Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uPcW4-hrYVWGZHcKCwpLNom1KXM.roa
File: uPcW4-hrYVWGZHcKCwpLNom1KXM.roa (raw, json)
Hash identifier: 1SnCKja/mSzAJIF0PhUcX7fuYLWFCTLyQXb6uZ2aE2A=
Subject key identifier: B8:F7:16:E3:E8:6B:61:55:86:64:77:0A:0B:0A:4B:36:89:B5:29:73
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01948D2DF5B12FA54E3C74924F5BCC807AC9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uPcW4-hrYVWGZHcKCwpLNom1KXM.roa
Signing time: Wed 22 Jan 2025 08:43:06 +0000
ROA not before: Wed 22 Jan 2025 08:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34577
IP address blocks: 37.60.141.0/24 maxlen: 32
87.120.0.0/22 maxlen: 32
87.120.12.0/24 maxlen: 32
87.120.14.0/23 maxlen: 32
87.120.44.0/23 maxlen: 32
87.120.45.119/32 maxlen: 32
87.120.178.0/23 maxlen: 32
87.120.180.0/22 maxlen: 32
87.120.184.0/23 maxlen: 32
87.120.190.0/24 maxlen: 32
87.121.48.0/22 maxlen: 32
87.121.88.0/23 maxlen: 24
93.123.40.0/22 maxlen: 32
93.123.40.0/24 maxlen: 32
93.123.41.0/24 maxlen: 32
93.123.42.0/24 maxlen: 32
93.123.43.0/24 maxlen: 32
93.123.44.0/24 maxlen: 32
93.123.47.0/24 maxlen: 32
93.123.66.0/24 maxlen: 32
93.123.67.0/24 maxlen: 32
93.123.96.0/22 maxlen: 32
94.156.123.0/24 maxlen: 32
212.73.149.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 23 Jan 2025 11:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:2d:f5:b1:2f:a5:4e:3c:74:92:4f:5b:cc:80:7a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 22 08:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8f716e3e86b61558664770a0b0a4b3689b52973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:76:5d:ed:0c:46:80:e8:c3:17:03:12:c6:e2:
32:41:65:df:87:5e:46:4d:67:71:ed:c2:f3:38:99:
82:a4:11:26:c4:59:01:63:21:f8:f2:63:5f:bd:d6:
42:0e:d2:c8:2a:e9:d7:80:4b:d9:e4:48:69:0c:2e:
32:cf:0d:3a:7b:47:02:68:45:14:45:3d:94:d9:f7:
24:c8:a0:62:37:f4:68:57:ae:e0:9d:13:7e:af:aa:
8f:a0:1c:f0:7c:e4:04:dc:f6:cf:e6:a9:5d:f4:86:
a7:6a:2b:3f:d3:d7:aa:89:78:87:5e:96:b9:5a:3d:
17:37:ea:70:f3:f5:98:3d:81:fb:3e:56:a7:06:e6:
59:51:c2:0c:43:e5:36:db:1a:0e:5c:67:12:87:c1:
52:c8:e5:c6:5c:d1:8e:93:ef:e3:56:6d:a5:8a:44:
24:3d:28:eb:5e:fb:5a:68:a8:1f:ba:a9:79:6e:0b:
fd:96:ac:f2:94:cb:b3:a8:24:9d:11:ec:9a:ad:28:
18:82:fe:62:dd:4d:b7:80:01:d3:76:f8:26:01:11:
d5:fd:f6:46:85:d0:78:69:90:37:2e:91:b5:f4:48:
7a:a6:7d:8e:0f:8f:59:48:76:0c:0f:18:48:fd:10:
af:d7:7f:1d:bd:d2:25:bc:83:4e:ce:bb:dc:b9:2b:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F7:16:E3:E8:6B:61:55:86:64:77:0A:0B:0A:4B:36:89:B5:29:73
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uPcW4-hrYVWGZHcKCwpLNom1KXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.141.0/24
