Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/UgWhxzDUZrSnQbnqASCLtjyiGaQ.roa
File: UgWhxzDUZrSnQbnqASCLtjyiGaQ.roa (raw, json)
Hash identifier: on4V4Rk5tSy684/4Sv4TNM1s1M7JwBi1Z1GrgcDFU5s=
Subject key identifier: 52:05:A1:C7:30:D4:66:B4:A7:41:B9:EA:01:20:8B:B6:3C:A2:19:A4
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 0194DC25B73B640E4B32C8B1C548AE7A5171
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/UgWhxzDUZrSnQbnqASCLtjyiGaQ.roa
Signing time: Thu 06 Feb 2025 16:44:06 +0000
ROA not before: Thu 06 Feb 2025 16:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62214
IP address blocks: 46.29.136.0/21 maxlen: 21
79.139.56.0/21 maxlen: 21
92.119.120.0/22 maxlen: 22
109.122.216.0/21 maxlen: 21
185.43.204.0/22 maxlen: 22
185.80.48.0/22 maxlen: 22
185.187.72.0/22 maxlen: 22
193.39.12.0/22 maxlen: 22
193.201.184.0/21 maxlen: 21
194.176.123.0/24 maxlen: 24
194.180.19.0/24 maxlen: 24
2a01:6ee0::/32 maxlen: 32
2a01:6ee0::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 06 Feb 2025 16:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:25:b7:3b:64:0e:4b:32:c8:b1:c5:48:ae:7a:51:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Feb 6 16:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5205a1c730d466b4a741b9ea01208bb63ca219a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:a6:2b:d7:c7:a7:68:10:79:ed:16:86:66:
9f:ac:83:98:7d:01:98:e3:67:76:79:75:0f:e9:d4:
e1:5a:9b:80:64:fd:64:48:92:0f:c2:dc:b9:e4:22:
92:2e:bb:f4:25:60:de:0e:e7:7d:ce:6d:0e:0c:f6:
13:2e:f7:b2:d0:06:db:96:b2:50:14:2e:a8:8f:22:
74:55:87:22:a4:1d:55:29:b6:68:7d:0c:e5:35:ed:
b1:e7:08:57:b3:57:67:a0:14:6d:b5:a4:1c:e8:6c:
77:ac:e5:df:67:19:a0:77:2f:76:db:8a:8f:aa:aa:
ee:6a:0a:0b:bf:6c:81:c7:20:36:4c:a3:07:01:c5:
29:1a:f7:46:ce:33:d5:c4:1b:c5:1f:7d:96:57:df:
f4:e9:17:f3:88:3f:4b:8d:fe:28:dc:ff:f2:ee:0a:
8f:d1:b8:9a:78:74:94:87:95:a1:bc:5a:3d:a4:19:
54:fe:0d:fb:1d:05:cc:fe:41:10:c6:7f:6f:d6:2c:
4a:62:1f:c4:0b:88:c2:83:29:e3:12:81:03:f5:b0:
b8:fe:2f:69:88:d3:8b:4d:ac:91:11:b1:26:33:44:
04:70:ba:ea:1d:64:1c:23:b0:ab:47:b5:1c:85:94:
2f:3f:be:51:80:ff:2e:28:9c:9b:3a:33:46:a3:2a:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:05:A1:C7:30:D4:66:B4:A7:41:B9:EA:01:20:8B:B6:3C:A2:19:A4
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/UgWhxzDUZrSnQbnqASCLtjyiGaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.136.0/21
79.139.56.0/21
92.119.120.0/22
109.122.216.0/21
185.43.204.0/22
185.80.48.0/22
185.187.72.0/22
193.39.12.0/22
193.201.184.0/21
194.176.123.0/24
194.180.19.0/24
IPv6:
2a01:6ee0::/32
Signature Algorithm: sha256WithRSAEncryption
7b:d9:c3:a5:12:6a:b7:c1:a5:33:85:f1:8a:ed:9b:d0:50:fb:
66:26:72:90:b5:41:61:7a:2f:bd:15:35:b0:64:79:2d:3e:4d:
8b:e5:ac:e7:3e:cc:fe:07:9f:87:19:7f:09:3e:62:a6:c5:28:
8e:a9:a2:55:e9:92:a8:d4:ff:26:ce:81:71:06:38:c5:96:e0:
dc:82:d7:65:3e:77:8d:2e:49:da:a0:f3:f0:06:43:1a:95:2c:
04:57:37:56:29:2e:e6:1f:fa:f0:82:b5:d1:71:56:13:7e:50:
91:1a:50:ce:cb:15:8a:cb:68:44:4d:aa:6e:c7:7d:ea:9a:b9:
fc:60:50:d3:68:b0:7b:76:1c:57:00:37:f2:7b:0c:85:c3:48:
e5:19:dd:3c:2e:61:80:25:da:2f:f7:fe:d2:84:a3:fd:98:c6:
c7:9a:12:a4:00:5a:ee:e5:9b:67:b8:76:3a:f0:28:2a:b3:38:
17:d3:f9:0e:b9:2f:2f:a2:f8:78:88:3b:ba:9c:83:49:29:e7:
3f:d9:97:1f:bd:0d:5f:8c:df:ea:97:44:29:2b:35:35:72:da:
de:77:1f:ef:0d:6e:ef:76:b4:0b:11:79:67:60:af:65:f0:79:
df:ca:63:9f:ca:b1:63:ff:74:e6:c0:cd:46:b2:5e:9e:ec:37:
bb:c5:2f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:07:06 2025 by rpki-client