Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/UHIdFBPWN9kZ2Hsuu4NFYfXW0Mw.roa
File: UHIdFBPWN9kZ2Hsuu4NFYfXW0Mw.roa (raw, json)
Hash identifier: ff6N3NN+VnGlXOlRROxYDA3aI76JsF2OLbwhElZ7vP4=
Subject key identifier: 50:72:1D:14:13:D6:37:D9:19:D8:7B:2E:BB:83:45:61:F5:D6:D0:CC
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D60F34A5671C19C837BB047B2CF013
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/UHIdFBPWN9kZ2Hsuu4NFYfXW0Mw.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.215.95.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 05 Jan 2025 19:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0f:34:a5:67:1c:19:c8:37:bb:04:7b:2c:f0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50721d1413d637d919d87b2ebb834561f5d6d0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:5c:18:61:51:e1:b0:8e:c2:b4:ab:d6:52:
45:71:32:7b:99:26:f8:eb:5a:cf:dd:ae:b0:79:5f:
4d:e6:e2:34:c3:4c:56:7f:67:9a:28:37:ef:b7:ee:
76:a6:f3:38:03:7b:9b:d3:01:46:58:a4:5a:cd:4a:
6b:7a:b1:3f:6b:13:72:b1:68:cf:33:36:1a:48:57:
ed:e3:c6:23:2f:8e:d7:ca:9d:22:6b:bf:77:b3:05:
6c:46:dd:14:1b:4d:e3:a0:60:c3:60:8f:a4:0e:c2:
4e:73:56:11:4f:2e:43:74:56:6f:42:e4:58:cd:53:
4c:b2:f7:f2:a5:f3:54:ac:63:ed:cb:e3:0b:b2:41:
c8:c5:40:9a:d7:20:f3:05:7c:88:74:b6:45:b9:4a:
1d:dc:d1:0a:3a:d4:9f:7e:48:c8:23:b4:5e:9f:cc:
1f:38:70:88:f9:ca:95:98:1c:10:9d:7b:aa:c6:34:
0b:61:e1:53:08:ad:e8:2f:0f:68:d7:be:a9:04:d1:
6d:10:0d:04:54:54:59:b8:88:19:f9:12:c5:38:f6:
ed:a8:17:9b:23:87:d5:81:29:02:62:e8:e3:a1:c4:
94:02:a0:df:4d:fe:64:1a:9d:c8:e7:a9:13:4b:c8:
8d:b1:e8:f9:89:bc:cd:a0:f4:87:99:62:4d:6f:d7:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:72:1D:14:13:D6:37:D9:19:D8:7B:2E:BB:83:45:61:F5:D6:D0:CC
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/UHIdFBPWN9kZ2Hsuu4NFYfXW0Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.80.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.43.45.0-89.43.46.255
89.44.209.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.215.95.0/24
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
a0:0a:22:6d:34:4d:1f:ee:3b:1e:5a:80:49:7f:40:74:c4:49:
d0:16:cd:2b:db:ea:9f:4a:1f:29:3e:14:c6:98:88:00:2d:26:
ce:9b:68:26:46:5e:6a:8f:e1:11:14:1c:a1:fc:2b:7b:9b:eb:
f3:71:45:a9:ff:7c:24:ba:23:75:52:93:dc:98:67:c9:11:32:
a7:cf:82:83:cf:49:58:c8:77:72:16:eb:c8:f7:5b:d3:82:c8:
c8:e8:d9:79:eb:a8:df:11:4f:73:9f:d7:18:e5:28:1b:bc:7f:
ba:2e:57:ec:59:94:28:b8:3c:bb:28:a2:f5:24:7d:83:ca:8c:
99:64:a6:a1:bf:26:5e:dc:39:8e:0f:03:5b:b9:e9:2c:1f:8c:
88:07:76:0c:2a:0f:21:46:95:dd:96:5b:ad:52:4f:f8:c6:26:
75:d6:66:39:a3:2c:33:ee:4e:e1:1e:bc:2e:ae:b1:af:f3:89:
b0:e0:04:6a:07:76:15:4c:52:5d:f6:d1:58:4e:d8:92:2e:64:
38:5f:6b:86:40:9e:ec:57:97:55:6b:c4:44:2e:03:03:18:f7:
f6:ae:58:c4:d0:43:4a:d0:e2:de:84:b4:78:e8:5d:dc:0e:e5:
46:ef:c1:63:c2:ba:87:99:0b:55:4a:77:0f:82:bc:c8:ff:2e:
33:e2:71:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:17 2025 by rpki-client