Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/UmRHpS8b-BjQ6weRZQA2PcgUHuE.roa
File: UmRHpS8b-BjQ6weRZQA2PcgUHuE.roa (raw, json)
Hash identifier: IB7eC9fJSOHcY9NgaiBzcUW+08aRsjI56WCpJ37VjVI=
Subject key identifier: 52:64:47:A5:2F:1B:F8:18:D0:EB:07:91:65:00:36:3D:C8:14:1E:E1
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0196F447E753019DA45876F8CAE02821AB2C
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/UmRHpS8b-BjQ6weRZQA2PcgUHuE.roa
Signing time: Wed 21 May 2025 19:17:55 +0000
ROA not before: Wed 21 May 2025 19:17:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60707
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 11:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f4:47:e7:53:01:9d:a4:58:76:f8:ca:e0:28:21:ab:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: May 21 19:17:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=526447a52f1bf818d0eb07916500363dc8141ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:17:7f:a9:b2:85:cd:96:55:86:54:8e:7a:
84:68:63:e7:5b:b1:a4:e0:51:07:3a:96:59:b8:6b:
c6:7c:3e:54:88:98:8e:cf:f3:77:89:7a:4c:7a:1b:
6a:70:a6:b3:1b:94:c6:75:f3:63:51:67:5a:5d:b4:
5b:30:9d:66:3d:93:fc:58:8b:f0:06:9a:42:d4:64:
28:f7:cc:2a:7b:15:be:90:aa:36:9e:68:7a:df:31:
03:75:b0:b7:f8:8c:7f:4b:f4:da:50:08:57:70:df:
32:60:54:e8:95:40:7e:78:99:60:17:44:e2:e3:27:
ce:5d:7b:1a:f0:44:f9:fb:70:50:25:90:2d:c5:05:
d1:8e:98:91:6e:48:19:70:68:3d:c2:c9:6a:29:e2:
01:07:4d:88:03:c3:05:aa:9b:d8:9f:ee:49:87:b2:
b0:cf:e7:d7:b0:8e:92:3f:f9:b9:f8:b9:b5:c6:de:
37:b6:f9:44:04:90:16:6c:b5:66:bd:e6:3a:02:71:
60:01:f6:15:43:68:3e:e5:7e:9a:ab:7e:77:4e:bf:
0f:8f:06:08:d3:18:27:eb:87:9c:14:39:c0:11:d3:
17:2f:42:e1:f8:ed:cc:a1:fc:a7:d8:cc:76:87:66:
bc:6b:3a:f4:9e:49:72:f5:8b:73:78:89:25:28:9c:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:64:47:A5:2F:1B:F8:18:D0:EB:07:91:65:00:36:3D:C8:14:1E:E1
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/UmRHpS8b-BjQ6weRZQA2PcgUHuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
91.228.14.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:1b:c4:3e:1a:b5:e0:8e:68:de:59:ea:10:d8:55:f5:49:0a:
65:fa:a1:07:b1:e0:5a:f9:58:fb:6b:71:9c:f7:72:e5:a3:e4:
ae:66:a1:97:66:c0:41:18:89:d6:5c:75:18:84:45:4e:cd:6d:
71:36:49:b2:7f:09:ee:27:a8:f7:c0:eb:7d:bb:60:28:e8:ed:
de:2b:a2:3a:54:24:03:04:c8:8a:78:c5:2e:ee:cc:05:08:55:
f6:32:23:06:c8:4b:36:35:5a:dc:7d:77:f7:52:7c:63:4b:52:
c8:7e:ee:ab:56:59:d4:ed:46:26:bd:b7:84:b1:7e:30:98:0b:
d4:cc:1e:30:8a:11:be:92:39:df:4d:e2:1b:7d:b0:1d:57:c2:
2b:2b:85:c6:c1:94:53:44:b7:2b:dd:d9:3f:42:61:d9:56:9d:
75:bf:cc:09:1e:02:f1:ef:68:0f:f1:56:98:63:65:2c:73:29:
04:20:d3:c4:d6:b6:b3:3f:a4:7d:12:19:7d:ba:14:e7:22:ea:
9b:fd:11:47:b8:2e:4c:e9:5f:1b:27:00:89:ec:d9:8b:6a:29:
78:1d:6d:6b:e9:5e:b5:f7:61:2e:7f:11:17:17:b3:fd:ca:b7:
f4:9f:c0:67:02:74:9d:77:e7:9e:77:11:70:40:c7:c0:fb:2a:
6b:f4:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:30:19 2025 by rpki-client