Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UBR_WLMLRTXG2XmumtKELi13N-0.roa
File: UBR_WLMLRTXG2XmumtKELi13N-0.roa (raw, json)
Hash identifier: /ls64xAqDAUR8B+/M4Kq7IEaGRaFyqMPaNTHTFM1ca0=
Subject key identifier: 50:14:7F:58:B3:0B:45:35:C6:D9:79:AE:9A:D2:84:2E:2D:77:37:ED
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0192010886EEE86FBDCC8C5F40328A2C0683
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UBR_WLMLRTXG2XmumtKELi13N-0.roa
Signing time: Tue 17 Sep 2024 17:29:48 +0000
ROA not before: Tue 17 Sep 2024 17:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 14.102.231.0/24 maxlen: 24
85.208.10.0/23 maxlen: 23
194.36.34.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 18 Sep 2024 18:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:01:08:86:ee:e8:6f:bd:cc:8c:5f:40:32:8a:2c:06:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 17 17:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50147f58b30b4535c6d979ae9ad2842e2d7737ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:f7:9c:88:51:3b:af:37:a3:6b:0a:02:94:
89:e7:31:40:b7:bf:8a:5b:2a:2d:1b:7e:d2:61:a9:
58:19:19:69:c0:bf:e7:54:e2:11:1e:97:5d:3e:a4:
ee:fb:c7:04:93:10:b3:e8:8e:72:fd:5a:01:27:63:
f0:16:33:3c:b0:5e:f1:65:e0:79:ea:05:0d:f9:0c:
65:fb:24:bf:78:13:25:ed:fa:0a:d7:a1:fa:10:f3:
1b:ca:85:f7:d8:e5:77:13:ee:4b:99:24:b5:32:bf:
a8:e9:af:d0:8c:8e:28:47:4c:2e:f4:91:c4:92:02:
4e:fe:7f:7f:ed:0b:f8:f2:a9:07:2f:fe:1a:19:34:
78:43:20:85:31:e9:17:16:1c:f1:12:cd:5b:61:07:
59:8c:1d:21:6c:0d:cd:c9:1c:b0:ac:44:0d:a1:df:
b7:bc:3b:1c:d7:7a:03:4f:75:55:80:34:6c:58:61:
f2:11:b1:c3:db:a6:77:35:25:fd:71:4e:86:05:9d:
4b:87:b0:04:59:13:64:69:b4:b2:19:3c:13:ee:ad:
8f:6f:67:37:1b:1c:48:7a:06:4c:5d:95:c2:78:cb:
6a:a6:29:61:77:c5:f5:82:a7:17:8a:c7:7d:95:b9:
0f:7d:5f:63:a7:dc:4c:27:c3:d5:d9:87:8e:2d:46:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:14:7F:58:B3:0B:45:35:C6:D9:79:AE:9A:D2:84:2E:2D:77:37:ED
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UBR_WLMLRTXG2XmumtKELi13N-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
85.208.10.0/23
194.36.34.0/23
Signature Algorithm: sha256WithRSAEncryption
08:09:39:2e:45:a9:9c:3b:eb:ef:21:81:76:1a:c5:95:20:60:
1e:d7:22:88:64:fb:8c:0d:df:c4:19:74:dd:8c:64:75:72:7e:
2b:9e:b8:2b:ca:1d:52:fa:21:9c:04:7a:d8:f9:b6:cf:ae:71:
03:28:fb:68:38:ea:7b:3a:6e:5d:32:a5:9b:81:4d:2b:17:c6:
a1:73:78:0a:37:88:76:38:7c:f8:1e:6a:54:ee:fe:f0:c4:62:
f2:20:6e:c1:81:bb:50:71:e9:21:f7:d9:a9:5f:7d:63:ad:e4:
b0:a4:32:3f:8d:25:d9:d4:57:9d:fa:67:f9:f5:c3:f4:4b:87:
7b:7b:ab:4e:1b:2e:8e:15:be:18:31:3a:60:c8:6c:25:cc:3d:
20:cb:52:f5:06:b1:36:75:ae:41:7d:12:57:f2:78:82:67:37:
f0:a1:87:92:73:d9:bb:f6:3d:82:9e:55:a6:11:6c:de:31:8f:
70:b0:07:76:6d:2f:ad:d4:46:56:5f:c1:21:39:65:50:de:b0:
f4:1f:d9:9b:ab:fc:10:ec:3c:b8:13:86:67:cc:9a:2e:2b:e8:
d3:6b:3c:9f:5b:d9:32:5c:2b:27:67:5b:4f:d7:56:e4:79:69:
a8:23:04:56:ac:ce:64:0a:f4:99:29:37:96:bd:56:54:19:f9:
1d:a7:a4:0d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZIBCIbu6G+9zIxfQDKKLAaDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQwOTE3MTcyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDE0N2Y1OGIzMGI0NTM1YzZkOTc5YWU5YWQyODQyZTJkNzczN2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykT3nIhRO683o2sKApSJ5zFAt7+K
WyotG37SYalYGRlpwL/nVOIRHpddPqTu+8cEkxCz6I5y/VoBJ2PwFjM8sF7xZeB5
6gUN+Qxl+yS/eBMl7foK16H6EPMbyoX32OV3E+5LmSS1Mr+o6a/QjI4oR0wu9JHE
kgJO/n9/7Qv48qkHL/4aGTR4QyCFMekXFhzxEs1bYQdZjB0hbA3NyRywrEQNod+3
vDsc13oDT3VVgDRsWGHyEbHD26Z3NSX9cU6GBZ1Lh7AEWRNkabSyGTwT7q2Pb2c3
GxxIegZMXZXCeMtqpilhd8X1gqcXisd9lbkPfV9jp9xMJ8PV2YeOLUarbwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFAUf1izC0U1xtl5rprShC4tdzftMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvVUJSX1dMTUxSVFhHMlhtdW10S0VMaTEzTi0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQADmbnAwQB
VdAKAwQBwiQiMA0GCSqGSIb3DQEBCwUAA4IBAQAICTkuRamcO+vvIYF2GsWVIGAe
1yKIZPuMDd/EGXTdjGR1cn4rnrgryh1S+iGcBHrY+bbPrnEDKPtoOOp7Om5dMqWb
gU0rF8ahc3gKN4h2OHz4HmpU7v7wxGLyIG7BgbtQcekh99mpX31jreSwpDI/jSXZ
1Fed+mf59cP0S4d7e6tOGy6OFb4YMTpgyGwlzD0gy1L1BrE2da5BfRJX8niCZzfw
oYeSc9m79j2CnlWmEWzeMY9wsAd2bS+t1EZWX8EhOWVQ3rD0H9mbq/wQ7Dy4E4Zn
zJouK+jTazyfW9kyXCsnZ1tP11bkeWmoIwRWrM5kCvSZKTeWvVZUGfkdp6QN
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:16 2025 by rpki-client