Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/UufWwbjm0YllC7mUELi4tOitXtM.roa
File: UufWwbjm0YllC7mUELi4tOitXtM.roa (raw, json)
Hash identifier: 1gouT45+d4wgcbhWoRzn5V42QOVDSxn7dGJgMtjrf+M=
Subject key identifier: 52:E7:D6:C1:B8:E6:D1:89:65:0B:B9:94:10:B8:B8:B4:E8:AD:5E:D3
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 019532874CF978B0F6EEC40EC7439A96EE1B
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/UufWwbjm0YllC7mUELi4tOitXtM.roa
Signing time: Sun 23 Feb 2025 11:18:02 +0000
ROA not before: Sun 23 Feb 2025 11:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 185.84.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 16:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:32:87:4c:f9:78:b0:f6:ee:c4:0e:c7:43:9a:96:ee:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Feb 23 11:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52e7d6c1b8e6d189650bb99410b8b8b4e8ad5ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:fd:80:a4:b8:dd:81:9d:c6:07:1c:a0:42:
7b:44:eb:8c:06:77:b6:4b:46:b6:a7:05:8b:32:df:
b1:a8:ee:cf:6d:8e:c0:9f:26:b9:ab:02:0e:99:54:
20:81:b9:89:d8:db:b8:1a:67:96:7c:e8:66:5c:de:
af:e4:9f:10:3f:03:67:73:34:29:b0:91:6b:c0:d3:
0b:3a:78:83:54:2b:9b:87:6c:6a:0b:0c:01:e2:82:
1d:c7:72:8b:d0:ce:e0:d2:2d:63:fc:14:4a:79:42:
d3:39:db:03:8e:a5:9d:6a:29:a6:2a:d8:e6:ee:02:
a2:2d:99:0a:1b:76:9e:a0:08:84:5b:f7:f6:11:29:
3d:18:7e:a1:04:b3:4a:dd:b1:d7:08:2d:5e:1c:ab:
63:dd:dc:bc:e4:03:5e:d2:87:e5:49:24:cc:0d:87:
f9:d3:b4:f8:a4:b5:e5:ca:b8:ab:2f:32:74:7b:77:
a3:5e:55:a8:33:f0:66:23:4c:81:0f:58:2c:7e:19:
c9:55:7a:12:3d:05:b0:12:30:60:88:88:03:4e:8c:
6d:c6:74:98:0a:8b:a2:fb:68:f7:00:a0:2d:d8:01:
d6:90:b5:72:66:e6:dc:13:c9:e1:18:c4:a5:42:1a:
d8:fe:69:99:25:a9:41:97:b8:9c:c3:14:95:66:e2:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E7:D6:C1:B8:E6:D1:89:65:0B:B9:94:10:B8:B8:B4:E8:AD:5E:D3
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/UufWwbjm0YllC7mUELi4tOitXtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.159.0/24
Signature Algorithm: sha256WithRSAEncryption
37:cc:22:8a:59:74:ee:b7:bb:c3:be:9f:53:2c:16:76:10:7a:
80:8a:cc:db:da:b4:53:21:42:53:8b:65:b2:a0:5b:9a:e9:0b:
53:10:43:8c:d6:ea:8d:e1:c4:df:d1:d4:21:c2:f2:16:22:54:
64:74:49:b6:dc:ee:a0:64:42:d9:4c:56:fc:48:38:f9:d3:d2:
87:8d:2b:2e:5a:b4:2a:3f:3f:c5:14:f8:7b:3e:8f:c1:7a:32:
82:4c:02:23:3d:a3:11:df:94:63:b8:fe:93:f4:c8:83:2f:e0:
1c:48:1b:10:a5:17:a6:e8:bb:ac:dd:39:be:80:3d:08:49:b7:
fb:d7:29:77:3f:6e:b3:b5:17:83:32:93:b8:5c:64:14:5e:3c:
1a:0f:61:f2:46:a9:31:3f:fa:15:24:0f:3a:3f:be:99:9a:8c:
2b:f5:7f:c6:76:ed:2a:fa:3c:76:a0:e1:57:14:89:89:25:0d:
ee:7a:2d:d4:f0:95:fe:de:ad:f0:9e:aa:f3:30:c9:4e:38:cd:
37:c2:0f:5a:f4:8f:db:f0:c0:e8:38:51:22:37:2e:8a:4f:46:
7a:0a:93:92:7f:60:9b:da:c6:88:fa:71:ae:76:1c:47:1b:b4:
f9:ec:8f:50:a2:e7:e2:8f:54:48:62:1a:d2:d2:ae:fb:dd:54:
28:df:98:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUyh0z5eLD27sQOx0Oalu4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi
YmI1YWQwHhcNMjUwMjIzMTExODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmU3ZDZjMWI4ZTZkMTg5NjUwYmI5OTQxMGI4YjhiNGU4YWQ1ZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ79gKS43YGdxgccoEJ7ROuMBne2
S0a2pwWLMt+xqO7PbY7Anya5qwIOmVQggbmJ2Nu4GmeWfOhmXN6v5J8QPwNnczQp
sJFrwNMLOniDVCubh2xqCwwB4oIdx3KL0M7g0i1j/BRKeULTOdsDjqWdaimmKtjm
7gKiLZkKG3aeoAiEW/f2ESk9GH6hBLNK3bHXCC1eHKtj3dy85ANe0oflSSTMDYf5
07T4pLXlyrirLzJ0e3ejXlWoM/BmI0yBD1gsfhnJVXoSPQWwEjBgiIgDToxtxnSY
Coui+2j3AKAt2AHWkLVyZubcE8nhGMSlQhrY/mmZJalBl7icwxSVZuKItQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFLn1sG45tGJZQu5lBC4uLTorV7TMB8GA1UdIwQY
MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt
NTQyMDRkZGQyY2E2LzEvVXVmV3diam0wWWxsQzdtVUVMaTR0T2l0WHRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2
LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVSfMA0G
CSqGSIb3DQEBCwUAA4IBAQA3zCKKWXTut7vDvp9TLBZ2EHqAiszb2rRTIUJTi2Wy
oFua6QtTEEOM1uqN4cTf0dQhwvIWIlRkdEm23O6gZELZTFb8SDj509KHjSsuWrQq
Pz/FFPh7Po/BejKCTAIjPaMR35RjuP6T9MiDL+AcSBsQpRem6Lus3Tm+gD0ISbf7
1yl3P26ztReDMpO4XGQUXjwaD2HyRqkxP/oVJA86P76Zmowr9X/Gdu0q+jx2oOFX
FImJJQ3uei3U8JX+3q3wnqrzMMlOOM03wg9a9I/b8MDoOFEiNy6KT0Z6CpOSf2Cb
2saI+nGudhxHG7T57I9Qoufij1RIYhrS0q773VQo35iG
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:16 2025 by rpki-client