Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/Ul4gIKTAK7L8lMA5Y0HgUKu2AtE.roa
File: Ul4gIKTAK7L8lMA5Y0HgUKu2AtE.roa (raw, json)
Hash identifier: z6dTbG6LcgEVfRkbs6Fn5P7gdLYeJyOyGPDA+8/9AYQ=
Subject key identifier: 52:5E:20:20:A4:C0:2B:B2:FC:94:C0:39:63:41:E0:50:AB:B6:02:D1
Certificate issuer: /CN=869ab33046862ab58405e5e927ddf41272dfc714
Certificate serial: 0190C01E5F3AD37CD6A0496E729EC425A1A1
Authority key identifier: 86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/Ul4gIKTAK7L8lMA5Y0HgUKu2AtE.roa
Signing time: Wed 17 Jul 2024 09:55:34 +0000
ROA not before: Wed 17 Jul 2024 09:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42274
IP address blocks: 91.192.12.0/22 maxlen: 22
193.111.56.0/22 maxlen: 22
193.111.56.0/24 maxlen: 24
2001:67c:36c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 17 Jul 2024 10:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:1e:5f:3a:d3:7c:d6:a0:49:6e:72:9e:c4:25:a1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869ab33046862ab58405e5e927ddf41272dfc714
Validity
Not Before: Jul 17 09:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=525e2020a4c02bb2fc94c0396341e050abb602d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:fa:e1:0e:a1:d6:5e:33:5c:9b:57:da:58:
b7:bb:9c:70:aa:83:cf:b9:eb:23:7c:ee:61:09:fc:
36:c6:6b:24:e5:83:34:3c:ee:a0:f5:a1:89:c0:d7:
8a:53:39:02:bc:2b:67:52:01:0d:e6:27:90:cc:8e:
37:c0:22:3c:65:89:6f:06:b3:ed:5b:0e:a8:6f:8e:
b5:be:41:18:7c:74:91:05:b7:1b:ef:aa:f5:a2:7e:
32:0d:5f:87:2f:93:17:c2:be:6e:1d:81:96:f1:3d:
8e:a0:fb:7b:aa:79:b0:02:08:a4:40:72:61:3e:f1:
ed:39:99:47:aa:95:af:4d:17:a6:a9:b8:26:70:1c:
7b:5f:f3:46:f4:36:7d:10:33:71:3a:63:84:98:ca:
71:88:f7:a2:32:30:8b:a7:1f:a4:41:68:b4:cc:ff:
f2:fc:50:53:69:3a:db:c2:9f:5f:96:4f:01:67:b6:
4a:f2:81:6c:ef:23:d1:b1:12:d5:ed:8f:b0:2b:3b:
d0:62:d4:ac:a7:f9:be:a5:28:c1:39:52:5b:1d:30:
25:19:04:04:d5:4d:bd:06:92:02:ce:b0:73:b6:f4:
1b:13:b1:30:a3:8b:2d:41:40:af:1c:8e:fe:2a:7d:
c7:72:bc:40:2a:aa:ac:b0:1d:6d:4f:07:b2:37:c7:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5E:20:20:A4:C0:2B:B2:FC:94:C0:39:63:41:E0:50:AB:B6:02:D1
X509v3 Authority Key Identifier:
keyid:86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/Ul4gIKTAK7L8lMA5Y0HgUKu2AtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.12.0/22
193.111.56.0/22
IPv6:
2001:67c:36c::/48
Signature Algorithm: sha256WithRSAEncryption
be:4c:80:8d:33:23:ba:a0:3d:76:f4:c7:56:54:a0:a6:e7:29:
