Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/UEzudU6Momrh677QIjHF7s_u3PA.roa
File: UEzudU6Momrh677QIjHF7s_u3PA.roa (raw, json)
Hash identifier: Zp6C0ONpKn8ba7fWyaxeQS0FFRqbFCrEQNzRWa2nubA=
Subject key identifier: 50:4C:EE:75:4E:8C:A2:6A:E1:EB:BE:D0:22:31:C5:EE:CF:EE:DC:F0
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 018CC7268E0EABF563FEE7B70738003087AA
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/UEzudU6Momrh677QIjHF7s_u3PA.roa
Signing time: Mon 01 Jan 2024 22:30:41 +0000
ROA not before: Mon 01 Jan 2024 22:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30925
IP address blocks: 185.142.248.0/22 maxlen: 24
109.109.96.0/19 maxlen: 24
83.98.224.0/19 maxlen: 24
185.34.156.0/22 maxlen: 24
185.26.56.0/22 maxlen: 24
185.34.168.0/22 maxlen: 24
2a02:988::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:8e:0e:ab:f5:63:fe:e7:b7:07:38:00:30:87:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Jan 1 22:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=504cee754e8ca26ae1ebbed02231c5eecfeedcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9f:fb:7a:06:4f:71:87:8a:bf:50:dd:b1:cd:
23:d7:78:67:c6:5a:0e:33:0a:53:73:26:22:67:25:
4b:d7:74:da:9d:36:75:86:44:29:8e:c5:c0:4f:98:
7a:fd:14:d0:f7:06:6a:45:2f:b7:e2:a8:e3:c6:41:
75:73:0e:72:38:aa:c3:cd:1f:fd:e6:62:26:73:b7:
09:04:3a:7c:8c:34:01:3e:7c:b6:8a:75:b6:2a:00:
cf:50:91:bb:a7:51:75:bc:ea:ae:a3:df:72:5d:f8:
35:4c:99:f8:95:05:91:7d:f6:3c:65:9b:9b:0c:5d:
94:dc:73:20:e5:1b:24:b4:29:40:43:0b:5a:e9:9e:
ef:fe:83:39:c2:e3:69:cd:6f:8a:50:85:ba:0f:f3:
7e:76:eb:0a:66:3e:76:ef:fa:9d:8b:94:f0:90:5e:
25:8b:4a:ea:3d:7d:0e:6d:c6:c1:96:ea:c1:bb:8b:
f9:c1:0b:f2:67:5e:32:f1:9c:3d:f4:f2:f4:6e:67:
ab:45:18:24:69:7f:eb:17:09:68:23:55:eb:80:b8:
84:34:d2:61:44:4e:92:08:7b:55:2d:32:c3:7b:3b:
f2:86:f7:f0:88:a2:8c:a3:f0:33:dd:6a:64:fd:30:
d1:c5:18:92:b2:ae:81:2f:5a:7f:3b:13:dd:de:3c:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4C:EE:75:4E:8C:A2:6A:E1:EB:BE:D0:22:31:C5:EE:CF:EE:DC:F0
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/UEzudU6Momrh677QIjHF7s_u3PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.224.0/19
109.109.96.0/19
185.26.56.0/22
185.34.156.0/22
185.34.168.0/22
185.142.248.0/22
IPv6:
2a02:988::/32
Signature Algorithm: sha256WithRSAEncryption
69:94:7a:c7:48:4d:4c:01:a9:33:a4:d3:8e:f2:d2:3c:f8:d3:
