Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UucwEUNW-m574jnzbw6w965_dBk.roa
File: UucwEUNW-m574jnzbw6w965_dBk.roa (raw, json)
Hash identifier: nry9jnGG02ImrxKdtSduK4B/pxqAwcW99RfP2JijrxU=
Subject key identifier: 52:E7:30:11:43:56:FA:6E:7B:E2:39:F3:6F:0E:B0:F7:AE:7F:74:19
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01946EAE8BD7D8F5D18EA6B6EA2D24583744
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UucwEUNW-m574jnzbw6w965_dBk.roa
Signing time: Thu 16 Jan 2025 10:35:20 +0000
ROA not before: Thu 16 Jan 2025 10:35:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 185.199.54.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 09:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:ae:8b:d7:d8:f5:d1:8e:a6:b6:ea:2d:24:58:37:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 16 10:35:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52e730114356fa6e7be239f36f0eb0f7ae7f7419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:84:b3:2d:49:0d:0a:6d:a2:bf:df:a1:40:
a1:cd:87:80:75:ec:82:22:ff:2a:e2:82:30:3e:4c:
a6:ae:f2:13:cd:ee:38:99:9f:39:43:91:0a:17:79:
e8:77:3f:d5:fa:01:da:9b:94:a7:d8:0b:ba:e3:5a:
33:5b:bf:52:55:2f:ff:f4:1a:7b:c0:48:01:6d:8c:
56:1a:f4:8f:e1:f4:05:a9:8d:cf:06:22:b8:9b:e0:
b5:50:e9:d9:d4:1c:e6:85:a0:76:fb:b8:2f:fa:96:
a9:17:bf:53:d3:b0:cd:6a:c2:30:36:3d:72:11:2f:
d5:a8:ff:55:ae:3d:24:e8:a3:ed:22:73:e2:3b:e4:
ae:d6:9c:49:60:c4:56:bb:65:7b:d9:f3:c9:79:da:
39:d2:82:92:78:01:84:b9:16:af:57:fe:5c:54:ca:
bc:30:22:fe:73:b6:5c:e6:4a:f2:3b:bf:3a:5e:2b:
e0:6d:12:71:45:f6:d8:e3:4f:0b:10:2f:2d:cb:cd:
f8:9b:ad:86:3e:22:7e:b6:f5:26:b2:3e:35:8e:fc:
ec:32:26:a5:58:79:d4:6d:c3:77:c8:0f:c9:f0:e9:
f6:fe:f9:a4:08:8d:aa:64:72:a7:ca:35:bb:2f:cb:
0d:59:cd:fa:af:3e:99:1c:57:4a:25:ad:c8:90:c4:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E7:30:11:43:56:FA:6E:7B:E2:39:F3:6F:0E:B0:F7:AE:7F:74:19
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UucwEUNW-m574jnzbw6w965_dBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.54.0/24
185.206.250.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1c:7e:3b:f9:56:42:6d:b0:1d:39:da:db:6d:12:dc:95:4d:
39:f6:f8:01:c4:1a:b9:01:77:a5:43:ae:32:19:66:1d:4e:16:
4e:e3:fc:83:96:e9:e1:6f:a6:1b:a2:48:48:ac:7e:4d:54:76:
58:b1:92:3c:a4:fc:fd:34:1f:ee:07:3d:bb:a9:14:7a:d4:19:
e4:6a:f9:44:8a:03:87:ef:b0:8b:18:35:e7:20:f1:a0:7c:02:
a5:18:ac:f5:e7:b5:f9:97:5a:93:9b:3f:42:5a:fe:48:25:07:
f5:31:3a:3d:b7:80:49:72:4a:31:9f:bf:39:9f:54:cf:64:c7:
3f:ad:8a:14:fb:1e:29:cb:46:fe:3b:9a:1d:3e:bd:6a:45:98:
0b:33:08:8f:89:43:3e:36:51:02:c0:0b:f2:5a:e2:10:f0:e9:
af:5a:11:9c:9b:e4:d4:59:00:2e:a5:b9:a7:7e:fa:47:4c:90:
6b:6f:5d:b9:25:ad:22:a4:72:aa:b5:32:c0:b9:95:e4:be:3c:
9e:21:f5:9c:ba:9e:12:98:2c:15:24:71:f3:95:d8:d3:dc:20:
c5:4b:39:d7:76:fa:bc:6a:cd:fc:71:3a:09:b9:ca:f8:ed:c4:
96:eb:35:44:49:c2:3b:72:59:b8:13:00:bf:b2:ba:53:28:54:
6f:07:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:24:58 2025 by rpki-client