Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ucb-NrXURbRpgkO4J4SLVnHUoVg.roa
File: ucb-NrXURbRpgkO4J4SLVnHUoVg.roa (raw, json)
Hash identifier: cVbQg54fITU71lc1XZw3BYiVZERl+7tuuaJrPm30wLE=
Subject key identifier: B9:C6:FE:36:B5:D4:45:B4:69:82:43:B8:27:84:8B:56:71:D4:A1:58
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A4FD79BAE71D114DFB3516553F456A0CC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ucb-NrXURbRpgkO4J4SLVnHUoVg.roa
Signing time: Fri 01 Sep 2023 08:24:04 +0000
ROA not before: Fri 01 Sep 2023 08:24:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.225.20.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.210.232.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.223.83.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.226.106.0/24 maxlen: 24
185.221.23.0/24 maxlen: 24
185.221.20.0/24 maxlen: 24
185.221.22.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Sep 2023 09:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:d7:9b:ae:71:d1:14:df:b3:51:65:53:f4:56:a0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 1 08:24:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9c6fe36b5d445b4698243b827848b5671d4a158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:95:3b:a6:4e:94:33:47:65:0b:65:0d:7d:39:
44:a4:59:e8:8c:9c:7d:1a:4f:ab:c9:9e:4c:cf:df:
c6:08:64:d4:5e:27:37:b3:17:d5:86:62:8e:fb:d2:
5b:16:8f:bb:80:6e:ac:c7:d5:ed:b9:8f:3c:4a:09:
cb:7c:46:94:39:d5:79:4f:f9:a9:c7:59:b0:f8:8c:
9d:ac:d3:0a:f8:7c:0f:1f:1e:cc:af:8e:0f:03:8a:
57:7b:2c:9d:f8:3e:9b:ab:11:ff:9c:e7:3e:26:ab:
3a:b0:a3:b1:db:ad:f5:12:a8:27:0c:a8:dc:aa:48:
94:83:b3:09:c1:00:60:28:db:4b:fb:20:bd:15:5f:
78:f8:02:30:c5:12:74:63:49:55:78:96:7e:3b:07:
cd:46:96:c0:f3:5e:d7:05:65:34:3b:c3:b5:b6:b5:
a5:c8:14:ab:34:c7:14:88:ee:5c:5a:4b:54:9f:8f:
6d:24:90:f9:44:2a:64:0f:b6:61:fc:dc:46:b5:de:
14:10:cf:8a:cd:31:fd:d9:ef:a2:bf:c9:aa:88:02:
ca:38:14:9a:f6:78:e3:2e:c5:16:ce:a5:b2:e7:db:
29:cc:3d:08:33:c3:48:ed:82:54:c2:1d:22:e5:e6:
d3:fc:5a:90:12:73:33:ee:c7:5c:55:dd:53:74:2e:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C6:FE:36:B5:D4:45:B4:69:82:43:B8:27:84:8B:56:71:D4:A1:58
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ucb-NrXURbRpgkO4J4SLVnHUoVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.210.232.0/24
185.220.249.0/24
185.221.20.0/24
185.221.22.0/23
185.222.29.0/24
185.223.80.0/24
185.223.83.0/24
185.225.0.0/23
185.225.20.0/24
185.225.22.0/24
185.226.106.0/24
185.227.145.0/24
185.228.75.0/24
185.246.115.0/24
185.251.229.0/24
185.251.231.0/24
193.58.144.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:8d:56:46:df:bc:1a:5b:c3:46:99:14:1c:02:a1:7e:35:5a:
dc:57:e0:92:7e:4e:6f:fc:49:57:b7:b6:e7:5b:e9:4b:5a:ba:
9c:27:32:8f:e5:0f:7e:3b:25:71:aa:f5:c3:bb:da:9e:50:41:
0a:30:b8:03:22:83:cf:bb:65:71:03:4c:eb:98:74:8f:60:bd:
1e:bd:c2:a2:e3:98:9a:cf:ee:8b:ba:51:0a:46:ec:4f:b3:c6:
fc:7d:57:0c:64:7d:65:a1:d4:d1:09:bc:ff:e6:65:8e:dd:2a:
fe:79:3a:52:d8:ac:aa:2f:8b:67:9e:67:c3:58:d5:ce:0f:7a:
e2:d8:fd:ff:1f:88:42:95:2f:a8:bb:d8:6f:00:90:ab:0b:6b:
aa:12:ee:5d:ea:15:fa:52:ae:30:ac:bd:97:57:22:a0:7a:a6:
25:86:42:c8:ca:c0:33:c3:bd:b6:03:6c:17:89:d0:b0:b7:3c:
a1:5e:0d:b4:eb:4f:81:16:63:fa:31:c4:0a:eb:00:6c:f4:f3:
fe:fa:d5:7d:d2:01:7e:da:e5:c7:c1:7e:6d:84:35:88:a2:9c:
d2:88:bb:49:36:39:f5:d1:64:08:bf:32:29:69:98:65:7f:0e:
78:bd:81:b5:b4:b9:8c:57:c2:51:f3:64:16:35:3c:46:ec:4d:
6c:a8:aa:c9
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAYpP15uucdEU37NRZVP0VqDMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwOTAxMDgyNDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWM2ZmUzNmI1ZDQ0NWI0Njk4MjQzYjgyNzg0OGI1NjcxZDRhMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5U7pk6UM0dlC2UNfTlEpFnojJx9
Gk+ryZ5Mz9/GCGTUXic3sxfVhmKO+9JbFo+7gG6sx9XtuY88SgnLfEaUOdV5T/mp
x1mw+IydrNMK+HwPHx7Mr44PA4pXeyyd+D6bqxH/nOc+Jqs6sKOx2631EqgnDKjc
qkiUg7MJwQBgKNtL+yC9FV94+AIwxRJ0Y0lVeJZ+OwfNRpbA817XBWU0O8O1trWl
yBSrNMcUiO5cWktUn49tJJD5RCpkD7Zh/NxGtd4UEM+KzTH92e+iv8mqiALKOBSa
9njjLsUWzqWy59spzD0IM8NI7YJUwh0i5ebT/FqQEnMz7sdcVd1TdC6S1wIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFLnG/ja11EW0aYJDuCeEi1Zx1KFYMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvdWNiLU5yWFVSYlJwZ2tPNEo0U0xWbkhVb1ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQALQgV
AwQALZPgAwQAudLoAwQAudz5AwQAud0UAwQBud0WAwQAud4dAwQAud9QAwQAud9T
AwQBueEAAwQAueEUAwQAueEWAwQAueJqAwQAueORAwQAueRLAwQAufZzAwQAufvl
AwQAufvnAwQAwTqQAwQBwTqSMA0GCSqGSIb3DQEBCwUAA4IBAQANjVZG37waW8NG
mRQcAqF+NVrcV+CSfk5v/ElXt7bnW+lLWrqcJzKP5Q9+OyVxqvXDu9qeUEEKMLgD
IoPPu2VxA0zrmHSPYL0evcKi45iaz+6LulEKRuxPs8b8fVcMZH1lodTRCbz/5mWO
3Sr+eTpS2KyqL4tnnmfDWNXOD3ri2P3/H4hClS+ou9hvAJCrC2uqEu5d6hX6Uq4w
rL2XVyKgeqYlhkLIysAzw722A2wXidCwtzyhXg2060+BFmP6McQK6wBs9PP++tV9
0gF+2uXHwX5thDWIopzSiLtJNjn10WQIvzIpaZhlfw54vYG1tLmMV8JR82QWNTxG
7E1sqKrJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org