Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/UiJ3SFPycHJDAWrLPNzzGNFnI2I.roa
File: UiJ3SFPycHJDAWrLPNzzGNFnI2I.roa (raw, json)
Hash identifier: 25C/HLWlIMspjRREcGRN7FGQZBj2RTsW/k1F7dI/0fk=
Subject key identifier: 52:22:77:48:53:F2:70:72:43:01:6A:CB:3C:DC:F3:18:D1:67:23:62
Certificate issuer: /CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Certificate serial: 0194258FC2FA121D94CAFC1E724535EB2204
Authority key identifier: 4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/UiJ3SFPycHJDAWrLPNzzGNFnI2I.roa
Signing time: Thu 02 Jan 2025 05:49:26 +0000
ROA not before: Thu 02 Jan 2025 05:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43766
IP address blocks: 82.197.52.0/27 maxlen: 27
82.197.52.32/27 maxlen: 27
82.197.52.128/27 maxlen: 27
Validation: Failed, certificate revoked on Wed 19 Mar 2025 11:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c2:fa:12:1d:94:ca:fc:1e:72:45:35:eb:22:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5222774853f2707243016acb3cdcf318d1672362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:8e:57:01:17:22:af:50:36:42:d8:09:04:
a9:75:57:ae:52:a1:47:d1:a7:a0:f9:06:41:93:47:
f8:be:c2:02:c3:09:3b:1b:08:73:40:b4:a0:17:35:
4f:5d:f4:c5:de:b1:cf:3c:f1:48:07:c0:d4:e2:75:
1c:e1:89:3a:23:74:0c:03:86:87:7b:af:1d:8b:58:
b3:20:6f:37:ec:91:79:20:67:2b:96:30:69:14:a6:
66:6f:99:99:46:95:d3:94:6d:71:11:4c:52:e7:60:
aa:18:86:8c:f4:9b:4c:df:2b:e6:c9:ae:bf:14:8e:
01:aa:e2:c8:fd:70:78:7e:07:44:e7:94:0f:8a:f1:
d0:16:ef:90:13:56:79:83:5c:1d:c0:e4:71:2d:b6:
a9:05:90:08:43:a1:8e:63:71:e7:ab:ef:4e:13:29:
b1:e5:fa:30:48:5c:3a:81:14:93:aa:3a:07:bf:32:
30:90:c3:22:3a:e5:10:7d:87:f2:e7:d8:ed:6b:04:
4b:2b:4a:1e:a8:ce:aa:1f:d9:b7:c8:3c:4c:90:72:
47:49:9a:92:27:61:de:bb:e2:b6:55:25:b2:2a:14:
fd:ac:c8:c0:05:5a:cb:58:e2:8c:c9:7b:4a:42:39:
15:80:12:f1:47:ef:64:24:9c:b8:fd:43:5d:1c:c3:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:22:77:48:53:F2:70:72:43:01:6A:CB:3C:DC:F3:18:D1:67:23:62
X509v3 Authority Key Identifier:
keyid:4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/UiJ3SFPycHJDAWrLPNzzGNFnI2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.52.0/26
82.197.52.128/27
Signature Algorithm: sha256WithRSAEncryption
5f:b9:0b:f7:43:f2:cf:eb:fe:9a:fa:c2:a6:6c:15:ab:90:fb:
2a:23:3d:d0:61:64:f8:68:a9:01:1f:dd:0b:51:e5:55:3a:b4:
e6:b8:69:5e:5f:aa:11:f5:f4:ae:c2:74:a1:d7:78:90:1d:a3:
87:d3:1c:85:1b:ee:98:08:94:76:65:31:d6:ae:13:bc:ef:07:
69:02:7d:21:6b:21:e9:48:40:f0:ac:a8:c5:1a:ef:16:af:3c:
2a:2b:47:b8:e1:ec:36:d5:30:77:83:a4:65:8b:df:c7:cb:a9:
31:1e:3a:e7:a5:da:c8:09:a7:df:e8:f2:51:ca:da:cf:b8:23:
47:c8:78:4d:51:57:09:4f:79:c4:88:02:a6:42:b0:17:99:6a:
1b:32:0c:d0:41:44:ba:98:af:79:e2:22:c5:1d:a0:42:bc:c1:
c8:0c:86:43:dc:2d:5e:b5:4c:a8:fe:fa:63:08:e2:e9:e7:b3:
ca:fb:31:3e:9e:54:25:7a:42:b5:38:e8:22:e8:f5:ac:f0:84:
36:0e:c2:dd:8c:4e:80:56:96:52:a9:7f:02:bf:3d:8f:64:ef:
7f:3d:d3:9d:29:0d:da:e0:32:1e:88:d5:ba:2a:b7:12:ae:aa:
a8:5c:4a:63:c8:ae:60:34:87:cf:61:88:ec:a0:63:87:b9:dc:
a6:6e:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:00 2025 by rpki-client