Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/UaahI-CC-EyNDpDGc3eOsgWI29Q.roa
File: UaahI-CC-EyNDpDGc3eOsgWI29Q.roa (raw, json)
Hash identifier: V01h0joDpkMo7MVX8JhvzJeTVByzXBHMvdMaLWJbptA=
Subject key identifier: 51:A6:A1:23:E0:82:F8:4C:8D:0E:90:C6:73:77:8E:B2:05:88:DB:D4
Certificate issuer: /CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Certificate serial: 018571957F52DD7E7B124620AE1956C7E06F
Authority key identifier: 20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/UaahI-CC-EyNDpDGc3eOsgWI29Q.roa
Signing time: Mon 02 Jan 2023 08:25:00 +0000
ROA not before: Mon 02 Jan 2023 08:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61365
IP address blocks: 185.184.16.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:7f:52:dd:7e:7b:12:46:20:ae:19:56:c7:e0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Validity
Not Before: Jan 2 08:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51a6a123e082f84c8d0e90c673778eb20588dbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:22:d5:17:3f:91:d1:d9:c3:85:4c:01:43:
64:c8:43:19:81:3d:31:c9:71:1a:74:a3:78:25:eb:
cf:a8:97:67:bb:e9:1a:23:c0:91:db:50:10:4a:4c:
1f:2b:c6:68:7f:68:88:93:63:5c:6b:a8:ec:a7:cb:
98:5c:3d:9c:7f:e5:d9:a9:26:84:2b:5f:09:7b:f2:
d1:bf:d7:e6:29:22:32:d5:a6:e5:83:8c:e8:d1:a3:
51:e7:c6:a0:19:39:78:fa:c2:af:12:d8:cd:f2:1f:
09:05:2f:ef:c3:57:d6:98:7c:d5:5c:d8:58:c5:a3:
21:f2:b6:d7:dd:00:10:8b:9c:7f:4a:e3:1d:4a:5e:
57:d0:69:d9:f1:fb:51:9e:aa:cf:c5:35:a1:6b:fb:
b0:e8:e3:21:c3:06:5c:fe:c4:f5:a5:f6:27:71:ab:
84:4f:e5:6e:2c:37:e0:11:2e:cb:e6:3c:e5:96:04:
09:e4:50:18:72:78:3f:b2:37:77:18:20:0f:01:9a:
20:91:c3:3b:32:bc:3b:67:19:32:45:8e:61:6a:05:
01:56:bb:1b:a6:e4:1c:47:5e:77:78:da:50:09:9b:
c5:84:43:5e:68:fb:9d:b7:36:df:44:37:29:31:d4:
59:08:84:2a:d9:08:d1:77:39:6c:c0:86:75:18:ef:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A6:A1:23:E0:82:F8:4C:8D:0E:90:C6:73:77:8E:B2:05:88:DB:D4
X509v3 Authority Key Identifier:
keyid:20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/UaahI-CC-EyNDpDGc3eOsgWI29Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:94:d9:e3:54:88:73:f0:ab:3a:43:f2:cb:d9:64:3f:f3:4d:
d7:c0:b6:5c:67:d9:11:47:5f:c8:b1:82:5f:02:36:a5:cc:37:
0b:0d:b5:ba:bc:61:21:e0:2f:20:49:cc:84:5d:59:f9:da:3e:
bc:45:67:1f:79:bb:95:49:74:f8:df:78:3c:1d:ba:63:56:35:
16:0f:4d:19:5c:9d:0c:e7:4f:8c:ac:fd:ab:2c:5e:c2:5c:ba:
99:ba:19:a0:cd:2f:50:4a:c4:6a:71:9c:1f:a0:48:45:ea:f4:
dd:ac:60:e4:d8:80:af:45:b9:80:25:b8:4e:46:5c:2e:05:46:
be:ca:4c:6f:f7:14:c9:01:4f:3c:60:95:ff:ca:21:2c:9c:21:
0e:d5:76:b8:c0:a7:3e:7a:54:e4:eb:b4:8c:f0:98:b5:3f:61:
e5:c1:44:92:de:49:68:bf:2f:2a:a6:d4:5a:9a:6c:6c:cd:3d:
4c:d0:91:84:51:aa:43:83:95:e7:48:6b:a7:4b:6e:ff:67:70:
4e:1c:ed:d3:05:75:08:be:8b:61:6b:a3:35:6a:c2:36:e3:61:
1b:99:f6:74:2d:57:41:e8:25:99:0d:9e:a0:25:d8:8e:91:2f:
fa:2b:cd:63:bf:8c:a6:d4:16:47:e2:c3:3d:dd:c2:79:37:e2:
06:c9:da:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxlX9S3X57EkYgrhlWx+BvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYWVkYzhiMmExYmJkNmQzNzA1NWVjMDBlOGU2MGY0NTg4
ZTEzMDUwHhcNMjMwMTAyMDgyNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWE2YTEyM2UwODJmODRjOGQwZTkwYzY3Mzc3OGViMjA1ODhkYmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywki1Rc/kdHZw4VMAUNkyEMZgT0x
yXEadKN4JevPqJdnu+kaI8CR21AQSkwfK8Zof2iIk2Nca6jsp8uYXD2cf+XZqSaE
K18Je/LRv9fmKSIy1ablg4zo0aNR58agGTl4+sKvEtjN8h8JBS/vw1fWmHzVXNhY
xaMh8rbX3QAQi5x/SuMdSl5X0GnZ8ftRnqrPxTWha/uw6OMhwwZc/sT1pfYncauE
T+VuLDfgES7L5jzllgQJ5FAYcng/sjd3GCAPAZogkcM7Mrw7ZxkyRY5hagUBVrsb
puQcR153eNpQCZvFhENeaPudtzbfRDcpMdRZCIQq2QjRdzlswIZ1GO/DbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGmoSPggvhMjQ6QxnN3jrIFiNvUMB8GA1UdIwQY
MBaAFCCu3IsqG71tNwVewA6OYPRYjhMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUs3Y2l5b2J2VzAzQlY3QURvNWc5RmlPRXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mZWIxNWUtZGU3Yy00MGE3LTg2ZDQt
OTY5ZDI1MzlkMGNhLzEvVWFhaEktQ0MtRXlORHBER2MzZU9zZ1dJMjlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mZWIxNWUtZGU3Yy00MGE3LTg2ZDQtOTY5ZDI1MzlkMGNh
LzEvSUs3Y2l5b2J2VzAzQlY3QURvNWc5RmlPRXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubgQMA0G
CSqGSIb3DQEBCwUAA4IBAQC1lNnjVIhz8Ks6Q/LL2WQ/803XwLZcZ9kRR1/IsYJf
AjalzDcLDbW6vGEh4C8gScyEXVn52j68RWcfebuVSXT433g8HbpjVjUWD00ZXJ0M
50+MrP2rLF7CXLqZuhmgzS9QSsRqcZwfoEhF6vTdrGDk2ICvRbmAJbhORlwuBUa+
ykxv9xTJAU88YJX/yiEsnCEO1Xa4wKc+elTk67SM8Ji1P2HlwUSS3klovy8qptRa
mmxszT1M0JGEUapDg5XnSGunS27/Z3BOHO3TBXUIvotha6M1asI242EbmfZ0LVdB
6CWZDZ6gJdiOkS/6K81jv4ym1BZH4sM93cJ5N+IGydq0
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:41 2024 by rpki-client on console-ams.rpki-client.org