87:c4:06:67:74:47:e1:ee:1c:41:38:b7:a2:73:64:97:5b:c7:
b9:fa:ef:e5:6d:51:18:07:7b:24:55:ab:07:a1:9c:2b:8d:77:
02:c5:4e:6d:56:c6:24:99:9e:bc:a7:de:00:e5:be:78:03:c2:
4e:e1:ae:ec:03:34:e1:4d:a4:5f:0c:90:b1:e3:04:6f:0c:8d:
9d:48:c4:4b:6d:b1:64:91:4a:f3:c3:e1:e4:70:35:4c:a1:65:
47:08:09:ba:2f:77:cd:7c:b2:02:4d:0f:1b:b6:7b:09:1f:3f:
e3:52:96:37:71:36:2d:25:85:91:b5:d8:7f:ab:42:d9:7c:5e:
4b:a8:b6:c5:b9:dc:26:62:7c:40:b8:65:42:68:6b:e5:a2:09:
73:15:b4:b3:16:39:df:72:cd:5d:92:68:37:b7:76:b9:21:e3:
fe:be:6a:ab:6d:2f:5a:f1:dd:57:d8:df:03:06:bf:0d:af:df:
f1:e8:94:8e:c2:4b:12:2a:c9:7a:ca:be:f7:53:43:31:ca:b4:
5e:d4:28:65:7b:33:89:1a:ff:a7:3c:37:51:43:19:75:1f:0e:
4d:fe:bf:42:ad:22:b8:e5:af:90:ef:58:1a:e7:e5:d4:80:3c:
25:42:53:e6
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZDAHl8603zWoElucp7EJaGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWFiMzMwNDY4NjJhYjU4NDA1ZTVlOTI3ZGRmNDEyNzJk
ZmM3MTQwHhcNMjQwNzE3MDk1NTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjVlMjAyMGE0YzAyYmIyZmM5NGMwMzk2MzQxZTA1MGFiYjYwMmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjD64Q6h1l4zXJtX2li3u5xwqoPP
uesjfO5hCfw2xmsk5YM0PO6g9aGJwNeKUzkCvCtnUgEN5ieQzI43wCI8ZYlvBrPt
Ww6ob461vkEYfHSRBbcb76r1on4yDV+HL5MXwr5uHYGW8T2OoPt7qnmwAgikQHJh
PvHtOZlHqpWvTRemqbgmcBx7X/NG9DZ9EDNxOmOEmMpxiPeiMjCLpx+kQWi0zP/y
/FBTaTrbwp9flk8BZ7ZK8oFs7yPRsRLV7Y+wKzvQYtSsp/m+pSjBOVJbHTAlGQQE
1U29BpICzrBztvQbE7Ewo4stQUCvHI7+Kn3HcrxAKqqssB1tTweyN8f8IQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFFJeICCkwCuy/JTAOWNB4FCrtgLRMB8GA1UdIwQY
MBaAFIaaszBGhiq1hAXl6Sfd9BJy38cUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBxek1FYUdLcldFQmVYcEo5MzBFbkxmeHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mOGU4ZTUtNjkyYi00MGE5LWIzMmYt
Mzk0YzQ3ZmY0NWFlLzEvVWw0Z0lLVEFLN0w4bE1BNVkwSGdVS3UyQXRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mOGU4ZTUtNjkyYi00MGE5LWIzMmYtMzk0YzQ3ZmY0NWFl
LzEvaHBxek1FYUdLcldFQmVYcEo5MzBFbkxmeHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCW8AMAwQC
wW84MA8EAgACMAkDBwAgAQZ8A2wwDQYJKoZIhvcNAQELBQADggEBAL5MgI0zI7qg
PXb0x1ZUoKbnKYfEBmd0R+HuHEE4t6JzZJdbx7n67+VtURgHeyRVqwehnCuNdwLF
Tm1WxiSZnryn3gDlvngDwk7hruwDNOFNpF8MkLHjBG8MjZ1IxEttsWSRSvPD4eRw
NUyhZUcICbovd818sgJNDxu2ewkfP+NSljdxNi0lhZG12H+rQtl8XkuotsW53CZi
fEC4ZUJoa+WiCXMVtLMWOd9yzV2SaDe3drkh4/6+aqttL1rx3VfY3wMGvw2v3/Ho
lI7CSxIqyXrKvvdTQzHKtF7UKGV7M4ka/6c8N1FDGXUfDk3+v0KtIrjlr5DvWBrn
5dSAPCVCU+Y=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:51:54 2025 by rpki-client