Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/1-uWFMojsu8N0D3BRxaa667XzIdY.roa
File: 1-uWFMojsu8N0D3BRxaa667XzIdY.roa (raw, json)
Hash identifier: MLiZpxnOycotOL7udwAXextSZttgGndCOLx7EvqD5rk=
Subject key identifier: FA:E5:85:32:88:EC:BB:C3:74:0F:70:51:C5:A6:BA:EB:B5:F3:21:D6
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 01926C04E0ED53405DE8310CB612C39715A8
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/1-uWFMojsu8N0D3BRxaa667XzIdY.roa
Signing time: Tue 08 Oct 2024 12:05:11 +0000
ROA not before: Tue 08 Oct 2024 12:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13054
IP address blocks: 185.253.12.0/22 maxlen: 22
213.164.64.0/19 maxlen: 24
2a03:3500::/32 maxlen: 32
2a0c:3040::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:04:e0:ed:53:40:5d:e8:31:0c:b6:12:c3:97:15:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Oct 8 12:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fae5853288ecbbc3740f7051c5a6baebb5f321d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:60:d4:73:a2:1d:7e:55:b9:da:91:67:c3:
65:74:8a:c3:87:32:dc:79:a0:4f:1b:9f:c7:a5:94:
fa:2f:b3:08:0c:81:d2:65:48:23:2e:04:c3:ff:1b:
34:58:e1:dc:58:39:0c:4d:a8:85:6c:21:cf:d9:1f:
51:a8:48:e1:fd:de:f6:e0:fc:af:8d:c3:40:ab:18:
af:0f:d2:89:a7:7c:24:52:0c:e4:8f:ef:d5:2c:93:
e1:4b:ba:c9:c2:45:3c:30:b2:7d:7e:56:3a:ca:0a:
d7:d9:c0:f5:9e:27:02:4d:6d:c0:42:e0:2a:38:d3:
49:33:48:71:42:c6:f4:6f:e1:fb:0d:60:24:e8:cc:
2d:75:dc:28:8b:f3:a9:f5:26:48:bb:0a:6b:ea:e6:
25:c3:b9:9a:13:c5:7b:a6:79:24:b1:29:6c:58:8d:
50:92:08:b6:d6:eb:59:1e:fc:3e:cb:6d:24:6c:03:
06:1f:bb:a6:d3:8e:ca:84:65:1d:6c:f5:99:d5:07:
5e:ef:32:22:e8:1f:46:35:97:1a:b9:f7:7e:1e:0f:
17:21:90:9c:6b:7a:48:c7:18:50:ca:49:80:f0:54:
77:c5:8c:db:df:fe:d8:5c:06:8d:30:fc:f4:51:6a:
d5:39:7d:03:3b:73:b2:c0:27:b1:f6:41:9e:bc:20:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E5:85:32:88:EC:BB:C3:74:0F:70:51:C5:A6:BA:EB:B5:F3:21:D6
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/1-uWFMojsu8N0D3BRxaa667XzIdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.12.0/22
213.164.64.0/19
IPv6:
2a03:3500::/32
2a0c:3040::/29
Signature Algorithm: sha256WithRSAEncryption
84:34:9f:be:82:40:c5:8c:14:67:cf:c2:99:71:52:e4:c6:10:
5d:b1:1e:af:2d:7d:38:0d:c8:be:bd:c2:50:a5:fe:1b:f3:1e:
20:1b:f6:a1:e3:53:4b:9d:55:31:db:f4:3c:0a:49:6b:14:7a:
bc:88:74:45:83:a8:91:94:42:d1:d9:3e:bc:a7:7f:32:58:3b:
1a:63:2c:8b:38:7d:b6:9a:58:b6:7f:af:6c:20:05:fa:fd:63:
11:3c:83:f7:97:c1:38:f1:f6:6b:89:1e:e4:2c:ec:68:fb:e0:
36:ee:76:bd:6c:78:84:ac:13:21:55:51:65:95:0b:20:95:33:
04:f9:3d:72:91:fe:fe:2b:27:8c:88:15:21:8a:b0:b8:da:8b:
11:f3:27:7d:9a:86:0a:d8:18:63:a8:98:78:9f:79:7e:2b:b5:
c4:c5:02:5b:8f:07:ef:5d:6a:c1:b6:87:41:02:74:66:a1:ae:
3b:64:06:d5:d8:f7:1c:84:cb:20:1e:07:88:99:1a:b5:cb:d6:
b1:9d:0c:91:60:3f:b3:9e:5e:65:82:a0:0d:9c:da:50:df:ad:
20:3b:77:8a:ee:46:af:c9:cc:78:40:16:97:fd:57:98:18:bb:
fe:36:17:bf:f9:df:66:8b:bf:e8:8c:df:f6:40:c8:07:b0:b0:
05:bb:5f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:56:01 2025 by rpki-client