Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/ukCsja_9N1bN7T4upYRyldcGbk8.roa
File: ukCsja_9N1bN7T4upYRyldcGbk8.roa (raw, json)
Hash identifier: 0896KWcnW9VihzguQ7nFwQ4FG2f/VkvKKJOkBPIyUWg=
Subject key identifier: BA:40:AC:8D:AF:FD:37:56:CD:ED:3E:2E:A5:84:72:95:D7:06:6E:4F
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 0196DAC4C35BC70B395273CA679F14D2244E
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/ukCsja_9N1bN7T4upYRyldcGbk8.roa
Signing time: Fri 16 May 2025 20:24:10 +0000
ROA not before: Fri 16 May 2025 20:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395363
IP address blocks: 185.173.184.0/23 maxlen: 23
185.173.184.0/24 maxlen: 24
185.173.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 19:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:c4:c3:5b:c7:0b:39:52:73:ca:67:9f:14:d2:24:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: May 16 20:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba40ac8daffd3756cded3e2ea5847295d7066e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d5:e5:63:fd:d6:c2:3b:5b:94:4f:e4:97:f5:
9d:d9:b0:f2:a7:25:0d:5e:9c:96:4d:3a:d8:09:56:
a3:81:b0:4a:30:b7:6b:7d:93:24:82:a5:4e:de:41:
c7:f5:f2:28:3a:d3:f1:41:59:e3:c9:d6:e1:5d:ac:
24:6e:67:11:17:3b:cd:25:98:72:91:44:96:a2:b8:
bd:b7:8a:2c:8c:4d:2f:36:6e:7c:17:b8:24:38:e8:
7a:8a:e6:83:e5:53:c0:1f:92:5b:0a:c8:1b:41:82:
55:ff:90:95:ef:db:34:45:49:b9:68:6e:5e:21:3d:
17:66:53:8d:55:13:d4:86:73:81:c2:49:4b:a8:65:
71:e0:f1:2a:ef:72:52:e6:2b:fb:dd:75:21:6e:59:
66:19:44:14:76:93:26:c7:75:30:48:29:f4:39:8a:
68:73:8b:55:03:09:ed:85:21:cb:c8:73:e6:9a:96:
e6:a9:7f:29:02:4b:4c:0a:5a:27:7a:8b:4a:34:74:
f8:d7:67:c2:7d:48:a2:c7:67:75:b6:31:0f:6c:e1:
05:e8:97:0e:0b:ff:32:0c:a3:4f:f4:e9:8c:85:80:
e5:b3:3c:f8:fb:c7:7a:30:2b:3b:1c:8c:9a:d7:23:
04:37:a8:43:0a:2a:9c:25:dc:44:15:b2:fa:7f:15:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:40:AC:8D:AF:FD:37:56:CD:ED:3E:2E:A5:84:72:95:D7:06:6E:4F
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/ukCsja_9N1bN7T4upYRyldcGbk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.184.0/23
Signature Algorithm: sha256WithRSAEncryption
52:10:a0:90:32:73:a9:db:f5:c4:2f:af:42:71:1b:c3:4f:53:
8f:00:77:d0:fe:92:7d:9a:1f:28:cc:04:aa:03:5f:25:12:75:
bd:5a:d5:a3:a2:16:92:79:67:09:df:62:0c:82:fa:71:86:f2:
eb:1c:53:01:e4:ba:b8:c5:bd:b7:38:7a:d4:a2:08:38:76:44:
32:a0:1e:30:e5:08:c4:a9:be:2c:21:d2:b3:15:7e:f8:ce:19:
1b:b8:54:1b:e6:97:4e:46:94:11:28:2b:ea:65:01:b1:a4:87:
97:f3:90:9d:fa:ea:e5:48:1a:ac:6d:21:5b:f4:0f:00:c0:69:
ff:03:f5:bc:aa:c8:93:c2:a7:da:fe:ca:54:4c:83:86:34:b6:
ba:91:22:c6:16:59:34:14:b7:aa:ff:45:40:79:87:dd:90:3d:
9a:2c:aa:19:70:9a:39:86:06:c3:8f:c2:53:8e:d2:7f:ca:b2:
21:aa:71:39:63:36:c6:9c:f4:2e:eb:1b:c3:67:c6:12:12:4b:
d8:df:2e:7b:5b:77:00:6d:ba:9d:27:2b:e2:8a:ab:dc:f1:fa:
06:5c:33:1a:2e:29:fc:ce:c7:26:9e:75:ed:1b:9f:15:a1:f3:
a9:e2:cd:04:94:f6:47:83:45:f5:2b:fc:05:25:a3:cd:b3:21:
14:df:c5:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbaxMNbxws5UnPKZ58U0iROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NTYwYmVhMzkyZWFmNjkyMDhhYjcwNWVmNDA1Y2Y3ODY4
NDE3NmIwHhcNMjUwNTE2MjAyNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTQwYWM4ZGFmZmQzNzU2Y2RlZDNlMmVhNTg0NzI5NWQ3MDY2ZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9XlY/3WwjtblE/kl/Wd2bDypyUN
XpyWTTrYCVajgbBKMLdrfZMkgqVO3kHH9fIoOtPxQVnjydbhXawkbmcRFzvNJZhy
kUSWori9t4osjE0vNm58F7gkOOh6iuaD5VPAH5JbCsgbQYJV/5CV79s0RUm5aG5e
IT0XZlONVRPUhnOBwklLqGVx4PEq73JS5iv73XUhbllmGUQUdpMmx3UwSCn0OYpo
c4tVAwnthSHLyHPmmpbmqX8pAktMCloneotKNHT412fCfUiix2d1tjEPbOEF6JcO
C/8yDKNP9OmMhYDlszz4+8d6MCs7HIya1yMEN6hDCiqcJdxEFbL6fxXzzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLpArI2v/TdWze0+LqWEcpXXBm5PMB8GA1UdIwQY
MBaAFARWC+o5Lq9pIIq3Be9AXPeGhBdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2Mt
ZTFhY2EwMTA2MmZmLzEvdWtDc2phXzlOMWJON1Q0dXBZUnlsZGNHYms4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2MtZTFhY2EwMTA2MmZm
LzEvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBua24MA0G
CSqGSIb3DQEBCwUAA4IBAQBSEKCQMnOp2/XEL69CcRvDT1OPAHfQ/pJ9mh8ozASq
A18lEnW9WtWjohaSeWcJ32IMgvpxhvLrHFMB5Lq4xb23OHrUogg4dkQyoB4w5QjE
qb4sIdKzFX74zhkbuFQb5pdORpQRKCvqZQGxpIeX85Cd+urlSBqsbSFb9A8AwGn/
A/W8qsiTwqfa/spUTIOGNLa6kSLGFlk0FLeq/0VAeYfdkD2aLKoZcJo5hgbDj8JT
jtJ/yrIhqnE5YzbGnPQu6xvDZ8YSEkvY3y57W3cAbbqdJyviiqvc8foGXDMaLin8
zscmnnXtG58VofOp4s0ElPZHg0X1K/wFJaPNsyEU38Xq
-----END CERTIFICATE-----
Generated at Tue Jun 17 21:55:00 2025 by rpki-client