Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Uc-J6cfH_UmBff93wIyPeFfQhmg.roa
File: Uc-J6cfH_UmBff93wIyPeFfQhmg.roa (raw, json)
Hash identifier: NjNYBhmWLA4w9OvPOFKAgNZZLmJQn18IDB9E8UqktbE=
Subject key identifier: 51:CF:89:E9:C7:C7:FD:49:81:7D:FF:77:C0:8C:8F:78:57:D0:86:68
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01865EA638D14BC0462E4E951F62DFE74EC5
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Uc-J6cfH_UmBff93wIyPeFfQhmg.roa
Signing time: Fri 17 Feb 2023 09:13:17 +0000
ROA not before: Fri 17 Feb 2023 09:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206077
IP address blocks: 217.26.188.0/22 maxlen: 22
217.26.188.0/23 maxlen: 23
185.226.192.0/23 maxlen: 24
217.26.188.0/24 maxlen: 24
217.26.189.0/24 maxlen: 24
201.49.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:a6:38:d1:4b:c0:46:2e:4e:95:1f:62:df:e7:4e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Feb 17 09:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51cf89e9c7c7fd49817dff77c08c8f7857d08668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:a1:b2:27:98:55:6f:21:00:9d:09:06:43:
c8:37:eb:cb:83:22:d5:7e:4a:45:f0:60:39:ac:4d:
0d:0e:82:50:23:fc:b3:c4:bf:b1:6f:f7:07:b7:8e:
c2:67:e4:63:88:24:3d:6f:85:25:d1:f7:bd:e8:34:
de:d2:54:21:cc:71:03:df:60:bf:e6:97:31:b3:7f:
ef:6f:5b:1d:65:65:13:30:a0:fa:94:82:94:5c:88:
6b:e5:0a:af:1a:0f:60:2d:df:63:49:d6:de:e4:53:
32:b3:b8:a3:72:57:46:7e:78:af:1a:3b:ac:8d:ae:
14:5f:4e:d7:69:02:4c:2a:af:83:dc:9c:96:4c:8e:
83:ac:98:7a:50:c5:64:98:34:eb:c0:b9:03:9c:f0:
9a:ef:97:f3:2f:19:01:ac:56:4b:b5:be:5b:da:41:
c6:81:58:8e:f4:06:62:b8:4f:a9:54:16:d3:5d:20:
d9:58:06:d9:e2:75:be:03:2b:29:58:aa:c2:1f:d3:
07:18:2d:20:1b:70:dc:30:ee:f8:38:1a:86:b2:76:
00:d4:0c:be:0f:96:03:75:5a:fe:5f:79:86:a3:70:
fb:77:00:42:2d:66:dd:bd:66:3f:08:94:eb:d2:ca:
42:d6:66:2f:d2:bd:e1:95:0e:d1:d3:4a:97:ca:dc:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CF:89:E9:C7:C7:FD:49:81:7D:FF:77:C0:8C:8F:78:57:D0:86:68
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Uc-J6cfH_UmBff93wIyPeFfQhmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.192.0/23
201.49.191.0/24
217.26.188.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:e5:27:d8:f9:03:cb:84:cb:d3:52:ea:85:82:ab:09:4b:cb:
57:21:cc:c0:41:17:a1:4e:a3:73:b4:22:a2:85:6b:fa:d7:73:
51:4f:6f:f4:b1:63:b5:3c:81:22:da:57:a5:c0:15:95:a8:84:
3a:03:5d:b8:60:93:57:ff:18:16:8f:d5:43:e4:df:30:e2:a0:
ef:7f:35:92:96:b1:af:d5:bf:ef:9b:42:6a:4b:4e:fe:00:50:
8a:22:5a:1d:1b:c4:88:5f:cd:af:55:98:ed:be:9a:fb:83:fd:
a0:d2:08:90:25:88:6c:5a:06:d0:d8:56:c8:0b:da:05:ab:31:
60:8e:ba:4a:da:ee:54:cf:61:b5:af:e8:b6:64:9f:5c:4b:36:
6f:f1:5b:27:c2:1e:64:9d:28:1c:af:7f:f2:58:e3:48:19:d6:
4a:50:aa:0a:14:b0:d9:41:25:5c:a6:54:27:d1:81:64:4d:29:
a8:39:47:0a:63:c0:9a:0f:bc:7e:f1:18:90:35:ff:99:70:03:
3f:c5:1c:a2:3e:09:58:99:9b:ab:e8:4e:ba:8f:96:c4:2f:ec:
c8:ae:86:b2:1b:ec:55:33:ad:3e:a4:07:9b:cf:d6:c2:ab:84:
74:cd:32:08:25:f3:15:e1:db:93:f6:57:aa:ea:ee:97:20:28:
17:cf:4b:e0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYZepjjRS8BGLk6VH2Lf507FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwMjE3MDkxMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWNmODllOWM3YzdmZDQ5ODE3ZGZmNzdjMDhjOGY3ODU3ZDA4NjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp6hsieYVW8hAJ0JBkPIN+vLgyLV
fkpF8GA5rE0NDoJQI/yzxL+xb/cHt47CZ+RjiCQ9b4Ul0fe96DTe0lQhzHED32C/
5pcxs3/vb1sdZWUTMKD6lIKUXIhr5QqvGg9gLd9jSdbe5FMys7ijcldGfnivGjus
ja4UX07XaQJMKq+D3JyWTI6DrJh6UMVkmDTrwLkDnPCa75fzLxkBrFZLtb5b2kHG
gViO9AZiuE+pVBbTXSDZWAbZ4nW+AyspWKrCH9MHGC0gG3DcMO74OBqGsnYA1Ay+
D5YDdVr+X3mGo3D7dwBCLWbdvWY/CJTr0spC1mYv0r3hlQ7R00qXytyYJQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFHPienHx/1JgX3/d8CMj3hX0IZoMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvVWMtSjZjZkhfVW1CZmY5M3dJeVBlRmZRaG1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBueLAAwQA
yTG/AwQC2Rq8MA0GCSqGSIb3DQEBCwUAA4IBAQDG5SfY+QPLhMvTUuqFgqsJS8tX
IczAQRehTqNztCKihWv613NRT2/0sWO1PIEi2lelwBWVqIQ6A124YJNX/xgWj9VD
5N8w4qDvfzWSlrGv1b/vm0JqS07+AFCKIlodG8SIX82vVZjtvpr7g/2g0giQJYhs
WgbQ2FbIC9oFqzFgjrpK2u5Uz2G1r+i2ZJ9cSzZv8Vsnwh5knSgcr3/yWONIGdZK
UKoKFLDZQSVcplQn0YFkTSmoOUcKY8CaD7x+8RiQNf+ZcAM/xRyiPglYmZur6E66
j5bEL+zIroayG+xVM60+pAebz9bCq4R0zTIIJfMV4duT9leq6u6XICgXz0vg
-----END CERTIFICATE-----
Generated at Wed Aug 9 15:28:19 2023 by rpki-client on console-fra.rpki-client.org