29:5d:b9:dd:5a:
ff:23:f3:aa:a4:9a:24:94:a8:36:29:d0:41:93:86:61:3d:90:
c9:e5:69:16:f2:67:fe:e2:50:f6:ad:ef:6b:f3:90:0f:cf:bc:
00:ef:4f:56:c7:62:f6:73:fc:c9:d8:d7:a2:01:45:61:d4:ad:
f4:45:c3:d1:1c:f5:80:24:50:0d:e0:f7:50:5b:06:ff:d5:28:
8f:05:7f:a7:11:e6:d6:7d:08:6f:2e:4c:a7:35:89:be:80:e1:
ed:52:a9:ee:03:84:f8:d5:d6:e0:93:18:fb:b8:d2:f1:b3:9e:
4a:54:8a:f1:d4:9b:25:74:65:c0:9a:21:64:57:26:a6:a0:fb:
03:9a:a6:c4:f1:ba:7d:24:de:62:7e:e0:c5:ea:7c:58:43:7b:
ca:85:87:e4:94:0e:b2:18:b2:57:1b:c9:50:d5:19:36:8c:15:
aa:6b:48:02:19:0b:38:83:03:cf:f3:67:26:48:9b:30:6d:d5:
c0:43:d9:a2:44:e1:e7:8c:41:75:1c:06:3a:8a:cb:2d:64:c5:
67:79:75:1c:61:db:34:45:50:99:71:b9:4a:de:33:74:79:9e:
84:3c:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:29:24 2025 by rpki-client