Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/upw_jjFL9gwHXomYrZD_4xk90TY.roa
File: upw_jjFL9gwHXomYrZD_4xk90TY.roa (raw, json)
Hash identifier: RBZYMm37C41vfpOMvJQkb5SP3w5Fm9Q90TlPmf5q5Dg=
Subject key identifier: BA:9C:3F:8E:31:4B:F6:0C:07:5E:89:98:AD:90:FF:E3:19:3D:D1:36
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01951D255CD877968559F4B04FD5DD744483
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/upw_jjFL9gwHXomYrZD_4xk90TY.roa
Signing time: Wed 19 Feb 2025 07:39:02 +0000
ROA not before: Wed 19 Feb 2025 07:39:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 94.103.60.0/22 maxlen: 24
176.103.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 07:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:25:5c:d8:77:96:85:59:f4:b0:4f:d5:dd:74:44:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Feb 19 07:39:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba9c3f8e314bf60c075e8998ad90ffe3193dd136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:df:5f:7d:c3:6a:43:f2:57:72:99:70:e9:ef:
90:fe:a6:22:13:3d:cc:63:f4:5c:a9:3d:9d:e6:f6:
9e:ed:57:68:c6:a5:cf:a1:fe:2f:cb:66:19:1b:ff:
f2:8c:5d:7e:c9:6c:74:b7:1b:fd:ef:c0:96:a2:f6:
e0:43:3a:bc:54:8d:4c:6c:11:5a:57:22:c3:77:e3:
a0:3c:53:b8:09:02:91:7b:80:87:af:28:ae:f4:f8:
90:1f:84:72:3c:ce:bd:b5:6b:d5:ee:22:e1:c0:57:
3f:07:f1:3c:e4:c4:66:f3:d6:60:21:ca:cd:f2:ca:
ee:7b:a1:29:bf:a1:a0:ee:af:44:0b:66:a2:42:37:
61:d3:fa:4e:69:e6:fa:cb:b7:34:24:26:1d:c0:9b:
17:82:81:1c:90:bc:f9:31:41:ee:ad:83:22:c5:8d:
f3:70:a4:f8:c9:75:42:86:c1:ab:8b:75:63:0b:ab:
ed:fe:c8:59:72:4c:38:e3:0a:3b:a7:2a:00:3d:78:
bd:5b:a8:b6:6a:dc:c5:d0:21:1c:48:67:32:c2:83:
f0:b3:57:4a:af:13:1c:f0:c4:e3:97:6c:d1:d3:64:
97:d5:10:d6:cd:b5:fe:bf:6f:db:fe:04:23:48:f9:
fa:7d:0f:16:23:c4:93:6c:60:16:c5:9b:ca:1d:8e:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9C:3F:8E:31:4B:F6:0C:07:5E:89:98:AD:90:FF:E3:19:3D:D1:36
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/upw_jjFL9gwHXomYrZD_4xk90TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.60.0/22
176.103.188.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:67:4f:39:11:8b:45:0c:18:7c:25:b2:3c:20:99:24:7b:42:
e2:de:64:d1:ce:4c:78:f5:68:2a:6b:4f:1f:77:f4:8b:2a:c6:
a7:78:c2:8d:97:a7:e3:34:99:8b:47:4e:a3:13:f3:87:5b:54:
c8:95:70:50:73:b2:40:0e:fb:7b:f5:7e:00:77:60:52:fb:88:
29:6f:6f:a8:6b:4d:30:c7:66:ba:a7:94:fe:99:e0:ac:28:c8:
2d:0f:33:ba:27:9d:50:4d:27:4d:63:06:64:c8:e3:9e:2e:17:
45:79:78:41:f6:3d:d1:c6:98:1b:65:be:0c:26:13:3b:62:91:
5a:cd:99:ff:8f:0b:33:ab:c3:09:34:60:60:8c:d9:e1:36:41:
66:5d:09:29:c0:88:ff:c7:a2:e0:19:c6:85:29:7e:03:4b:b8:
4d:87:63:35:09:a5:95:c5:03:50:4b:55:cc:a5:01:db:65:58:
00:9a:e0:15:0b:c0:d8:e9:26:d6:5d:b6:95:f4:75:02:87:38:
68:8c:6d:b7:90:e6:4d:91:10:3c:db:5a:9b:6e:f0:67:25:91:
11:64:64:25:60:93:87:3a:bb:2f:d8:c3:5c:49:2f:37:03:52:
00:a9:fb:58:f2:49:a0:45:96:44:99:3c:6e:ca:13:ad:c3:09:
3c:00:ee:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:16:57 2025 by rpki-client