Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UiGDNpiOvn7k0ncYojvTrTGPaRI.roa
File: UiGDNpiOvn7k0ncYojvTrTGPaRI.roa (raw, json)
Hash identifier: z5BbYVimuEj1Af7LeozvflRAWH8pKR5QSKb/hMDIkRk=
Subject key identifier: 52:21:83:36:98:8E:BE:7E:E4:D2:77:18:A2:3B:D3:AD:31:8F:69:12
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01942444D1E17F4D9220E703F9C663736318
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UiGDNpiOvn7k0ncYojvTrTGPaRI.roa
Signing time: Wed 01 Jan 2025 23:47:57 +0000
ROA not before: Wed 01 Jan 2025 23:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 77.246.212.0/22 maxlen: 22
88.80.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 08:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d1:e1:7f:4d:92:20:e7:03:f9:c6:63:73:63:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 23:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52218336988ebe7ee4d27718a23bd3ad318f6912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:69:75:93:d2:d5:d5:eb:94:a5:e9:f8:69:
b3:c8:7f:17:66:e6:80:20:e7:e3:f3:5a:b8:02:ea:
01:13:af:58:76:c2:d7:75:2f:f2:d7:85:c8:5d:95:
09:c1:80:92:09:11:bd:de:39:28:45:5e:9b:06:7f:
43:7d:e1:3f:d6:33:79:5f:e5:b7:06:ca:da:4b:fa:
a3:9c:12:d2:b1:86:75:a3:4c:12:25:7c:c4:d9:23:
ce:f1:a1:42:45:8e:64:51:a8:2c:31:9d:81:bc:66:
78:25:c5:88:4d:11:2d:5b:90:5f:61:bd:6d:55:65:
fb:19:ba:91:dc:70:26:12:ee:b5:f7:0d:95:10:ea:
d1:6a:e3:87:e3:d5:e0:9b:0f:4a:62:f6:77:bf:48:
e0:bf:4b:ed:6b:81:07:e8:42:ba:9b:c9:d3:96:ad:
29:9a:4d:c0:05:cd:87:ad:ca:d7:cf:91:99:c6:38:
02:9a:67:f9:58:15:29:33:b9:58:29:ff:b3:0c:ca:
93:d9:ba:a8:46:53:9f:d9:09:31:dc:40:36:c6:d8:
05:d9:a0:52:b6:23:af:31:9c:03:a8:0d:e3:90:90:
d3:fa:b4:ba:95:58:d5:33:09:50:7e:e4:c9:74:d9:
a1:33:9f:92:91:5c:a9:bc:8b:3e:be:1f:14:ec:0f:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:21:83:36:98:8E:BE:7E:E4:D2:77:18:A2:3B:D3:AD:31:8F:69:12
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UiGDNpiOvn7k0ncYojvTrTGPaRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.212.0/22
88.80.140.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1a:3a:c4:12:0d:c9:f3:9f:d7:06:b6:e7:dc:29:b6:6c:00:
03:3b:74:f5:b8:0c:be:00:a1:04:52:23:03:41:c4:51:25:dd:
08:c8:e6:0c:df:e6:d9:c1:3c:c0:03:4a:b1:4f:f1:b0:fb:9e:
8d:a3:6a:54:a5:92:e5:1b:19:94:15:cf:0f:30:a3:53:6d:ff:
e2:4f:ea:ff:87:53:21:2e:03:72:9f:51:b4:26:35:4d:71:c2:
f4:70:5d:8b:6f:4b:66:67:f6:f7:eb:e4:59:78:83:c9:7c:14:
83:62:c4:2e:ea:66:58:e1:eb:69:b7:95:ce:d8:97:0b:bc:aa:
cf:6a:00:24:b3:90:02:56:db:9c:ab:e6:61:61:dc:2e:ad:3b:
26:c8:2e:8e:05:bc:ab:22:24:07:11:1e:3c:cb:31:64:80:16:
07:70:a0:b9:40:a3:aa:45:84:81:d8:cb:83:d6:2a:d7:93:8d:
49:46:75:5b:fa:d4:a6:4e:a4:5d:74:44:20:46:20:3d:f9:0b:
eb:87:93:22:d6:cf:c2:90:a3:73:8f:9a:62:b9:e2:b7:82:eb:
59:88:d4:eb:a0:10:27:9e:33:ce:cd:10:7b:08:d6:04:c5:2b:
71:71:1c:03:7c:bf:db:14:e8:78:04:dc:61:cd:09:32:c3:b3:
b0:e1:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:22 2025 by rpki-client