Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/uthITQ4WkqTk4IKbDzY1ACqM1L4.roa
File: uthITQ4WkqTk4IKbDzY1ACqM1L4.roa (raw, json)
Hash identifier: tH9FUNXtXaDfr5jDMH6PsCOH1VQRoglV/o9VG3qAjCA=
Subject key identifier: BA:D8:48:4D:0E:16:92:A4:E4:E0:82:9B:0F:36:35:00:2A:8C:D4:BE
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 019519222428A92159585AB5955006567EDA
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/uthITQ4WkqTk4IKbDzY1ACqM1L4.roa
Signing time: Tue 18 Feb 2025 12:57:02 +0000
ROA not before: Tue 18 Feb 2025 12:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31365
IP address blocks: 85.115.206.0/24 maxlen: 24
85.153.1.0/24 maxlen: 24
85.153.2.0/24 maxlen: 24
85.153.3.0/24 maxlen: 24
85.153.5.0/24 maxlen: 24
85.153.6.0/24 maxlen: 24
85.153.7.0/24 maxlen: 24
85.153.8.0/24 maxlen: 24
85.153.10.0/24 maxlen: 24
85.153.33.0/24 maxlen: 24
85.153.43.0/24 maxlen: 24
85.153.47.0/24 maxlen: 24
85.153.56.0/24 maxlen: 24
85.153.58.0/24 maxlen: 24
85.153.65.0/24 maxlen: 24
85.153.74.0/24 maxlen: 24
85.153.75.0/24 maxlen: 24
85.153.80.0/24 maxlen: 24
85.153.93.0/24 maxlen: 24
85.153.117.0/24 maxlen: 24
85.153.120.0/24 maxlen: 24
85.153.121.0/24 maxlen: 24
85.153.122.0/24 maxlen: 24
85.153.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 08:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:22:24:28:a9:21:59:58:5a:b5:95:50:06:56:7e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Feb 18 12:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bad8484d0e1692a4e4e0829b0f3635002a8cd4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:d6:6f:1d:d5:0f:49:5c:a3:c1:8d:8e:e5:
47:94:e0:59:fc:12:51:da:0c:cb:e1:cd:88:ae:0a:
ba:a3:0b:a0:34:42:c5:d5:76:70:c5:7d:13:13:1a:
7c:eb:74:d0:51:79:bd:e2:ad:4f:29:09:4e:e8:ea:
20:e7:8e:8c:20:cf:30:f3:ec:71:71:5d:7c:2f:a9:
8a:c4:18:bd:d3:b1:e2:b8:fb:28:c8:f6:d0:1c:96:
4f:47:c3:5e:0d:e8:5e:6b:4b:8f:d2:b6:63:ba:ac:
92:62:b4:4c:04:7f:09:8d:eb:a3:e1:12:68:97:95:
98:f7:d2:4e:fc:a9:44:08:0e:04:de:c0:33:a2:45:
4e:23:bb:84:07:6c:47:39:dd:a6:24:bc:36:ac:cd:
7a:9a:7b:e6:21:88:5a:85:4f:55:90:c1:b2:5f:53:
bd:f2:7a:bd:1a:04:94:a8:24:3d:6d:5c:ac:da:7d:
3f:34:53:41:ce:df:79:aa:b4:8c:78:93:17:fe:aa:
c0:be:32:2f:a1:4b:1b:6d:e5:14:82:3b:61:73:86:
7c:71:ae:52:dd:db:63:70:69:d5:59:e6:3f:09:44:
cb:30:f1:c7:83:70:6a:7a:21:40:79:65:01:23:fb:
41:95:9e:38:81:a5:c9:c3:5a:6b:8b:1b:80:3e:30:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D8:48:4D:0E:16:92:A4:E4:E0:82:9B:0F:36:35:00:2A:8C:D4:BE
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/uthITQ4WkqTk4IKbDzY1ACqM1L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.206.0/24
85.153.1.0-85.153.3.255
85.153.5.0-85.153.8.255
85.153.10.0/24
85.153.33.0/24
85.153.43.0/24
85.153.47.0/24
85.153.56.0/24
85.153.58.0/24
85.153.65.0/24
85.153.74.0/23
85.153.80.0/24
85.153.93.0/24
85.153.117.0/24
85.153.120.0/22
Signature Algorithm: sha256WithRSAEncryption
82:24:d5:e8:c9:20:88:1c:c1:6b:db:7c:46:98:ab:3d:34:02:
bd:e5:0d:74:fc:dc:6a:53:d1:50:b7:ab:2d:c7:51:71:15:8d:
51:32:90:3f:84:6e:fa:aa:54:60:db:e7:f8:d7:c7:2c:a1:07:
79:49:98:8f:57:66:30:cc:39:cf:39:3d:9f:db:ba:4f:bd:5d:
a1:76:9d:68:c5:a1:9e:ea:54:9d:8f:6d:99:a0:5d:af:0f:ac:
bc:b8:76:91:90:98:90:ff:d1:ac:1f:06:25:32:32:e0:3f:fe:
b9:db:b5:09:84:44:cc:51:9c:dd:ff:ca:3c:27:6b:1e:f8:86:
27:c2:f9:83:91:ec:61:40:d6:a0:52:91:52:c1:89:3e:22:6f:
f3:5f:4e:a6:2f:c2:97:69:75:34:ea:b9:15:38:2e:27:df:80:
9e:1c:10:62:c1:b3:a5:d0:d2:5b:93:32:ef:8d:aa:77:e6:47:
f1:07:22:3b:f4:e5:79:0c:82:ed:54:fa:88:c7:22:a5:3c:60:
b1:80:d2:87:ca:72:8a:cb:87:46:a6:4d:e9:b1:b9:d8:1f:7a:
2a:a6:45:38:ed:07:3b:f3:f7:fe:51:47:b5:49:3c:a9:e0:bb:
54:2b:d6:4a:d3:e1:fc:4d:68:de:08:69:6c:2d:58:7d:26:a3:
52:5e:51:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:03:05 2025 by rpki-client