00:f7:2d:af:3f:11:5a:bd:bb:11:9a:45:4d:ab:06:2b:0b:31:
a8:8a:cf:52:28:fa:0e:3c:00:4d:f7:7f:0d:6f:ee:6a:37:1b:
e2:8b:35:8c:ea:ee:b8:ff:64:03:90:b2:71:6e:03:dd:88:96:
fc:b3:9f:ae:e0:d0:8c:26:07:b3:87:8d:3b:dd:d0:d1:e3:56:
1d:43:fd:e9:f3:6f:71:1b:40:da:44:b6:7a:3f:bb:94:73:1d:
6b:59:78:2f:ee:60:6e:48:b5:01:c4:83:e2:ec:a2:54:35:5a:
3a:aa:56:41:ae:e8:b4:cb:05:3a:e5:6b:d8:3b:75:73:3b:10:
3f:59:08:4d:d7:ef:49:8e:f7:9a:58:15:31:64:6b:18:ad:45:
c2:d8:5a:e9:59:e2:48:77:c3:1d:9b:3e:01:32:e8:4d:3b:3f:
3a:b1:14:a2:52:29:bb:51:d3:09:ff:17:36:7d:b1:03:e8:77:
6a:40:2f:c1:8d:07:bb:b4:df:ae:b7:81:2b:e5:ac:f3:aa:49:
93:d5:5f:97:4e:3f:51:5e:c9:bb:ac:c6:13:5c:2e:0d:bb:4a:
a7:65:38:84:ad:d6:a0:08:3c:c2:d8:9d:26:d7:d7:c7:37:7d:
8e:7a:0e:a0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAYzHJo4Oq/Vj/ue3BzgAMIeqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTRhNjAxY2EzNWM2YzgzNzZiODlhYWY0NDNiNjNlYTQz
OWNkYjgwHhcNMjQwMTAxMjIzMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDRjZWU3NTRlOGNhMjZhZTFlYmJlZDAyMjMxYzVlZWNmZWVkY2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip/7egZPcYeKv1Ddsc0j13hnxloO
MwpTcyYiZyVL13TanTZ1hkQpjsXAT5h6/RTQ9wZqRS+34qjjxkF1cw5yOKrDzR/9
5mImc7cJBDp8jDQBPny2inW2KgDPUJG7p1F1vOquo99yXfg1TJn4lQWRffY8ZZub
DF2U3HMg5RsktClAQwta6Z7v/oM5wuNpzW+KUIW6D/N+dusKZj527/qdi5TwkF4l
i0rqPX0ObcbBlurBu4v5wQvyZ14y8Zw99PL0bmerRRgkaX/rFwloI1XrgLiENNJh
RE6SCHtVLTLDezvyhvfwiKKMo/Az3Wpk/TDRxRiSsq6BL1p/OxPd3jz1XwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFFBM7nVOjKJq4eu+0CIxxe7P7tzwMB8GA1UdIwQY
MBaAFLGkpgHKNcbIN2uJqvRDtj6kOc24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAt
M2E1NjI4Y2M4MWQ5LzEvVUV6dWRVNk1vbXJoNjc3UUlqSEY3c191M1BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAtM2E1NjI4Y2M4MWQ5
LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQFU2LgAwQF
bW1gAwQCuRo4AwQCuSKcAwQCuSKoAwQCuY74MA0EAgACMAcDBQAqAgmIMA0GCSqG
SIb3DQEBCwUAA4IBAQBplHrHSE1MAakzpNOO8tI8+NMA9y2vPxFavbsRmkVNqwYr
CzGois9SKPoOPABN938Nb+5qNxviizWM6u64/2QDkLJxbgPdiJb8s5+u4NCMJgez
h4073dDR41YdQ/3p829xG0DaRLZ6P7uUcx1rWXgv7mBuSLUBxIPi7KJUNVo6qlZB
rui0ywU65WvYO3VzOxA/WQhN1+9JjveaWBUxZGsYrUXC2FrpWeJId8Mdmz4BMuhN
Oz86sRSiUim7UdMJ/xc2fbED6HdqQC/BjQe7tN+ut4Er5azzqkmT1V+XTj9RXsm7
rMYTXC4Nu0qnZTiErdagCDzC2J0m19fHN32Oeg6g
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:45:00 2025 by rpki-client