Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/UgIE1zy7oVQcAG8e4DVAD3xdpS8.roa
File: UgIE1zy7oVQcAG8e4DVAD3xdpS8.roa (raw, json)
Hash identifier: OJ7rYBZ6BJvOHBj2v6unAsi16I7sOl3Fc1XMSDsXNnU=
Subject key identifier: 52:02:04:D7:3C:BB:A1:54:1C:00:6F:1E:E0:35:40:0F:7C:5D:A5:2F
Certificate issuer: /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial: 018CC2DAD989213E781AC56BB2B9BC43F7B8
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/UgIE1zy7oVQcAG8e4DVAD3xdpS8.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.172.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d9:89:21:3e:78:1a:c5:6b:b2:b9:bc:43:f7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=520204d73cbba1541c006f1ee035400f7c5da52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:2a:e8:2d:d3:86:f2:8e:57:ad:2f:66:7f:
8a:ab:c0:14:9a:b3:82:de:3c:06:9d:db:9a:4c:71:
f3:fb:e4:0d:72:ec:89:08:a7:67:6b:31:59:4c:02:
5a:7a:b9:35:c0:01:ac:9c:ef:14:cc:d6:88:58:68:
d8:12:88:0f:3a:9f:3c:fe:73:63:ae:6e:3b:b7:7b:
ef:6c:e7:53:d2:12:9f:de:35:1a:16:d8:e5:44:cc:
f0:cb:fa:a5:09:28:bc:c4:b5:6e:87:78:40:92:9a:
ab:7e:01:d4:e2:7f:52:f2:56:29:ae:7c:f6:f7:08:
8f:53:99:4c:ef:ce:c4:fe:a7:9d:3e:ea:8f:f2:01:
a0:2a:d5:9e:88:5a:df:2d:48:6a:5c:8f:91:6f:87:
48:3d:fe:75:74:bf:00:c2:97:e7:3b:31:52:2d:77:
2f:d2:c6:09:55:6c:a2:b3:28:7a:db:ac:59:aa:92:
e3:9b:c3:9b:c9:c7:14:d8:6b:aa:6f:d1:18:7f:f9:
0a:3a:b1:78:22:99:b9:dd:85:6f:c8:3c:f6:40:8c:
27:f5:16:69:8b:c3:24:99:a4:9e:be:8a:10:96:11:
a7:1d:5f:7a:96:99:00:55:37:a6:d5:97:3a:03:07:
7d:27:81:f7:51:5a:13:f8:a4:c4:83:fa:c4:52:3e:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:02:04:D7:3C:BB:A1:54:1C:00:6F:1E:E0:35:40:0F:7C:5D:A5:2F
X509v3 Authority Key Identifier:
keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/UgIE1zy7oVQcAG8e4DVAD3xdpS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.152.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:cf:16:e8:4c:f2:3f:58:1c:b0:7c:d0:3c:c2:7c:7d:97:81:
b1:2d:6d:4b:0b:62:22:9e:29:6d:b7:27:08:3e:2f:8c:53:82:
92:52:28:86:a3:43:8f:71:60:fe:68:18:65:4a:9f:e1:e9:69:
3b:f5:50:9d:fd:9c:f5:f4:0a:58:4a:eb:5e:36:ee:af:31:ef:
05:80:3f:d4:92:1b:f3:fd:3c:f2:d6:90:ab:75:a2:66:92:df:
ee:1b:d8:7f:b9:be:0b:2d:0b:4b:5b:c7:44:06:0f:42:fc:c6:
28:3f:db:fd:3c:72:78:7d:50:1c:12:99:e6:1c:32:a1:94:ae:
07:ba:9f:21:4f:32:93:cf:c3:22:47:72:58:d7:9c:80:04:ab:
9a:67:4f:7d:ba:16:db:90:0b:5b:92:34:67:86:c1:ef:83:31:
d4:f0:8b:9e:b2:de:e9:47:e6:10:f0:bc:5d:1e:eb:5a:78:e6:
e4:33:2d:df:bc:5f:53:a7:17:1e:81:10:5a:e8:3c:10:a7:f5:
c3:b9:7f:9e:b5:11:3a:a3:df:8d:41:16:09:82:c1:7c:47:0e:
f7:a4:66:9c:49:c1:a1:34:fa:9d:48:2c:8d:96:43:8e:f8:34:
ff:a6:e4:23:e7:c4:0d:79:cc:81:07:f5:5d:00:76:5c:10:18:
19:97:66:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2tmJIT54GsVrsrm8Q/e4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MWI5NDFkYmU1OTY1MWZhZmJiYTk3MjRhMTI3NzVlMDdl
ZGI2MzUwHhcNMjQwMTAxMDIyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjAyMDRkNzNjYmJhMTU0MWMwMDZmMWVlMDM1NDAwZjdjNWRhNTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWUq6C3ThvKOV60vZn+Kq8AUmrOC
3jwGnduaTHHz++QNcuyJCKdnazFZTAJaerk1wAGsnO8UzNaIWGjYEogPOp88/nNj
rm47t3vvbOdT0hKf3jUaFtjlRMzwy/qlCSi8xLVuh3hAkpqrfgHU4n9S8lYprnz2
9wiPU5lM787E/qedPuqP8gGgKtWeiFrfLUhqXI+Rb4dIPf51dL8AwpfnOzFSLXcv
0sYJVWyisyh626xZqpLjm8ObyccU2Guqb9EYf/kKOrF4Ipm53YVvyDz2QIwn9RZp
i8MkmaSevooQlhGnHV96lpkAVTem1Zc6Awd9J4H3UVoT+KTEg/rEUj5WywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFICBNc8u6FUHABvHuA1QA98XaUvMB8GA1UdIwQY
MBaAFCYblB2+WWUfr7upckoSd14H7bY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yZjgzMGYtYWY0ZC00ZDMzLWEzMDAt
Yjk4ZGY1NDRiYzIwLzEvVWdJRTF6eTdvVlFjQUc4ZTREVkFEM3hkcFM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8yZjgzMGYtYWY0ZC00ZDMzLWEzMDAtYjk4ZGY1NDRiYzIw
LzEvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuayYMA0G
CSqGSIb3DQEBCwUAA4IBAQDBzxboTPI/WBywfNA8wnx9l4GxLW1LC2IinilttycI
Pi+MU4KSUiiGo0OPcWD+aBhlSp/h6Wk79VCd/Zz19ApYSuteNu6vMe8FgD/Ukhvz
/Tzy1pCrdaJmkt/uG9h/ub4LLQtLW8dEBg9C/MYoP9v9PHJ4fVAcEpnmHDKhlK4H
up8hTzKTz8MiR3JY15yABKuaZ099uhbbkAtbkjRnhsHvgzHU8Iuest7pR+YQ8Lxd
HutaeObkMy3fvF9TpxcegRBa6DwQp/XDuX+etRE6o9+NQRYJgsF8Rw73pGacScGh
NPqdSCyNlkOO+DT/puQj58QNecyBB/VdAHZcEBgZl2Yn
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:37 2025 by rpki-client