Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UqUMaCvaMr_N8w1YkOPIB7avW3Y.roa
File: UqUMaCvaMr_N8w1YkOPIB7avW3Y.roa (raw, json)
Hash identifier: RB5qb10dOuGr9qdB1HrH7CFHSTHY/HDSntYhYGSj+mU=
Subject key identifier: 52:A5:0C:68:2B:DA:32:BF:CD:F3:0D:58:90:E3:C8:07:B6:AF:5B:76
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0196862A2373232D49F2C8609F3D813927E2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UqUMaCvaMr_N8w1YkOPIB7avW3Y.roa
Signing time: Wed 30 Apr 2025 10:07:10 +0000
ROA not before: Wed 30 Apr 2025 10:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 62.76.229.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
194.58.36.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.241.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 01 May 2025 17:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:2a:23:73:23:2d:49:f2:c8:60:9f:3d:81:39:27:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 30 10:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52a50c682bda32bfcdf30d5890e3c807b6af5b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:f5:f3:f9:dc:ef:c0:b2:90:a7:0a:92:7e:
fe:08:5e:76:84:69:12:91:b6:3a:f7:70:f9:f9:54:
b6:54:6d:35:b6:ff:61:52:ab:2a:ec:39:65:6b:ac:
43:05:02:c6:5a:78:2a:45:9f:d5:1a:91:68:38:61:
9b:c8:a1:ed:04:0a:bd:12:bd:ba:84:82:56:6e:53:
41:c7:5b:4d:19:cb:73:3c:51:16:17:8b:a3:4e:5a:
ba:35:ab:2c:48:22:89:e7:2b:28:32:84:15:7e:44:
f1:13:79:8b:c5:c5:81:81:e0:9c:e1:13:a2:03:c5:
8e:d2:fa:10:ec:92:a7:4a:e5:d4:88:92:2b:ce:6f:
4d:3d:92:c3:ac:00:14:50:08:e8:7a:ea:ac:81:c6:
ba:59:a7:c2:ef:29:dd:78:d8:cf:84:29:22:65:dc:
34:8e:a6:91:95:b6:1d:18:c6:3f:bf:6c:13:53:7b:
7e:9a:dd:c6:f8:49:21:38:e2:3e:6a:5e:ff:34:57:
09:18:90:71:e3:78:7d:20:d2:7c:2b:df:59:a4:44:
72:d0:48:a0:e3:dd:7e:f9:5a:7c:40:60:a8:85:30:
e8:b0:9a:e6:bc:38:2d:b5:88:4b:82:e7:9b:6a:f6:
d5:a6:79:24:3f:fb:66:cf:72:11:7f:de:84:4d:9e:
24:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A5:0C:68:2B:DA:32:BF:CD:F3:0D:58:90:E3:C8:07:B6:AF:5B:76
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UqUMaCvaMr_N8w1YkOPIB7avW3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
193.124.7.0/24
194.58.36.0/24
194.58.155.0/24
194.58.223.0/24
194.87.53.0/24
194.87.119.0/24
194.87.126.0/24
194.87.169.0/24
194.87.179.0/24
195.133.9.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.192.241.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
0d:68:70:81:16:33:2d:69:5f:99:75:e8:2e:69:c6:01:d5:8b:
38:b0:2f:37:8b:94:ad:f2:6a:cc:49:25:c1:67:9c:85:ad:42:
25:6a:38:b1:b9:8a:a0:85:97:49:4e:8c:18:89:77:fc:b7:c7:
2c:f2:4b:91:77:49:82:5a:bc:9a:28:3b:ad:f3:c3:a6:86:3f:
3b:64:6c:7a:b9:0f:c2:07:9d:1e:d2:39:76:ed:00:f6:c8:cf:
d0:cc:25:53:4c:e9:64:39:1d:ad:a7:02:b1:48:6e:cc:1e:cd:
5f:fc:4c:d3:7a:71:02:39:5b:ea:86:fc:02:68:95:1b:b6:e6:
df:24:0b:b2:5c:cc:03:53:ab:9d:41:0b:bd:15:7b:32:a8:e9:
d5:c1:cc:2b:7d:dc:43:1a:74:62:d4:d3:d2:f8:4c:42:a3:bd:
1e:93:3a:9b:41:73:02:51:f5:75:40:63:c6:ee:21:d0:34:4e:
29:7c:d7:6a:01:5a:8d:02:50:9a:d1:c0:a3:a6:73:8e:01:37:
61:47:90:19:36:16:a7:79:69:f9:1d:99:15:60:ca:ea:56:57:
93:07:99:c2:34:8e:13:47:1b:d5:89:95:97:a2:ad:9e:bc:e7:
b8:1f:65:ca:82:c7:37:1a:43:a3:11:46:56:91:1a:e2:14:50:
0d:57:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:50:20 2025 by rpki-client