87.120.0.0/22
87.120.12.0/24
87.120.14.0/23
87.120.44.0/23
87.120.178.0-87.120.185.255
87.120.190.0/24
87.121.48.0/22
87.121.88.0/23
93.123.40.0-93.123.44.255
93.123.47.0/24
93.123.66.0/23
93.123.96.0/22
94.156.123.0/24
212.73.149.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:87:5a:89:a2:bd:a6:bf:ac:c6:a1:c1:08:ce:ec:40:d6:19:
6f:02:8f:3c:a8:06:da:93:f2:cc:a2:bd:31:36:df:c5:d6:62:
f9:02:63:83:0d:1b:93:2d:d5:2f:f5:32:7f:eb:bc:5b:47:41:
8c:15:8b:02:58:9a:02:b7:87:bf:75:14:da:33:9a:d8:73:51:
1a:f7:82:33:ee:50:d7:41:a5:27:b1:41:93:16:d4:a1:c4:ea:
f9:28:ba:67:b0:33:98:39:a2:85:1f:c4:03:76:63:fd:ab:45:
fe:42:08:2b:3a:37:70:27:8d:20:b9:18:ab:7a:23:5a:87:d3:
02:92:dd:11:86:79:a1:86:bf:7d:ec:c1:36:85:da:c0:fe:8a:
75:2a:bf:c6:56:10:dd:c0:d2:b3:a8:3f:bf:8f:ca:ba:6e:58:
52:ca:84:10:27:11:ca:ad:4d:92:f1:be:c1:74:45:85:97:c3:
45:7a:14:51:60:8e:4f:b8:33:2b:bd:34:39:ff:33:85:42:1f:
34:05:a5:85:bf:62:5a:10:e8:4e:c5:9b:e4:7c:6b:48:73:c3:
93:fc:c1:09:62:03:fd:90:ec:59:b3:98:cc:5b:58:b6:41:47:
e9:b6:ff:d3:30:06:a3:29:64:3c:f1:cc:f5:5d:4b:c8:f4:1e:
c3:d1:24:17
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZSNLfWxL6VOPHSST1vMgHrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTIyMDg0MzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGY3MTZlM2U4NmI2MTU1ODY2NDc3MGEwYjBhNGIzNjg5YjUyOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3Zd7QxGgOjDFwMSxuIyQWXfh15G
TWdx7cLzOJmCpBEmxFkBYyH48mNfvdZCDtLIKunXgEvZ5EhpDC4yzw06e0cCaEUU
RT2U2fckyKBiN/RoV67gnRN+r6qPoBzwfOQE3PbP5qld9Ianais/09eqiXiHXpa5
Wj0XN+pw8/WYPYH7PlanBuZZUcIMQ+U22xoOXGcSh8FSyOXGXNGOk+/jVm2likQk
PSjrXvtaaKgfuql5bgv9lqzylMuzqCSdEeyarSgYgv5i3U23gAHTdvgmARHV/fZG
hdB4aZA3LpG19Eh6pn2OD49ZSHYMDxhI/RCv138dvdIlvINOzrvcuSsGTQIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFLj3FuPoa2FVhmR3CgsKSzaJtSlzMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdVBjVzQtaHJZVldHWkhjS0N3cExOb20xS1hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEACU8jQME
Ald4AAMEAFd4DAMEAVd4DgMEAVd4LDAMAwQBV3iyAwQBV3i4AwQAV3i+AwQCV3kw
AwQBV3lYMAwDBANdeygDBABdeywDBABdey8DBAFde0IDBAJde2ADBABenHsDBADU
SZUwDQYJKoZIhvcNAQELBQADggEBALCHWomivaa/rMahwQjO7EDWGW8CjzyoBtqT
8syivTE238XWYvkCY4MNG5Mt1S/1Mn/rvFtHQYwViwJYmgK3h791FNozmthzURr3
gjPuUNdBpSexQZMW1KHE6vkoumewM5g5ooUfxAN2Y/2rRf5CCCs6N3AnjSC5GKt6
I1qH0wKS3RGGeaGGv33swTaF2sD+inUqv8ZWEN3A0rOoP7+PyrpuWFLKhBAnEcqt
TZLxvsF0RYWXw0V6FFFgjk+4Myu9NDn/M4VCHzQFpYW/YloQ6E7Fm+R8a0hzw5P8
wQliA/2Q7FmzmMxbWLZBR+m2/9MwBqMpZDzxzPVdS8j0HsPRJBc=
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:41:15 2025 by rpki-client