Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UPYXwSmB8guaL1ivkWyo3OlskwA.roa
File: UPYXwSmB8guaL1ivkWyo3OlskwA.roa (raw, json)
Hash identifier: yHm0UR4bv0yqCA6ZApWygojZ1qCBIUfc5+WeQFqDrXc=
Subject key identifier: 50:F6:17:C1:29:81:F2:0B:9A:2F:58:AF:91:6C:A8:DC:E9:6C:93:00
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195A9C75F6D838EC9A52E0A2B82D9246190
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UPYXwSmB8guaL1ivkWyo3OlskwA.roa
Signing time: Tue 18 Mar 2025 15:02:50 +0000
ROA not before: Tue 18 Mar 2025 15:02:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201133
IP address blocks: 85.217.222.0/24 maxlen: 24
85.217.223.0/24 maxlen: 24
93.123.10.0/24 maxlen: 24
93.123.73.0/24 maxlen: 24
93.123.73.207/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 19 Mar 2025 18:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:c7:5f:6d:83:8e:c9:a5:2e:0a:2b:82:d9:24:61:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 18 15:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50f617c12981f20b9a2f58af916ca8dce96c9300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:10:75:28:01:e8:a9:7c:b1:ec:9a:f6:e3:1e:
65:98:4c:fe:ae:f8:ea:4e:e9:1e:e2:0a:d9:e0:ed:
30:1c:fb:4a:f1:a9:c2:ca:e5:a7:c2:5f:23:67:3b:
9f:b5:9b:8f:7e:e1:40:8a:37:92:dc:a0:e2:a7:d5:
9d:32:3a:d9:27:bd:ff:13:c1:a4:ea:d1:a0:79:da:
27:85:87:29:d1:8f:ac:b0:be:2c:03:88:7f:54:d4:
36:7a:db:5a:6c:60:db:f4:20:18:fe:93:6d:56:67:
f1:67:a0:84:99:3c:55:9a:1b:3d:6e:2e:b4:2e:50:
db:29:7b:6a:6a:8e:ca:bb:c3:4e:8c:c2:59:33:51:
b6:5b:93:1a:f5:b2:33:e9:8c:28:6c:a5:d9:c5:a2:
9b:f4:c8:b5:14:ec:50:43:64:fd:1a:8b:31:33:b3:
57:2a:e3:72:a0:1e:71:88:16:81:1d:ff:16:6a:e4:
35:6b:e5:6a:90:a6:0c:e9:be:d2:f8:3a:3c:40:4e:
1b:3e:c8:12:86:21:d2:3f:3b:11:4f:57:fa:65:a5:
76:cd:67:17:f5:26:9e:29:12:8f:c1:bf:8c:6a:34:
ed:2c:b1:2b:3c:fe:87:7d:7b:08:91:78:92:0d:93:
0b:58:43:de:91:78:d3:81:89:c6:eb:94:9a:fa:e1:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F6:17:C1:29:81:F2:0B:9A:2F:58:AF:91:6C:A8:DC:E9:6C:93:00
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UPYXwSmB8guaL1ivkWyo3OlskwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.222.0/23
93.123.10.0/24
93.123.73.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:62:39:74:c3:0c:d2:c1:b1:20:cc:f2:77:11:82:e2:ab:3d:
25:69:24:1b:ec:ee:4a:85:ef:07:e7:d1:c5:60:4f:85:47:48:
9b:df:4f:e4:29:b2:1b:54:17:93:87:82:6e:d1:78:68:4d:1b:
38:a7:5b:0a:73:ef:c0:a4:17:f3:89:35:d7:76:45:99:f5:e5:
98:48:27:00:4a:44:39:ac:dd:0f:e1:7c:1e:80:db:a3:86:6a:
01:c6:5b:c9:87:26:47:26:4e:04:69:f0:b0:00:92:b5:0d:2b:
db:c4:8a:31:0b:dc:ba:a8:fa:3e:1e:e2:d1:c4:27:e1:66:b9:
99:d0:2c:24:ee:e1:53:b5:6e:71:9d:d3:59:37:cf:54:9a:23:
49:94:e1:2b:c3:2c:12:4a:15:c8:7c:84:1d:c3:95:92:dd:07:
ce:4b:c0:45:c9:66:b0:e5:7d:1e:3c:23:73:0b:aa:55:9b:e0:
68:eb:a8:e6:e4:9b:a3:f1:25:fe:7c:b3:72:f9:ad:fd:f1:42:
0d:9d:3f:4a:54:94:f2:a8:d6:c5:12:7f:1c:24:13:e6:c8:d6:
8c:a8:bf:07:a4:a3:f5:4e:0a:0b:d7:4c:ca:7c:a4:f7:12:4c:
36:ea:14:30:96:60:50:96:2b:64:f3:a8:91:a8:9a:9b:7d:8c:
6e:d8:9b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:39:48 2025 by rpki-client