Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1UGWHKsDVMpITP52UF5XhX00CAU.roa
File: 1UGWHKsDVMpITP52UF5XhX00CAU.roa (raw, json)
Hash identifier: +GL5cQrVI7mROSNbWSyzCL49wCGTgLnQcOAnVcICIqQ=
Subject key identifier: D5:41:96:1C:AB:03:54:CA:48:4C:FE:76:50:5E:57:85:7D:34:08:05
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFA21E3AEB76A04550833406345568
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1UGWHKsDVMpITP52UF5XhX00CAU.roa
Signing time: Tue 02 Jan 2024 06:32:28 +0000
ROA not before: Tue 02 Jan 2024 06:32:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 185.245.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 03:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a2:1e:3a:eb:76:a0:45:50:83:34:06:34:55:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d541961cab0354ca484cfe76505e57857d340805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:4b:e1:8a:5a:2a:e9:09:8e:9a:43:12:89:
f1:f2:74:79:10:1e:50:3b:41:a2:0d:31:5d:09:6b:
1c:70:79:e1:49:cb:ba:7f:e9:cc:d9:2c:7d:d1:8c:
11:f5:24:1f:39:e9:3d:02:24:54:e9:fb:f7:51:e5:
27:c8:3e:c0:3a:11:fb:9d:55:a6:43:c2:26:88:2f:
c2:87:6f:13:35:2b:38:b1:f7:c8:27:b9:37:3e:fc:
6f:82:05:24:1e:c7:0d:93:95:e8:69:e5:89:e3:fa:
71:2d:5d:0b:4d:cc:8c:13:81:6b:76:1f:02:01:28:
0e:92:5d:49:80:f4:ef:02:ff:dd:b4:49:ac:f7:40:
b0:26:a6:4b:7f:c3:f5:41:00:d5:8f:34:e4:b6:ec:
6a:f8:27:7b:0a:a2:75:f3:15:95:2c:2f:14:8d:3b:
53:ef:e1:24:75:a4:d9:ed:b5:18:c9:fb:7c:37:43:
2e:7e:7d:5c:4c:5b:8c:9a:4e:f2:54:b8:ed:44:f0:
73:2e:97:47:b5:ce:0c:45:c9:2c:b9:50:69:01:ac:
15:7a:5b:be:89:0a:1d:26:39:bf:29:4c:ff:37:3f:
22:4e:f6:e1:42:84:21:bf:d3:69:a0:50:2c:2f:0c:
9b:ac:79:ea:27:f8:8f:aa:0f:56:e9:4b:d2:3f:3e:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:41:96:1C:AB:03:54:CA:48:4C:FE:76:50:5E:57:85:7D:34:08:05
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1UGWHKsDVMpITP52UF5XhX00CAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:cb:6d:0b:e6:df:e9:c3:41:83:b6:16:7b:59:7b:4f:3e:5b:
b9:f4:ef:d8:49:e1:b4:7c:ec:65:30:9f:c1:36:af:e2:49:dc:
53:33:3f:7e:b4:ab:37:b4:47:e8:9a:06:c0:70:90:dd:07:bd:
1f:ab:ac:0b:84:03:57:f8:8d:a8:d6:85:8d:fb:7e:4e:07:9e:
a4:7c:5a:c4:9f:44:8a:e5:ce:04:5a:41:1c:6f:2e:4c:d6:36:
de:a5:50:cb:6e:cd:ca:3f:61:80:1a:04:a0:a2:1f:38:02:67:
e4:7e:43:68:73:67:d1:27:55:e6:35:76:af:15:c5:73:0b:35:
ff:a5:94:ae:b7:66:63:0b:ac:bf:6c:10:1d:57:1d:08:af:93:
8f:d5:c9:51:88:57:51:7d:a3:1a:1b:be:d6:5f:01:a4:54:bc:
62:00:a8:02:15:b1:5d:f6:ed:fa:84:d0:f3:9f:77:eb:2e:ca:
47:2f:c7:f3:53:11:29:bb:64:83:0f:b9:57:2d:da:d1:d1:29:
c2:e7:4c:0a:85:44:dd:d5:9f:ef:f0:a1:8a:cf:5c:0c:00:fe:
51:79:a0:4f:e8:d9:eb:9d:8c:08:85:87:36:b5:ad:8b:7e:06:
48:23:ab:b5:6f:2e:93:8e:9f:2e:94:b1:28:8e:e1:fc:0f:0e:
33:df:1c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:29 2025 by rpki-client