Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uLrB5HkwsObJ1Zq6nXgzVQNczpA.roa
File: uLrB5HkwsObJ1Zq6nXgzVQNczpA.roa (raw, json)
Hash identifier: S2vYF4WeU5iMEu44tA7w8y1+760qyqRa5t1PzkDRnz4=
Subject key identifier: B8:BA:C1:E4:79:30:B0:E6:C9:D5:9A:BA:9D:78:33:55:03:5C:CE:90
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195FAB2172ADFC3B561CCF404DD1241AA75
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uLrB5HkwsObJ1Zq6nXgzVQNczpA.roa
Signing time: Thu 03 Apr 2025 08:08:50 +0000
ROA not before: Thu 03 Apr 2025 08:08:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 31.169.124.0/22 maxlen: 24
37.139.128.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 07:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fa:b2:17:2a:df:c3:b5:61:cc:f4:04:dd:12:41:aa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 3 08:08:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8bac1e47930b0e6c9d59aba9d783355035cce90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:38:3f:27:0c:3a:ee:12:0f:ce:fb:05:a3:1e:
4f:96:30:0f:88:b0:96:53:76:d7:e0:ea:54:1b:94:
8b:97:9b:ed:84:ca:48:ff:d4:e9:b3:d8:08:be:7f:
c3:aa:23:ee:32:9c:c6:be:d0:7f:ad:86:83:aa:bb:
e3:2d:45:e5:15:1b:00:fc:08:b7:80:92:f8:54:e3:
fb:86:b2:97:58:73:85:7c:9f:b3:5c:47:7c:79:48:
4f:cb:ea:a0:d8:5a:c5:af:82:f9:ce:2f:da:e6:1f:
dd:f7:c2:13:e5:92:7d:ff:da:67:99:27:74:20:19:
6c:01:af:1e:27:9f:bc:6e:c6:e2:58:e9:72:a9:29:
af:ac:08:a7:06:2b:49:8f:b0:00:21:4d:a4:98:41:
e0:8f:ac:84:4a:58:47:b9:f5:44:40:1c:06:de:58:
fe:58:e2:4b:7c:5d:1d:93:20:b2:32:f9:a5:40:2b:
69:43:95:01:7d:83:04:f0:d2:ac:8b:25:b7:f7:91:
a8:ef:e2:59:a4:2b:e2:0a:f9:c5:ab:92:98:2c:9e:
e5:dc:b4:00:4a:14:db:ba:8b:6d:8c:48:d3:b6:96:
71:d3:98:3e:3f:1b:bc:78:db:05:01:45:02:4e:b4:
2f:f8:7a:51:8a:29:9f:cb:6c:46:f8:ef:7d:d8:94:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BA:C1:E4:79:30:B0:E6:C9:D5:9A:BA:9D:78:33:55:03:5C:CE:90
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uLrB5HkwsObJ1Zq6nXgzVQNczpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
37.139.128.0/24
45.88.66.0/24
45.128.234.0/23
79.110.63.0/24
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
91.92.21.0/24
94.156.236.0/24
109.206.240.0/24
109.206.243.0/24
171.22.19.0/24
171.22.30.0/24
185.207.14.0/23
185.218.138.0/24
185.246.220.0/23
185.252.179.0/24
193.47.60.0/23
193.148.56.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:8c:57:d6:b8:0b:87:ae:64:e1:35:24:4a:26:b3:53:28:ab:
66:1f:22:1a:da:7c:24:12:0a:ee:c5:fe:b9:50:01:6b:76:29:
24:30:9b:7b:3a:66:b6:a3:98:e3:84:f4:91:76:4d:fa:0e:7a:
da:35:a4:f5:1b:8b:ce:50:e8:53:83:0d:15:33:c9:e4:5e:48:
4e:a4:d2:d3:22:45:5f:7f:b3:be:59:c6:ae:91:b7:fc:30:c1:
50:91:34:10:28:8d:93:8a:0b:93:b7:aa:01:a1:82:96:c1:7b:
73:40:68:ad:ae:b5:dc:29:fa:67:90:b3:97:fa:65:db:e6:2b:
21:68:ef:9a:66:f5:a4:5c:2c:03:e6:70:42:e8:ea:d8:2d:1f:
75:0e:da:dc:58:ef:cb:df:e8:a3:70:1c:61:90:89:23:58:77:
a8:97:6e:94:a2:df:73:46:6f:7c:f8:13:f8:ea:7e:77:08:d0:
53:31:80:b6:5a:13:95:99:f4:04:b4:7e:f8:94:1a:a5:3e:3c:
7f:60:11:7c:e5:6e:ca:fb:05:22:b0:93:50:0a:39:0c:3f:1c:
af:cd:81:8a:da:b6:95:8e:bb:6e:f5:0f:84:a0:65:ee:1c:27:
63:3a:f8:ec:60:8c:d8:4c:9a:26:cc:21:d6:21:36:5b:74:e0:
93:ca:e5:ea
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAZX6shcq38O1Ycz0BN0SQap1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNDAzMDgwODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGJhYzFlNDc5MzBiMGU2YzlkNTlhYmE5ZDc4MzM1NTAzNWNjZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDg/Jww67hIPzvsFox5PljAPiLCW
U3bX4OpUG5SLl5vthMpI/9Tps9gIvn/DqiPuMpzGvtB/rYaDqrvjLUXlFRsA/Ai3
gJL4VOP7hrKXWHOFfJ+zXEd8eUhPy+qg2FrFr4L5zi/a5h/d98IT5ZJ9/9pnmSd0
IBlsAa8eJ5+8bsbiWOlyqSmvrAinBitJj7AAIU2kmEHgj6yESlhHufVEQBwG3lj+
WOJLfF0dkyCyMvmlQCtpQ5UBfYME8NKsiyW395Go7+JZpCviCvnFq5KYLJ7l3LQA
ShTbuottjEjTtpZx05g+Pxu8eNsFAUUCTrQv+HpRiimfy2xG+O992JQ9iwIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFLi6weR5MLDmydWaup14M1UDXM6QMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdUxyQjVIa3dzT2JKMVpxNm5YZ3pWUU5jenBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBrwQCAAEwgagDBAIf
qXwDBAAli4ADBAAtWEIDBAEtgOoDBABPbj8DBABVHywDBABVHy4DBABV0IgDBABX
eFwDBABXeGwDBABXeMQDBABXeM0DBABXeNgDBABXeNsDBABXeN4DBABXeS8DBABb
XBUDBABenOwDBABtzvADBABtzvMDBACrFhMDBACrFh4DBAG5zw4DBAC52ooDBAG5
9twDBAC5/LMDBAHBLzwDBALBlDgwDQYJKoZIhvcNAQELBQADggEBABuMV9a4C4eu
ZOE1JEoms1Moq2YfIhrafCQSCu7F/rlQAWt2KSQwm3s6ZrajmOOE9JF2TfoOeto1
pPUbi85Q6FODDRUzyeReSE6k0tMiRV9/s75Zxq6Rt/wwwVCRNBAojZOKC5O3qgGh
gpbBe3NAaK2utdwp+meQs5f6ZdvmKyFo75pm9aRcLAPmcELo6tgtH3UO2txY78vf
6KNwHGGQiSNYd6iXbpSi33NGb3z4E/jqfncI0FMxgLZaE5WZ9AS0fviUGqU+PH9g
EXzlbsr7BSKwk1AKOQw/HK/NgYratpWOu271D4SgZe4cJ2M6+OxgjNhMmibMIdYh
Nlt04JPK5eo=
-----END CERTIFICATE-----
Generated at Thu Jun 19 14:29:57 2025 by rpki-client