Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/uJVxB1p5P0HEwyNwtUL-07I5W4M.roa
File: uJVxB1p5P0HEwyNwtUL-07I5W4M.roa (raw, json)
Hash identifier: aE5VqOApKW1KmAlxC99MoA2mGYDsgR51up/SSHVcrYY=
Subject key identifier: B8:95:71:07:5A:79:3F:41:C4:C3:23:70:B5:42:FE:D3:B2:39:5B:83
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 01949586CAE1999187DB3DCE508CA2E572C7
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/uJVxB1p5P0HEwyNwtUL-07I5W4M.roa
Signing time: Thu 23 Jan 2025 23:37:06 +0000
ROA not before: Thu 23 Jan 2025 23:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 5.23.0.0/19 maxlen: 19
80.231.0.0/16 maxlen: 16
80.231.8.0/21 maxlen: 21
80.231.11.0/24 maxlen: 24
80.231.22.0/24 maxlen: 24
80.231.56.0/24 maxlen: 24
80.231.71.0/24 maxlen: 24
80.231.93.0/24 maxlen: 24
80.231.94.0/24 maxlen: 24
80.231.96.0/21 maxlen: 21
80.231.112.0/21 maxlen: 21
80.231.176.0/21 maxlen: 21
80.231.187.0/24 maxlen: 24
80.231.202.0/24 maxlen: 24
80.231.216.0/24 maxlen: 24
80.231.235.0/24 maxlen: 24
195.219.0.0/16 maxlen: 16
195.219.22.0/24 maxlen: 24
195.219.40.0/24 maxlen: 24
195.219.41.0/24 maxlen: 24
195.219.43.0/24 maxlen: 24
195.219.44.0/24 maxlen: 24
195.219.168.0/23 maxlen: 23
195.219.204.0/24 maxlen: 24
195.219.232.0/24 maxlen: 24
195.219.235.0/24 maxlen: 24
195.219.238.0/24 maxlen: 24
195.219.240.0/24 maxlen: 24
195.219.246.0/24 maxlen: 24
195.219.248.0/21 maxlen: 21
195.219.253.0/24 maxlen: 24
2a01:3e0::/29 maxlen: 29
2a01:3e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 09 Apr 2025 13:58:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:95:86:ca:e1:99:91:87:db:3d:ce:50:8c:a2:e5:72:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 23 23:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b89571075a793f41c4c32370b542fed3b2395b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:ba:5b:5c:c4:85:50:48:9f:56:d5:77:31:
e3:35:69:95:de:2a:ee:f0:5b:bf:18:e0:88:20:70:
f8:45:98:2c:0c:73:c9:b2:a1:9f:77:f0:4b:7a:20:
9f:80:26:d0:9d:5b:a8:b4:e3:a0:cd:59:5c:08:9c:
8f:cf:02:ed:d3:06:d0:f9:f7:c8:57:e7:0b:73:86:
57:0c:ed:cc:b9:22:22:4e:b9:e4:fa:72:ab:65:04:
32:8b:8a:58:5f:0e:47:a1:db:b3:4f:3e:aa:89:ea:
cb:a8:d5:3e:73:0c:19:ef:3a:15:c4:69:9a:b6:0b:
4f:99:95:be:f1:24:a2:5a:de:7e:ce:6d:40:8f:ed:
1b:d8:a8:da:88:d3:b7:d7:6e:59:43:a6:0c:94:50:
af:3f:f1:8e:f9:12:17:a8:1f:31:4b:6a:61:82:f7:
22:5c:6f:14:b9:4a:e8:d3:a1:1f:17:17:72:6a:15:
b0:77:5d:a3:e6:9c:ce:57:c0:92:b2:58:7a:14:0d:
47:fc:72:91:8c:b5:94:f1:eb:55:59:6c:76:87:0b:
0b:1a:ce:69:16:a0:4d:b3:05:21:66:95:67:b9:85:
42:84:0d:78:2c:a1:21:3a:00:38:ed:ff:db:cb:6a:
d6:84:46:4f:3c:06:63:ae:0b:2c:1b:b4:1b:41:46:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:95:71:07:5A:79:3F:41:C4:C3:23:70:B5:42:FE:D3:B2:39:5B:83
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/uJVxB1p5P0HEwyNwtUL-07I5W4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.0.0/19
80.231.0.0/16
195.219.0.0/16
IPv6:
2a01:3e0::/29
Signature Algorithm: sha256WithRSAEncryption
ec:49:82:c8:92:a7:fe:0e:02:df:54:d8:f6:16:75:c2:ea:2b:
e1:20:57:93:64:24:3a:28:ea:0e:8c:ff:06:25:74:26:c6:5f:
4d:10:a0:c4:30:35:f3:bf:f7:d8:1b:1d:58:4f:c6:17:a0:11:
7c:1c:9c:5f:d7:82:8c:9d:32:f2:d7:b3:ab:40:0a:8c:19:04:
a7:71:8f:81:8d:e8:5f:45:2c:7b:46:55:c8:f7:64:d1:a9:fd:
d7:ef:3c:85:85:d9:5f:50:74:85:c9:80:1f:77:f7:03:16:04:
57:22:b2:91:fe:a0:f7:69:19:95:d8:13:12:72:1f:85:f2:c0:
b1:09:f3:3f:a6:33:50:39:05:6c:1a:1b:c2:25:09:47:5f:f9:
f5:53:e4:f3:25:45:d1:46:b8:50:68:26:8a:40:b4:8b:89:5e:
18:25:d4:cb:df:0c:1c:e9:a6:7a:8d:85:0c:ef:b6:08:fe:e8:
eb:eb:d0:45:f5:c9:3f:f8:dc:26:dc:0e:5e:73:0d:d1:77:88:
a8:9e:b7:c9:27:af:44:3b:46:ea:06:f2:b6:fe:81:b8:01:72:
04:c9:ae:54:2d:ed:81:cc:a7:b5:98:92:e8:2c:e3:1e:57:c7:
5f:e4:76:92:e8:2f:b8:30:77:f6:5a:8a:9a:dc:68:2a:1c:08:
e8:0c:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:25:04 2025 by rpki-client