Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/UzCEXgENKXg1J2_LgQeRiLUZ8NI.roa
File: UzCEXgENKXg1J2_LgQeRiLUZ8NI.roa (raw, json)
Hash identifier: qkfCGbW+jlUO/2NFWD8LEylQOOWHnG5X8wYx/EZVpHQ=
Subject key identifier: 53:30:84:5E:01:0D:29:78:35:27:6F:CB:81:07:91:88:B5:19:F0:D2
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 0196ED0688956C9FFAE061D22BB32A571453
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/UzCEXgENKXg1J2_LgQeRiLUZ8NI.roa
Signing time: Tue 20 May 2025 09:29:10 +0000
ROA not before: Tue 20 May 2025 09:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.37.200.0/22 maxlen: 24
185.37.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 11:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:06:88:95:6c:9f:fa:e0:61:d2:2b:b3:2a:57:14:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: May 20 09:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5330845e010d297835276fcb81079188b519f0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:38:f6:b3:8f:03:23:aa:bd:69:c1:48:54:
4f:4d:fd:93:60:6b:ed:55:46:3b:ad:68:f2:f8:8f:
17:cc:d9:42:56:4d:9f:0c:1b:2e:5c:71:f8:50:2c:
20:c3:aa:f0:eb:d1:3c:58:d5:61:80:95:21:bc:ef:
4b:3d:03:ff:67:d9:06:a7:36:d9:ac:6f:64:5e:6d:
a0:ae:cb:65:50:fc:b2:da:6f:19:64:6b:83:d2:4c:
9a:52:e3:09:dd:72:15:32:48:34:8f:23:36:f0:b0:
d7:c8:f9:81:f2:30:79:a1:fa:e8:a4:96:0f:3b:8f:
7d:18:0e:f6:e8:ca:d4:1a:02:11:ba:25:ec:04:a1:
50:37:5a:f1:b4:cb:67:a7:62:af:ef:53:ee:40:72:
cf:c7:6c:06:41:eb:36:9e:ca:ea:14:14:57:63:73:
3a:d0:9a:02:2a:81:8e:7a:ca:3f:34:79:10:39:1b:
5b:fb:bc:0b:45:e7:dc:fb:6b:8b:47:da:b8:f4:ef:
e6:8d:d6:85:f6:13:93:98:68:a1:ae:5c:f2:dc:ee:
b5:a6:9f:8e:e9:c2:97:e6:d2:85:4f:24:ac:90:42:
fc:28:43:d5:49:c2:d3:02:03:f4:e5:9e:5c:69:1c:
0c:fc:17:9d:33:e9:64:12:9f:11:6b:63:a4:2a:76:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:30:84:5E:01:0D:29:78:35:27:6F:CB:81:07:91:88:B5:19:F0:D2
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/UzCEXgENKXg1J2_LgQeRiLUZ8NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.200.0/22
Signature Algorithm: sha256WithRSAEncryption
18:c6:2a:40:d5:67:1c:24:91:41:26:e2:75:a2:9d:26:22:89:
ec:65:05:9a:54:dd:db:3f:d7:68:c1:e6:d2:eb:ab:7b:d5:b2:
26:cb:9a:19:db:2e:39:ba:84:cf:c0:bd:2d:de:9e:40:ae:dc:
33:2a:ac:40:3c:8d:6d:52:53:34:46:c8:db:b8:2b:23:6c:c4:
59:4f:2b:2f:c1:8f:b1:d7:2a:b3:48:79:00:ff:f2:82:20:7f:
d2:aa:e6:f0:c4:b9:e6:71:16:ab:a1:f7:0d:b2:63:53:ba:04:
d7:75:ca:79:92:a8:56:52:bc:5a:f7:5a:6d:2d:af:6b:3c:0d:
9d:40:d0:42:09:0a:c1:3e:f0:90:a0:c4:cf:25:1a:7f:d1:1b:
ee:12:8c:5b:27:6e:7e:9d:8b:66:76:f8:b8:1a:da:cd:45:9e:
24:0a:08:fd:45:a3:83:b2:55:1d:43:90:ca:c3:4d:fb:f2:37:
4b:36:84:c4:b1:c9:69:78:1d:9c:81:0c:0d:4c:a5:c1:a6:2e:
81:a9:4e:2d:db:9c:f5:b3:de:24:b6:cf:a0:b6:eb:26:71:72:
82:f4:79:3f:6d:da:e2:1c:71:79:54:54:c9:20:80:20:ae:58:
a5:af:8c:f0:b8:d5:dd:00:0f:3f:e5:ca:08:96:6c:be:f3:5a:
e3:45:b6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:18:02 2025 by rpki-client