Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/utgq4gGSbao0aUlJcAs8Ut4yhiE.roa
File: utgq4gGSbao0aUlJcAs8Ut4yhiE.roa (raw, json)
Hash identifier: pZ6cJ9gVutX6j8wpquk4JbNCYkJpoFl1XkVXYBQRU/w=
Subject key identifier: BA:D8:2A:E2:01:92:6D:AA:34:69:49:49:70:0B:3C:52:DE:32:86:21
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019426D98E18025D96C381B7F32E5450A9C4
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/utgq4gGSbao0aUlJcAs8Ut4yhiE.roa
Signing time: Thu 02 Jan 2025 11:49:39 +0000
ROA not before: Thu 02 Jan 2025 11:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198160
IP address blocks: 89.36.32.0/24 maxlen: 24
89.36.33.0/24 maxlen: 24
185.121.132.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
2a14:6780::/29 maxlen: 48
2a14:6780::/32 maxlen: 32
2a14:6781::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 06 Feb 2025 13:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8e:18:02:5d:96:c3:81:b7:f3:2e:54:50:a9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bad82ae201926daa34694949700b3c52de328621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:ed:bd:57:f9:3b:e0:4f:8f:1c:b9:d4:43:
2f:c3:5d:f9:3e:4b:05:f8:f1:79:40:95:55:54:31:
4c:39:3e:97:2f:22:d4:89:78:9c:e0:57:8e:05:43:
29:86:62:cb:d6:3f:12:1b:28:1c:f4:88:24:33:46:
86:36:e4:55:96:84:a4:5b:6c:96:f9:3d:b1:3b:44:
f4:9a:7b:73:03:c7:0a:ea:e9:77:01:9b:63:b4:15:
fc:4f:32:3d:71:62:30:d5:12:10:d7:f6:fc:71:d2:
65:35:b6:e3:71:a2:95:c5:6a:79:0f:5a:ba:76:d1:
df:10:e1:c6:75:96:fd:6c:06:0c:e7:50:00:82:ad:
d0:33:56:5b:fc:eb:70:90:62:0e:22:f3:d0:73:9e:
04:92:5a:ee:f6:ac:02:7f:10:e4:31:46:49:12:bf:
b2:0a:f2:1a:94:a3:d8:65:1b:ca:15:2d:68:b6:84:
ed:7d:58:52:72:4d:8e:db:09:74:ae:68:fa:a1:b7:
fe:af:31:1f:b2:8b:4f:58:f9:7e:36:a4:9e:03:b9:
82:dc:8f:e6:12:7a:71:dc:66:12:1b:80:3d:38:3e:
62:1d:a5:5c:1b:b8:5e:f0:5a:49:e9:51:7c:ae:47:
f5:13:da:41:24:6d:ba:18:18:5a:a4:72:88:92:58:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D8:2A:E2:01:92:6D:AA:34:69:49:49:70:0B:3C:52:DE:32:86:21
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/utgq4gGSbao0aUlJcAs8Ut4yhiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.32.0/23
185.121.132.0/23
185.121.135.0/24
212.232.19.0/24
IPv6:
2a14:6780::/29
Signature Algorithm: sha256WithRSAEncryption
09:b7:13:a8:57:d2:4a:5c:ae:bb:33:2a:fd:b8:74:b9:95:4c:
29:7c:fa:58:89:14:d6:e4:89:92:33:f4:cb:73:16:9b:f2:61:
64:80:35:cd:c4:56:50:41:47:40:ca:55:f7:93:92:1d:08:79:
65:2d:66:ea:5c:f9:0e:44:e8:08:34:03:d7:d5:ab:ba:53:02:
7b:59:ee:9e:08:99:ef:d2:f1:de:25:28:e1:d6:75:57:4f:3a:
e5:54:d6:8a:b9:b9:4b:d7:71:90:81:6c:af:bd:33:8a:50:10:
67:87:10:76:56:6a:ca:c0:d5:65:ec:d8:91:a9:93:90:4f:8d:
2f:1b:42:ae:55:43:62:93:e9:96:d3:ca:a8:8d:fb:2e:54:76:
64:d5:c0:86:a2:d3:86:82:a4:d4:41:5f:39:f6:ea:3d:d5:e0:
91:97:d5:58:20:f7:00:e4:55:ce:7c:74:97:4f:3b:bc:ef:e9:
6c:91:20:8e:6a:f1:71:93:c7:1b:ce:7b:6a:e7:35:b5:64:1b:
73:31:37:62:6c:f5:cd:51:6c:8d:72:9d:11:38:f9:f4:3c:99:
32:ea:ce:d4:5f:2d:93:6a:6b:ea:28:a8:2e:17:bd:44:c5:5e:
0a:71:98:c3:ca:f3:68:36:9d:2c:57:2b:9c:e0:92:e0:68:ba:
89:ce:b3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:37:17 2025 by rpki-client