Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/UiywziZxN-7MEINyZRyFT2U_5J0.roa
File: UiywziZxN-7MEINyZRyFT2U_5J0.roa (raw, json)
Hash identifier: Hs9brKdNVbXd9gOK7GzpNeHkytFA64OrK6GnB4LNebo=
Subject key identifier: 52:2C:B0:CE:26:71:37:EE:CC:10:83:72:65:1C:85:4F:65:3F:E4:9D
Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial: 01941F8C0CB489D7AAC4420142F475082362
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/UiywziZxN-7MEINyZRyFT2U_5J0.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25308
IP address blocks: 212.118.44.0/24 maxlen: 24
212.118.46.0/23 maxlen: 23
212.118.46.0/24 maxlen: 24
212.118.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 14:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0c:b4:89:d7:aa:c4:42:01:42:f4:75:08:23:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=522cb0ce267137eecc108372651c854f653fe49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:45:c8:bb:5e:c6:7e:b9:c0:66:6e:3d:66:
fa:cf:43:d9:b3:d5:5e:10:a0:7d:d1:b1:9b:ff:c7:
20:fa:60:f4:9f:3f:36:d3:d9:52:be:72:c1:1f:d2:
da:b4:3f:4a:08:ed:fa:f8:87:a0:7b:ae:54:d8:32:
6f:46:d4:48:ac:40:f4:16:bf:13:85:e0:19:be:51:
92:c7:7c:3e:11:0d:23:a1:43:8d:12:16:88:ee:59:
d3:48:3e:0b:84:f1:5a:5e:cf:69:11:41:2d:95:5e:
63:48:ad:24:d5:ee:a0:c6:8e:6f:91:af:6f:94:dd:
ed:37:ed:be:6c:b9:df:69:8a:43:8a:32:83:87:21:
5b:6f:f8:6a:c9:06:96:85:d8:c7:1e:41:85:42:b5:
78:4f:c8:27:ca:ff:09:26:76:d8:27:a1:25:ac:b4:
35:06:84:d0:ba:df:c6:88:84:e2:74:06:a3:de:4a:
8b:46:c3:71:8a:5b:b7:7b:97:8f:86:9e:04:a2:d6:
fe:e6:02:21:40:98:bd:cf:91:ce:70:e2:eb:77:ea:
6e:80:ff:11:f7:1a:91:19:86:7f:79:dd:2d:15:9d:
18:7b:22:87:d9:87:58:44:ce:93:4c:89:8b:a0:af:
95:d8:44:69:6a:e6:03:f2:c5:2c:8c:e0:da:f8:9f:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2C:B0:CE:26:71:37:EE:CC:10:83:72:65:1C:85:4F:65:3F:E4:9D
X509v3 Authority Key Identifier:
keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/UiywziZxN-7MEINyZRyFT2U_5J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.118.44.0/24
212.118.46.0/23
Signature Algorithm: sha256WithRSAEncryption
87:b6:ec:1d:01:19:28:51:c4:2e:ee:1a:d0:3b:ca:c8:e1:4c:
d0:00:c5:9f:26:f6:82:91:a5:2d:57:47:fa:57:8d:23:04:5c:
78:03:51:fe:8e:e1:d5:4b:8c:4c:f6:77:92:da:4c:43:db:8a:
62:93:e3:32:66:fa:99:58:5d:63:6d:ee:ba:7c:78:f4:24:0f:
8b:01:99:05:4f:79:67:8e:2b:5f:3c:99:47:b4:59:68:4f:4f:
e3:ec:30:2f:a8:bd:b0:0c:47:b8:24:00:eb:e9:4a:d0:c9:62:
d9:83:b7:fc:ab:7a:37:a5:c1:a2:23:c3:7b:49:fd:38:b5:c3:
30:af:ab:29:a1:41:27:c0:c4:ce:f5:8b:d8:64:ac:1c:84:a4:
5b:5c:2d:06:a0:e2:d5:9d:60:4e:85:df:d6:41:4b:34:4e:63:
19:c6:62:35:d7:82:3b:c0:6d:f6:26:10:7a:f5:97:bc:98:1a:
4d:2e:e3:82:bb:06:d2:da:30:6f:ed:40:85:a0:65:07:76:53:
ce:36:27:2b:51:15:53:e9:69:c0:3d:8d:77:65:56:a2:a5:b5:
96:75:ca:1d:04:57:bc:9e:55:0b:a6:99:b5:10:b3:b1:c4:33:
a8:fd:4b:27:09:42:2c:07:74:11:90:40:da:4d:74:30:b5:a7:
b9:cc:13:15
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfjAy0ideqxEIBQvR1CCNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWZlYjZiMDQ0YmJmNjExMTc3NWJjYTAzOGQ2NWU2ZDIy
MzBmMTQwHhcNMjUwMTAxMDE0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjJjYjBjZTI2NzEzN2VlY2MxMDgzNzI2NTFjODU0ZjY1M2ZlNDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0JFyLtexn65wGZuPWb6z0PZs9Ve
EKB90bGb/8cg+mD0nz8209lSvnLBH9LatD9KCO36+Iege65U2DJvRtRIrED0Fr8T
heAZvlGSx3w+EQ0joUONEhaI7lnTSD4LhPFaXs9pEUEtlV5jSK0k1e6gxo5vka9v
lN3tN+2+bLnfaYpDijKDhyFbb/hqyQaWhdjHHkGFQrV4T8gnyv8JJnbYJ6ElrLQ1
BoTQut/GiITidAaj3kqLRsNxilu3e5ePhp4Eotb+5gIhQJi9z5HOcOLrd+pugP8R
9xqRGYZ/ed0tFZ0YeyKH2YdYRM6TTImLoK+V2ERpauYD8sUsjODa+J+B2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFIssM4mcTfuzBCDcmUchU9lP+SdMB8GA1UdIwQY
MBaAFI4f62sES79hEXdbygONZebSIw8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAt
MGQ4ZmNlM2ViZmJiLzEvVWl5d3ppWnhOLTdNRUlOeVpSeUZUMlVfNUowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAtMGQ4ZmNlM2ViZmJi
LzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1HYsAwQB
1HYuMA0GCSqGSIb3DQEBCwUAA4IBAQCHtuwdARkoUcQu7hrQO8rI4UzQAMWfJvaC
kaUtV0f6V40jBFx4A1H+juHVS4xM9neS2kxD24pik+MyZvqZWF1jbe66fHj0JA+L
AZkFT3lnjitfPJlHtFloT0/j7DAvqL2wDEe4JADr6UrQyWLZg7f8q3o3pcGiI8N7
Sf04tcMwr6spoUEnwMTO9YvYZKwchKRbXC0GoOLVnWBOhd/WQUs0TmMZxmI114I7
wG32JhB69Ze8mBpNLuOCuwbS2jBv7UCFoGUHdlPONicrURVT6WnAPY13ZVaipbWW
dcodBFe8nlULppm1ELOxxDOo/UsnCUIsB3QRkEDaTXQwtae5zBMV
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:45:52 2025 by rpki-client