Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ucHoQk2wYGwyI8Sa-gRKCdwe2Uw.roa
File: ucHoQk2wYGwyI8Sa-gRKCdwe2Uw.roa (raw, json)
Hash identifier: WYKKb3LNdiKwB7CxsuhZ9Fahq9Mu+unYXXYYg16bMA0=
Subject key identifier: B9:C1:E8:42:4D:B0:60:6C:32:23:C4:9A:FA:04:4A:09:DC:1E:D9:4C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0195A469289DB465FC667DDD438B91BA774D
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ucHoQk2wYGwyI8Sa-gRKCdwe2Uw.roa
Signing time: Mon 17 Mar 2025 14:01:49 +0000
ROA not before: Mon 17 Mar 2025 14:01:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 21 Mar 2025 15:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:69:28:9d:b4:65:fc:66:7d:dd:43:8b:91:ba:77:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 17 14:01:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9c1e8424db0606c3223c49afa044a09dc1ed94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:cb:5d:a2:6d:79:36:9d:0d:52:00:84:60:
43:ca:c8:15:49:c2:9f:d9:6d:bd:9e:e7:cf:67:80:
a3:d9:df:ad:ec:7c:33:fc:00:92:fb:9f:ce:06:d7:
6d:fd:b0:b5:48:d2:30:b8:11:90:19:31:24:bd:70:
d0:05:49:5e:5f:a3:a4:f2:49:f0:03:63:cf:a0:68:
20:a2:43:56:ce:a6:85:a5:97:c3:6b:e5:71:bb:45:
89:d9:84:fb:a2:1c:24:fd:f9:af:18:16:4f:06:ed:
01:ab:c0:ae:3c:54:9d:ef:59:26:64:87:d6:a4:53:
49:90:51:63:8f:0e:0e:ab:16:29:44:84:53:1b:fb:
aa:2a:5d:1a:16:fa:be:50:ce:84:04:f2:54:9a:68:
98:e4:05:18:13:36:28:88:ae:1f:39:7d:b4:d2:a0:
87:4d:c4:8b:db:a2:7c:0b:78:71:b3:d4:62:65:d2:
57:20:72:a8:8c:41:86:d5:a9:bb:50:ae:93:22:a1:
1d:18:1e:44:b6:42:21:c8:d9:f6:04:86:2d:c6:89:
01:f9:83:69:85:c9:da:9b:a3:b7:44:fd:ad:44:0b:
28:1c:c3:5f:5a:81:fa:19:b6:c1:56:db:44:61:7f:
54:2e:2d:ab:9d:f7:15:69:84:92:25:3e:83:d2:01:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C1:E8:42:4D:B0:60:6C:32:23:C4:9A:FA:04:4A:09:DC:1E:D9:4C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ucHoQk2wYGwyI8Sa-gRKCdwe2Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0/24
77.242.148.0/24
77.242.151.0/24
83.137.153.0/24
83.137.156.0/24
83.137.158.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.219.0/24
88.209.246.0/23
92.52.208.0/21
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:50:8c:f6:18:78:61:6a:ec:bd:9f:dc:b5:30:da:21:ab:16:
d3:8d:a4:75:16:ab:6d:f0:a3:61:da:20:e1:27:f0:99:5a:4a:
6c:3f:f8:53:ce:64:a4:da:54:09:ce:6e:ed:d3:59:9a:d7:dc:
94:33:0d:84:56:34:ae:c5:63:06:93:9d:cb:80:31:23:a7:be:
59:29:e1:37:86:c5:5d:72:08:cd:dd:72:0d:da:31:7b:01:ab:
24:df:51:d9:69:9f:82:c2:dc:08:5f:3b:df:cf:42:95:65:2e:
ad:c7:f5:24:9f:ca:74:87:9d:18:d6:df:60:73:35:de:b7:b9:
4c:24:d9:7a:a6:e2:96:ca:ad:fa:50:af:39:fb:88:27:7e:fa:
03:b9:48:c5:dd:bc:e0:99:a8:79:38:fd:a0:47:b2:7a:32:34:
ee:02:6a:70:03:46:9c:28:bb:59:dd:c7:f3:46:c8:2d:e6:c3:
13:c4:48:e4:a5:99:91:d9:f0:88:f3:d2:46:d0:61:ab:6d:3f:
b5:e2:12:49:44:5b:7e:db:82:de:7d:0a:6a:74:c0:c9:c1:f0:
ae:14:0e:ca:81:38:1e:4c:fa:dc:c8:80:c6:3f:28:00:62:10:
13:05:8f:d5:35:ae:88:b6:c4:f9:08:bb:20:39:20:7a:fb:00:
ed:3c:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:40 2025 by rpki-client