Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/UItW_B7eVDId4gvoUcQv8T1vlik.roa
File: UItW_B7eVDId4gvoUcQv8T1vlik.roa (raw, json)
Hash identifier: EbqgmvXvOJcnDYTXdDNgEbY8UV/EuDbW+tDhi8bO1to=
Subject key identifier: 50:8B:56:FC:1E:DE:54:32:1D:E2:0B:E8:51:C4:2F:F1:3D:6F:96:29
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0196D0754CE93D1AECB97403F0A1374855C6
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/UItW_B7eVDId4gvoUcQv8T1vlik.roa
Signing time: Wed 14 May 2025 20:21:10 +0000
ROA not before: Wed 14 May 2025 20:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34837
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.140.0/24 maxlen: 24
212.16.64.0/24 maxlen: 24
212.16.65.0/24 maxlen: 24
212.16.67.0/24 maxlen: 24
212.16.68.0/24 maxlen: 24
212.16.75.0/24 maxlen: 24
212.16.82.0/24 maxlen: 24
212.16.83.0/24 maxlen: 24
212.16.88.0/24 maxlen: 24
212.16.90.0/24 maxlen: 24
212.16.91.0/24 maxlen: 24
212.80.0.0/19 maxlen: 19
212.80.1.0/24 maxlen: 24
212.80.3.0/24 maxlen: 24
212.80.5.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
212.80.16.0/24 maxlen: 24
212.80.28.0/24 maxlen: 24
212.80.30.0/24 maxlen: 24
212.80.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 May 2025 19:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:75:4c:e9:3d:1a:ec:b9:74:03:f0:a1:37:48:55:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 14 20:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=508b56fc1ede54321de20be851c42ff13d6f9629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:22:ce:ed:ee:e1:5e:74:28:e4:66:f1:8e:
e5:82:99:c9:c3:54:c2:55:81:3e:e5:4f:fe:cf:82:
39:66:7f:fd:1a:5f:05:ac:1a:4e:84:ef:c5:cf:a6:
67:6c:71:16:a9:9c:21:21:08:3e:40:2a:00:df:0c:
41:01:23:4f:2e:49:76:99:03:57:84:c9:4d:02:89:
d2:9f:88:09:a7:c8:0b:76:4c:5e:08:29:33:48:7c:
98:c6:86:95:f6:f6:5b:db:6b:4d:5c:5f:34:d0:78:
1c:78:47:2d:2c:fc:6f:0f:fe:a3:79:15:3c:0b:ab:
46:bd:51:63:ba:68:e0:68:d6:c4:b2:83:6c:16:1b:
47:0c:db:9a:b9:07:58:56:d0:c9:66:74:28:f9:1f:
70:22:2d:c1:3a:70:fd:60:19:a7:7d:23:75:ff:61:
ac:18:d0:47:4a:95:4c:a8:4c:26:55:11:a0:98:cf:
e1:f4:df:fd:8e:06:ab:98:2d:e0:56:19:c9:27:b3:
b4:44:6c:e2:c9:e3:7d:b7:56:51:d3:20:45:64:2d:
e8:fe:da:d6:d1:83:d3:8b:d6:ca:b9:0a:74:17:ca:
1b:f0:8f:86:18:8b:17:4e:74:d4:49:ba:dc:49:4e:
0e:15:8f:11:fe:af:00:a8:21:a4:3f:e6:88:35:ff:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8B:56:FC:1E:DE:54:32:1D:E2:0B:E8:51:C4:2F:F1:3D:6F:96:29
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/UItW_B7eVDId4gvoUcQv8T1vlik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.140.0/24
212.16.64.0/23
212.16.67.0-212.16.68.255
212.16.75.0/24
212.16.82.0/23
212.16.88.0/24
212.16.90.0/23
212.80.0.0/19
Signature Algorithm: sha256WithRSAEncryption
37:6a:29:60:69:91:61:e9:0e:95:32:f5:0e:f2:2a:d8:c5:62:
2a:f6:21:6a:03:25:49:15:a1:a6:3a:2c:0b:33:97:5e:9c:ba:
d2:c7:56:07:9f:f5:1b:12:69:ea:d0:47:0a:f3:fa:91:be:cc:
c9:92:2e:1e:31:83:14:e2:4f:ed:33:c7:c3:f1:b9:a5:36:72:
80:c4:6a:81:cb:d8:32:91:13:1a:41:ce:1e:75:00:ba:d6:be:
76:6c:fd:c2:9e:71:1a:33:fc:ba:5a:69:eb:1a:33:c0:9b:73:
7d:7d:1c:b7:61:c4:e5:a2:41:c9:51:dd:23:f4:38:99:88:63:
8a:34:6b:09:d8:8c:06:40:90:ce:13:0d:5f:1e:ed:b5:a6:e3:
6a:5d:20:f9:db:91:92:a6:08:e6:57:8b:a5:19:ce:97:49:b1:
87:26:06:f7:87:7d:0e:bd:7f:70:ad:2c:82:02:21:3a:fb:92:
dc:4f:85:a0:a4:67:3f:32:a5:9a:13:db:45:0e:50:f0:a9:d0:
26:5b:63:2b:48:5a:e1:f8:d8:38:6b:6c:6e:f2:9a:76:ff:5b:
63:e9:b0:28:c6:4f:4c:92:af:3f:30:c2:54:7a:09:d7:fb:4b:
2f:10:c9:9c:08:8a:0e:10:f2:17:50:16:46:1d:52:c8:eb:40:
e4:bb:98:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:27:21 2025 by rpki-client