Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UayGEm6K5Y4gDsSr3tRj54E5xLY.roa
File: UayGEm6K5Y4gDsSr3tRj54E5xLY.roa (raw, json)
Hash identifier: pg7GkKfJ/NdQx9cbOhPXkfho0o8XRDR98ibMk2pJ9AY=
Subject key identifier: 51:AC:86:12:6E:8A:E5:8E:20:0E:C4:AB:DE:D4:63:E7:81:39:C4:B6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0195BF5E66F65EDE7938E6F40F1E74D70ECF
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UayGEm6K5Y4gDsSr3tRj54E5xLY.roa
Signing time: Sat 22 Mar 2025 19:39:49 +0000
ROA not before: Sat 22 Mar 2025 19:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11798
IP address blocks: 185.207.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bf:5e:66:f6:5e:de:79:38:e6:f4:0f:1e:74:d7:0e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 22 19:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51ac86126e8ae58e200ec4abded463e78139c4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fc:31:b7:07:3e:63:e8:42:83:0a:03:e9:44:
06:91:60:d2:ca:36:79:f2:db:9d:53:e4:dc:37:38:
88:70:98:2c:5c:65:57:90:2c:f7:b7:d5:3e:33:2b:
ed:bc:df:4a:58:d6:b0:3e:b1:56:f3:cd:28:dd:5a:
63:ae:d6:38:5c:65:67:4f:9b:ec:9d:3e:f6:8a:18:
b0:46:d4:72:47:3e:80:d2:77:ed:49:24:d7:c8:a4:
99:79:a0:e9:c7:0b:93:e5:83:6c:10:f8:30:0a:2d:
fa:d5:ae:54:d8:26:80:11:7f:de:d3:fa:7c:4f:f4:
f3:04:fc:d8:f2:52:ac:1f:02:fb:ed:5c:b4:e8:39:
c0:20:57:da:98:f7:30:93:7f:b7:a7:0f:92:28:a9:
cb:0f:c9:c5:f5:be:1d:f3:a2:9e:0e:d8:d5:dd:dd:
6e:df:95:f3:e5:60:5b:80:0e:79:1b:c2:f7:a5:06:
ae:85:1c:8f:b0:03:3b:c1:0c:b8:e5:c6:f2:24:ca:
bb:f0:d3:a5:9a:8d:7f:49:88:60:ba:c5:64:e6:32:
97:dd:9e:85:14:4a:d5:10:12:a6:61:1e:00:4b:47:
4a:a4:5e:07:49:b8:ec:cd:d7:09:48:31:65:87:13:
67:81:19:0c:33:a6:d9:21:77:7f:e1:e0:4b:e9:77:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AC:86:12:6E:8A:E5:8E:20:0E:C4:AB:DE:D4:63:E7:81:39:C4:B6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UayGEm6K5Y4gDsSr3tRj54E5xLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.135.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:a8:14:0b:93:f6:b2:c7:d9:fc:4b:ce:1f:eb:99:a2:a2:ac:
f8:ac:1a:7c:ba:38:65:10:1b:77:e7:e2:f0:91:a6:5b:80:e5:
b3:42:97:c4:de:a5:52:18:52:de:31:3c:0d:22:e5:40:d8:05:
74:e7:65:52:c2:6b:d4:9a:e5:7a:d2:cb:39:10:e1:35:5f:b3:
95:e5:42:7a:a5:46:7d:32:6e:82:86:c6:e2:39:04:29:82:da:
41:b2:10:f9:c0:1a:dc:7d:a0:1d:d9:06:f0:59:8c:da:46:cd:
ce:89:d0:1c:15:d6:13:00:bd:4f:5b:f7:cf:2a:4c:32:d0:63:
fa:00:39:7a:8b:5e:a1:36:d2:a8:61:98:4d:80:64:db:b9:fe:
cf:58:eb:50:8d:47:4e:b9:4f:61:55:6a:39:40:80:af:97:1c:
a1:fd:15:bc:88:7d:05:e1:0a:7a:7a:7d:f6:71:29:c4:85:1e:
5e:c2:b6:7d:bd:65:11:0b:ac:92:ad:8d:8a:bc:2b:51:34:00:
ef:17:3e:ba:16:a5:c1:90:86:d4:52:7a:e6:38:bc:45:5c:1f:
ab:e0:30:19:6a:78:15:cd:b2:99:da:43:e9:70:b0:20:be:18:
60:d6:f1:2e:6e:b9:df:60:65:e0:2d:6a:4b:7c:2e:68:0d:f2:
42:60:66:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:05:08 2025 by rpki-client