Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/uEDwEv2FCwJrHDMmJA66S9Us9kM.roa
File: uEDwEv2FCwJrHDMmJA66S9Us9kM.roa (raw, json)
Hash identifier: aTFockufZTsqvAz+rzTQSmwU1PxNAm43dmoAckTdeN8=
Subject key identifier: B8:40:F0:12:FD:85:0B:02:6B:1C:33:26:24:0E:BA:4B:D5:2C:F6:43
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019766C15E3C2AC9FCE717B5A9255BD1A153
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/uEDwEv2FCwJrHDMmJA66S9Us9kM.roa
Signing time: Fri 13 Jun 2025 00:47:17 +0000
ROA not before: Fri 13 Jun 2025 00:47:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.228.0/22 maxlen: 24
212.116.228.0/24 maxlen: 24
212.116.229.0/24 maxlen: 24
212.116.236.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.244.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Jun 2025 17:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:c1:5e:3c:2a:c9:fc:e7:17:b5:a9:25:5b:d1:a1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jun 13 00:47:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b840f012fd850b026b1c3326240eba4bd52cf643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c2:f3:3c:13:ce:3d:fb:2a:9e:d6:8f:36:81:
df:96:be:67:5e:32:7f:7a:3e:39:b7:27:d4:0c:b3:
09:91:61:69:58:8a:a2:07:d9:7b:58:50:cc:06:45:
fc:b4:e1:82:86:28:e4:11:0c:6a:fc:2d:bb:e2:f1:
46:04:86:50:0b:02:e9:09:30:ef:38:ae:c2:ad:5b:
72:ca:cf:72:3c:90:09:9e:54:35:96:2c:11:fb:f9:
49:19:57:3d:1d:d8:06:5f:0c:63:83:a3:8c:75:48:
96:28:16:a2:83:a2:88:13:63:ea:18:d7:c3:49:c3:
c5:0d:2b:d6:42:e4:ad:27:70:0f:f2:70:27:74:59:
b5:82:77:38:51:40:00:63:be:92:86:8f:da:17:7b:
c2:76:e0:90:43:60:29:3c:d0:71:48:de:e9:e8:c3:
33:d2:e6:10:e3:c1:4e:b1:5d:62:f5:eb:bc:53:ae:
d6:8e:9e:09:ad:d0:18:4a:ec:78:db:54:e4:87:97:
0a:11:df:3a:b1:d2:e3:7a:38:1d:a6:f4:ef:c7:6d:
19:d7:da:db:93:e6:fc:4a:0f:8a:73:93:30:ae:2f:
94:c1:a1:e3:c2:ed:61:fd:d4:58:39:db:6e:8b:c2:
a6:9a:ce:04:d6:02:9f:5c:da:60:4e:52:c2:e1:a2:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:40:F0:12:FD:85:0B:02:6B:1C:33:26:24:0E:BA:4B:D5:2C:F6:43
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/uEDwEv2FCwJrHDMmJA66S9Us9kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0-212.116.231.255
212.116.236.0/24
212.116.238.0/23
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:5b:30:31:be:c5:09:02:12:8f:e1:a4:da:af:43:04:22:39:
c6:d8:d4:10:71:33:a4:ff:2f:6d:24:bb:b4:5c:1b:8d:36:05:
93:a5:fb:d4:7d:e5:c4:5a:82:d8:89:30:fb:5b:dd:8d:6d:a1:
70:af:f9:2c:e4:c4:da:93:08:71:43:3d:fd:d7:b1:57:90:fc:
2b:cb:76:4e:fc:d5:61:fa:79:8e:b0:c8:80:cc:58:b6:16:6d:
06:2d:eb:1f:d0:a1:32:24:d5:1f:33:0c:a8:f0:e5:e8:ac:d5:
b0:46:b8:ff:d3:33:fa:55:67:b0:c3:3a:c1:07:74:02:8f:86:
2d:86:5e:df:f6:26:60:04:c6:26:2a:cb:55:74:27:25:dc:45:
47:66:58:c0:de:73:44:9f:8b:a1:77:21:5e:24:31:9e:f2:59:
90:33:e5:69:de:cc:bc:5d:e5:95:cf:e4:96:de:47:cd:bc:73:
46:8c:75:98:a3:ed:74:6a:b1:25:3c:de:be:3c:87:7b:c1:84:
0a:30:41:5b:97:0f:7c:e3:95:dd:e4:32:92:e2:c8:d5:7d:7d:
46:66:d6:55:88:1d:76:b3:85:2b:ab:d1:4d:5c:37:ba:07:76:
8a:80:4a:ef:72:4c:c4:c5:ae:2c:c2:bd:ae:07:25:c1:bb:98:
14:d8:2f:02
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZdmwV48Ksn85xe1qSVb0aFTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjUwNjEzMDA0NzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODQwZjAxMmZkODUwYjAyNmIxYzMzMjYyNDBlYmE0YmQ1MmNmNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcLzPBPOPfsqntaPNoHflr5nXjJ/
ej45tyfUDLMJkWFpWIqiB9l7WFDMBkX8tOGChijkEQxq/C274vFGBIZQCwLpCTDv
OK7CrVtyys9yPJAJnlQ1liwR+/lJGVc9HdgGXwxjg6OMdUiWKBaig6KIE2PqGNfD
ScPFDSvWQuStJ3AP8nAndFm1gnc4UUAAY76Sho/aF3vCduCQQ2ApPNBxSN7p6MMz
0uYQ48FOsV1i9eu8U67Wjp4JrdAYSux421Tkh5cKEd86sdLjejgdpvTvx20Z19rb
k+b8Sg+Kc5Mwri+UwaHjwu1h/dRYOdtui8Kmms4E1gKfXNpgTlLC4aLZkQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFLhA8BL9hQsCaxwzJiQOukvVLPZDMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvdUVEd0V2MkZDd0pySERNbUpBNjZTOVVzOWtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAHUdOID
BAPUdOADBADUdOwDBAHUdO4DBADUdPQDBADUdPYwDQYJKoZIhvcNAQELBQADggEB
AM5bMDG+xQkCEo/hpNqvQwQiOcbY1BBxM6T/L20ku7RcG402BZOl+9R95cRagtiJ
MPtb3Y1toXCv+SzkxNqTCHFDPf3XsVeQ/CvLdk781WH6eY6wyIDMWLYWbQYt6x/Q
oTIk1R8zDKjw5eis1bBGuP/TM/pVZ7DDOsEHdAKPhi2GXt/2JmAExiYqy1V0JyXc
RUdmWMDec0Sfi6F3IV4kMZ7yWZAz5WnezLxd5ZXP5JbeR828c0aMdZij7XRqsSU8
3r48h3vBhAowQVuXD3zjld3kMpLiyNV9fUZm1lWIHXazhSur0U1cN7oHdoqASu9y
TMTFrizCva4HJcG7mBTYLwI=
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:10:46 2025 by rpki-client