Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/uQCyVuepSSU2XrIi_nXHRlZf4lA.roa
File: uQCyVuepSSU2XrIi_nXHRlZf4lA.roa (raw, json)
Hash identifier: dbiC3PJAQCOwt64fA+/0YE4KOgcl/yvCyLvzQv4ycCA=
Subject key identifier: B9:00:B2:56:E7:A9:49:25:36:5E:B2:22:FE:75:C7:46:56:5F:E2:50
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 019445A0470D936B5A1EC24C308E9838624A
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/uQCyVuepSSU2XrIi_nXHRlZf4lA.roa
Signing time: Wed 08 Jan 2025 11:15:19 +0000
ROA not before: Wed 08 Jan 2025 11:15:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216244
IP address blocks: 185.160.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 11:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:a0:47:0d:93:6b:5a:1e:c2:4c:30:8e:98:38:62:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Jan 8 11:15:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b900b256e7a94925365eb222fe75c746565fe250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9e:06:5c:90:71:68:d4:e5:76:c3:5f:f0:da:
00:4f:3e:16:97:15:b1:15:ed:c6:e5:c3:6d:96:61:
d1:4f:e0:a8:d3:80:01:ab:07:8a:2d:28:8e:91:31:
4f:91:e4:c6:e7:78:14:30:56:03:c4:d8:64:3e:bb:
bd:e8:32:e3:fa:9b:60:f4:66:9f:84:a2:39:78:e2:
a9:e8:f0:7a:f5:c3:89:14:09:09:80:dd:87:22:e5:
d1:b7:02:62:17:93:33:f8:4a:31:18:72:69:e5:9c:
96:3a:c5:fb:2c:2c:16:e1:46:c5:5f:6e:d9:a5:60:
ba:17:fb:f7:2e:a6:2f:e1:7a:56:14:b3:14:a5:85:
ae:e7:a4:c8:2d:9f:51:54:ac:b1:27:e4:10:77:6c:
c2:08:ff:d8:f4:7e:f4:35:99:0e:c4:2e:0a:e5:ba:
59:03:36:a7:c3:d9:51:78:57:87:27:49:dc:f1:9e:
b4:7a:c0:fe:1d:1d:e8:73:5b:2b:c2:c5:90:09:f2:
0b:3c:0e:f3:46:3c:ae:67:ef:a9:ff:e4:76:9b:ae:
a0:69:37:6a:3f:d3:e9:a6:c2:6b:35:e7:7e:df:6f:
88:9e:91:15:be:30:a9:c5:5b:5f:b2:6a:eb:02:64:
5d:2b:90:87:9c:95:e8:98:40:cd:bd:e9:63:fd:c8:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:00:B2:56:E7:A9:49:25:36:5E:B2:22:FE:75:C7:46:56:5F:E2:50
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/uQCyVuepSSU2XrIi_nXHRlZf4lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.28.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f6:f9:c0:54:ed:21:2c:ad:28:fb:bf:83:a2:5b:16:fd:de:
82:a4:f9:df:31:94:99:08:86:df:dd:1f:1c:b8:42:9a:74:ab:
ad:08:39:46:bc:9a:46:3e:f8:47:48:b4:bb:5e:5c:ce:90:45:
fd:82:86:2b:d3:e7:de:05:f4:84:ef:a0:5d:e1:59:1c:d7:04:
b0:22:cc:50:23:42:78:51:b3:9f:0c:82:e2:24:ea:b6:25:be:
fd:ae:10:d0:85:95:c6:fe:9e:e0:5a:1e:18:44:10:dd:d0:fd:
f9:19:4b:36:be:bd:4f:e2:57:8f:ad:a1:2c:e9:80:23:ee:fd:
ea:71:d5:d4:af:f2:a5:6c:3a:ad:aa:92:b7:ed:40:c3:43:44:
f8:41:e3:cb:29:68:70:ae:98:22:97:18:2b:88:bb:38:ee:db:
64:4f:dc:7b:c3:87:da:22:57:96:47:c1:8d:0e:0b:c0:8b:c7:
ec:78:f3:08:af:cf:17:ff:3e:e1:b2:a4:c5:19:58:44:e1:d4:
c4:88:09:42:48:d9:11:c3:7d:c9:44:5f:41:6c:1b:a2:8b:4a:
91:e5:f7:92:25:64:64:a0:56:bc:83:ce:1f:d2:41:31:d0:0a:
e7:50:78:da:ae:c1:32:cf:21:97:f9:84:b7:d9:ee:ca:c0:86:
b4:c4:34:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRFoEcNk2taHsJMMI6YOGJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTAxM2VjOGE1YzU2ZGYyNDFhOWIyNTYzZDExMWY4ZTU0
M2JmOTEwHhcNMjUwMTA4MTExNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTAwYjI1NmU3YTk0OTI1MzY1ZWIyMjJmZTc1Yzc0NjU2NWZlMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh54GXJBxaNTldsNf8NoATz4WlxWx
Fe3G5cNtlmHRT+Co04ABqweKLSiOkTFPkeTG53gUMFYDxNhkPru96DLj+ptg9Gaf
hKI5eOKp6PB69cOJFAkJgN2HIuXRtwJiF5Mz+EoxGHJp5ZyWOsX7LCwW4UbFX27Z
pWC6F/v3LqYv4XpWFLMUpYWu56TILZ9RVKyxJ+QQd2zCCP/Y9H70NZkOxC4K5bpZ
Azanw9lReFeHJ0nc8Z60esD+HR3oc1srwsWQCfILPA7zRjyuZ++p/+R2m66gaTdq
P9PppsJrNed+32+InpEVvjCpxVtfsmrrAmRdK5CHnJXomEDNvelj/cjKgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLkAslbnqUklNl6yIv51x0ZWX+JQMB8GA1UdIwQY
MBaAFNHgE+yKXFbfJBqbJWPREfjlQ7+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQt
NDQwNTI4YzFlNDllLzEvdVFDeVZ1ZXBTU1UyWHJJaV9uWEhSbFpmNGxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQtNDQwNTI4YzFlNDll
LzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaAcMA0G
CSqGSIb3DQEBCwUAA4IBAQBZ9vnAVO0hLK0o+7+DolsW/d6CpPnfMZSZCIbf3R8c
uEKadKutCDlGvJpGPvhHSLS7XlzOkEX9goYr0+feBfSE76Bd4Vkc1wSwIsxQI0J4
UbOfDILiJOq2Jb79rhDQhZXG/p7gWh4YRBDd0P35GUs2vr1P4lePraEs6YAj7v3q
cdXUr/KlbDqtqpK37UDDQ0T4QePLKWhwrpgilxgriLs47ttkT9x7w4faIleWR8GN
DgvAi8fsePMIr88X/z7hsqTFGVhE4dTEiAlCSNkRw33JRF9BbBuii0qR5feSJWRk
oFa8g84f0kEx0ArnUHjarsEyzyGX+YS32e7KwIa0xDSY
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:11:35 2025 by rpki-client