Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Ug1259YPtgbNJZZZLEIKX6aHFh0.roa
File: Ug1259YPtgbNJZZZLEIKX6aHFh0.roa (raw, json)
Hash identifier: 6uNDINliqO363u5AkuhCpZrs34odG0Qkfo9McpIf/7Q=
Subject key identifier: 52:0D:76:E7:D6:0F:B6:06:CD:25:96:59:2C:42:0A:5F:A6:87:16:1D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0188E3F926B02D5978AF037FEA3D94DE9A06
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Ug1259YPtgbNJZZZLEIKX6aHFh0.roa
Signing time: Thu 22 Jun 2023 16:38:56 +0000
ROA not before: Thu 22 Jun 2023 16:38:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 91.223.110.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
2.56.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:f9:26:b0:2d:59:78:af:03:7f:ea:3d:94:de:9a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 22 16:38:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=520d76e7d60fb606cd2596592c420a5fa687161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:42:f4:57:ac:b6:a1:52:c4:46:4a:b7:84:
59:f4:97:71:ec:9b:b6:0e:48:60:e8:92:91:60:23:
a3:46:9e:e2:0f:83:a7:9a:8d:6c:7c:95:9d:67:86:
a1:63:91:06:40:50:82:a1:7b:f7:be:ed:50:4c:f3:
4f:ec:f6:16:33:67:87:64:df:dc:92:45:54:fd:3d:
f8:01:53:86:bf:b9:de:03:0b:ce:0d:43:70:6f:c3:
36:76:dd:12:de:83:b4:ee:7c:04:df:aa:f8:8c:79:
40:0d:88:bb:67:91:4e:d6:b9:33:69:27:73:e5:4f:
76:93:7a:ea:9f:c5:4e:2f:52:84:e8:a7:92:5a:31:
33:8a:01:8d:a4:be:69:11:2e:84:a0:02:7f:46:ef:
56:fd:a3:e4:1f:fc:5e:c4:b0:0b:0e:0c:c5:ae:c9:
9b:78:c6:0b:9e:a3:24:00:f9:6a:7e:18:46:c2:ed:
92:ef:6c:de:e4:3e:0d:bc:fb:60:7c:cb:c2:74:ed:
e7:25:06:02:93:d3:da:99:ad:ba:2f:9d:55:8f:5d:
dc:ce:9d:f2:cf:ef:5b:35:9c:e3:2d:75:04:67:16:
74:71:fd:08:b1:f0:d0:e7:9a:eb:7a:60:d7:cf:24:
99:72:84:14:05:5b:92:dc:a5:ee:b9:97:fe:33:72:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0D:76:E7:D6:0F:B6:06:CD:25:96:59:2C:42:0A:5F:A6:87:16:1D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Ug1259YPtgbNJZZZLEIKX6aHFh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
91.223.110.0/24
193.57.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d0:64:f0:ec:f6:cc:57:b5:3f:32:25:7f:e9:66:e3:ff:8f:
42:e8:50:51:cb:9a:a0:48:ab:1e:da:c1:3d:da:a8:71:61:7b:
3c:19:e0:a7:9f:59:6c:f8:5e:26:86:22:c4:d4:3f:eb:83:1f:
f4:7d:38:b0:07:ff:93:e8:b0:c7:bb:02:5c:e7:c2:ec:6e:91:
2a:7a:51:06:71:5c:2d:96:5f:63:8c:b5:04:a0:6f:c3:a6:6f:
be:e1:12:c6:1d:ff:d1:69:c0:e6:e9:05:44:18:0f:bb:c6:d2:
a9:b6:14:46:02:60:6f:c3:68:50:32:24:6b:14:e2:c9:e4:56:
7d:dc:07:58:18:9b:75:58:86:4e:ed:00:4d:3b:86:ff:3d:d0:
80:59:f0:43:5e:23:37:61:99:04:02:96:e5:46:ff:2c:7f:39:
16:c5:46:a3:70:7e:69:33:f2:9c:90:0d:1c:30:c2:aa:ad:f7:
cd:f2:85:e1:68:d4:72:c7:aa:80:2f:57:4c:35:93:be:3f:80:
bb:f5:e4:4e:27:6d:60:7c:fa:a1:d1:d5:e2:4c:f6:58:4b:66:
d1:9c:20:ed:be:fc:86:7f:10:15:7d:45:b0:04:d5:5c:99:65:
9f:bd:d2:54:1a:4c:6c:16:e8:c4:9d:5a:11:98:17:d2:a8:9f:
1a:91:7f:d5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYjj+SawLVl4rwN/6j2U3poGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwNjIyMTYzODU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjBkNzZlN2Q2MGZiNjA2Y2QyNTk2NTkyYzQyMGE1ZmE2ODcxNjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJBC9FestqFSxEZKt4RZ9Jdx7Ju2
Dkhg6JKRYCOjRp7iD4Onmo1sfJWdZ4ahY5EGQFCCoXv3vu1QTPNP7PYWM2eHZN/c
kkVU/T34AVOGv7neAwvODUNwb8M2dt0S3oO07nwE36r4jHlADYi7Z5FO1rkzaSdz
5U92k3rqn8VOL1KE6KeSWjEzigGNpL5pES6EoAJ/Ru9W/aPkH/xexLALDgzFrsmb
eMYLnqMkAPlqfhhGwu2S72ze5D4NvPtgfMvCdO3nJQYCk9Pama26L51Vj13czp3y
z+9bNZzjLXUEZxZ0cf0IsfDQ55rremDXzySZcoQUBVuS3KXuuZf+M3LEDwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFINdufWD7YGzSWWWSxCCl+mhxYdMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvVWcxMjU5WVB0Z2JOSlpaWkxFSUtYNmFIRmgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCAjhsAwQA
W99uAwQAwTkpMA0GCSqGSIb3DQEBCwUAA4IBAQBe0GTw7PbMV7U/MiV/6Wbj/49C
6FBRy5qgSKse2sE92qhxYXs8GeCnn1ls+F4mhiLE1D/rgx/0fTiwB/+T6LDHuwJc
58LsbpEqelEGcVwtll9jjLUEoG/Dpm++4RLGHf/RacDm6QVEGA+7xtKpthRGAmBv
w2hQMiRrFOLJ5FZ93AdYGJt1WIZO7QBNO4b/PdCAWfBDXiM3YZkEApblRv8sfzkW
xUajcH5pM/KckA0cMMKqrffN8oXhaNRyx6qAL1dMNZO+P4C79eROJ21gfPqh0dXi
TPZYS2bRnCDtvvyGfxAVfUWwBNVcmWWfvdJUGkxsFujEnVoRmBfSqJ8akX/V
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org