Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/UQE1GyS4no4Bt9SE4sjVlMStbak.roa
File: UQE1GyS4no4Bt9SE4sjVlMStbak.roa (raw, json)
Hash identifier: l8Ub1RjhaFQyWOb8/SZlfes3yKDftU1nm6+EZaaWqNI=
Subject key identifier: 51:01:35:1B:24:B8:9E:8E:01:B7:D4:84:E2:C8:D5:94:C4:AD:6D:A9
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 01942067D528701AD13384299389272B63DF
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/UQE1GyS4no4Bt9SE4sjVlMStbak.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5394
IP address blocks: 77.39.160.0/19 maxlen: 19
77.39.160.0/20 maxlen: 20
77.39.176.0/20 maxlen: 20
77.39.224.0/19 maxlen: 19
77.39.224.0/20 maxlen: 20
77.39.240.0/20 maxlen: 20
81.29.180.0/22 maxlen: 22
81.29.184.0/21 maxlen: 21
82.145.96.0/23 maxlen: 24
82.145.102.0/23 maxlen: 24
82.145.104.0/21 maxlen: 24
82.145.112.0/20 maxlen: 24
194.79.192.0/19 maxlen: 19
194.79.192.0/20 maxlen: 20
194.79.207.0/24 maxlen: 24
194.79.208.0/20 maxlen: 20
194.183.0.0/19 maxlen: 19
194.183.16.0/24 maxlen: 24
195.94.128.0/18 maxlen: 18
195.94.152.0/24 maxlen: 24
195.94.160.0/24 maxlen: 24
195.250.224.0/19 maxlen: 19
195.250.224.0/24 maxlen: 24
195.250.232.0/24 maxlen: 24
213.233.0.0/18 maxlen: 18
213.233.0.0/19 maxlen: 19
213.233.27.0/24 maxlen: 24
213.233.32.0/19 maxlen: 19
213.233.36.0/24 maxlen: 24
217.72.96.0/20 maxlen: 20
2a02:688::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 23 Jan 2025 16:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d5:28:70:1a:d1:33:84:29:93:89:27:2b:63:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5101351b24b89e8e01b7d484e2c8d594c4ad6da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:04:37:41:68:3e:8f:98:af:f0:be:dc:3f:
9d:05:d1:fe:91:f8:6c:f3:58:87:17:1f:26:b7:3f:
9b:da:5e:34:71:63:61:04:01:a0:3f:00:5f:8d:a9:
19:a9:40:34:58:4c:29:36:9b:10:3d:56:08:f8:a5:
13:f5:b6:54:78:17:15:a8:83:73:18:88:41:cb:0f:
f9:e3:c3:9b:9d:61:44:1e:1e:8a:a0:16:e5:41:e2:
dc:ba:a2:e0:07:de:4d:c5:43:57:56:f9:67:53:77:
f9:9e:23:bf:82:69:83:a1:95:03:65:74:28:01:35:
1d:6d:8f:68:03:7a:dc:5b:fe:36:46:e4:a6:9d:59:
a9:45:7c:09:0e:5e:a6:8e:0b:64:fe:d6:94:81:e1:
f2:53:63:35:cc:c2:a2:17:75:af:ea:d6:e5:82:bd:
0d:eb:7f:bd:8d:91:94:6d:d1:95:a1:cd:d6:88:1f:
40:54:52:69:4a:cd:0e:ba:78:89:2f:19:08:71:69:
90:72:a6:38:fa:0f:5c:9a:01:31:2e:2f:df:33:06:
e5:1e:86:72:bb:8b:b4:8c:c8:60:7d:16:31:23:7c:
e1:f2:7f:04:cb:36:db:49:e3:08:15:0f:2e:95:2c:
24:42:e3:19:ae:03:7d:5a:93:8a:c8:36:4c:4f:b5:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:01:35:1B:24:B8:9E:8E:01:B7:D4:84:E2:C8:D5:94:C4:AD:6D:A9
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/UQE1GyS4no4Bt9SE4sjVlMStbak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.39.160.0/19
77.39.224.0/19
81.29.180.0-81.29.191.255
82.145.96.0/23
82.145.102.0-82.145.127.255
194.79.192.0/19
194.183.0.0/19
195.94.128.0/18
195.250.224.0/19
213.233.0.0/18
217.72.96.0/20
IPv6:
2a02:688::/32
Signature Algorithm: sha256WithRSAEncryption
47:35:37:6a:43:69:ad:97:81:8d:64:17:c4:62:c0:6f:02:b1:
55:24:24:a4:ed:13:e0:6b:38:20:da:48:47:58:f6:33:0d:4c:
af:90:d3:4e:3a:80:ba:5c:29:4b:85:2a:b1:1f:c9:aa:7d:bc:
41:f0:2a:44:a6:36:2b:9d:5d:ff:d5:5e:8d:df:7b:e2:a9:e7:
fa:aa:fa:e3:fe:ff:c9:f5:88:1e:d2:9e:ab:b1:c0:8b:31:97:
06:11:87:8f:cd:5e:14:a4:fa:ef:06:e7:90:a9:15:be:3c:16:
ac:d0:42:86:8b:e1:c1:e3:21:e6:5c:cf:15:d5:82:db:df:ef:
90:bc:37:c3:22:ef:b6:b7:7b:cb:c9:02:ae:62:27:ee:2d:fe:
0d:94:e7:14:0e:fb:95:62:b1:23:a7:de:ba:91:41:65:cc:e9:
33:f9:4e:4f:f5:17:61:74:28:e5:33:2e:5c:d7:a2:22:d1:d1:
98:f8:7e:98:c7:3b:1b:c4:34:8e:4b:93:41:ed:97:27:52:eb:
56:76:08:45:2e:72:45:7c:cd:fb:12:f7:4c:9b:70:f6:b9:d7:
64:24:a4:5d:b6:e1:06:20:75:c7:c9:46:ac:29:03:49:67:ad:
ea:59:76:bc:48:c4:bf:4b:f5:d4:58:08:5e:f9:52:55:4a:ab:
ca:c6:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:07:00 2025 by rpki-client