Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UVKEAAl8XXJc5ltiPOvjiHOCg_4.roa
File: UVKEAAl8XXJc5ltiPOvjiHOCg_4.roa (raw, json)
Hash identifier: 7sUyEVkKLxHM9IEV/o0Kea0xUvbnhZIBJGl3lIjTX9k=
Subject key identifier: 51:52:84:00:09:7C:5D:72:5C:E6:5B:62:3C:EB:E3:88:73:82:83:FE
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018A69067EAFCBD7896F264D456382C6B62D
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UVKEAAl8XXJc5ltiPOvjiHOCg_4.roa
Signing time: Wed 06 Sep 2023 05:45:47 +0000
ROA not before: Wed 06 Sep 2023 05:45:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47585
IP address blocks: 80.71.230.0/24 maxlen: 24
81.29.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:06:7e:af:cb:d7:89:6f:26:4d:45:63:82:c6:b6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 6 05:45:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51528400097c5d725ce65b623cebe388738283fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:e8:45:ed:5a:a1:84:72:49:62:23:b1:e3:
1c:b6:9b:be:46:8c:4d:d5:cd:e3:9e:96:77:0d:05:
b5:a3:ca:4b:72:cf:c1:35:38:3c:94:9a:5e:bc:97:
bb:c1:58:fc:f6:91:55:3f:21:99:34:f5:8f:93:3b:
0b:ab:bd:19:c2:21:24:38:16:0a:58:59:2f:2d:f1:
fe:cb:58:1b:a3:21:8b:bc:6f:c6:19:ab:29:c7:81:
ad:88:db:51:48:b9:1e:af:97:3f:22:4a:26:73:a4:
30:06:70:84:ad:d1:66:de:6b:cc:5f:bc:6b:e9:da:
34:d1:c1:2b:41:58:4d:99:ac:96:de:1c:e4:51:85:
6a:9c:87:8e:e4:86:bb:50:39:a4:83:24:6d:c5:d5:
f0:6d:76:9c:b8:86:32:95:ca:32:d9:82:cd:c4:ac:
b7:e5:09:8b:61:bf:da:2d:23:16:4f:b6:81:14:6c:
56:f9:ac:62:e9:6f:0f:8d:b5:62:cf:46:2c:9b:ad:
7d:97:35:a7:93:ab:26:2f:fe:bb:14:52:d9:20:de:
db:3f:e6:79:1e:bc:28:f6:ec:01:8c:02:bd:1e:49:
41:33:88:db:15:f6:b2:b4:4b:b5:63:49:26:ba:aa:
4a:02:68:e8:e3:73:2f:aa:fc:db:3b:65:5f:00:ca:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:52:84:00:09:7C:5D:72:5C:E6:5B:62:3C:EB:E3:88:73:82:83:FE
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UVKEAAl8XXJc5ltiPOvjiHOCg_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.230.0/24
81.29.157.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a6:92:00:88:67:40:5c:9b:79:51:cd:52:5f:94:cd:c6:44:
ab:0c:ac:f7:10:ff:e3:ce:1f:0c:b9:29:10:3a:21:9c:b4:b9:
a0:56:bd:41:92:d1:b3:84:e8:aa:44:c5:5b:70:51:11:ea:ee:
b9:00:23:cd:c1:3f:a0:1b:58:47:0f:64:71:99:3d:57:93:d8:
68:8a:9d:8b:db:55:07:1a:ef:60:f0:0b:57:2b:82:23:20:aa:
56:5c:d4:28:45:40:5a:6c:6b:e5:42:ae:fa:25:b9:cf:1f:1c:
15:8c:9e:7d:dc:22:6f:a8:61:8e:9b:6e:4e:d3:e9:ea:6b:25:
3a:09:99:69:89:a2:7e:08:37:5c:7e:cb:99:8a:c8:ba:a1:0c:
97:40:0f:27:0e:0f:e1:e0:bd:08:8b:99:f2:38:e0:4c:ca:45:
4f:e1:af:93:c1:dd:8f:c5:94:2c:a0:93:63:64:0e:bc:b1:7b:
2d:0c:84:aa:31:26:2b:15:ae:78:63:14:37:ed:ff:79:2f:b8:
0c:5c:52:c4:ec:dd:fc:51:12:e0:9d:56:e8:9c:d0:91:7e:28:
87:ee:b5:20:62:60:5f:3d:b7:00:60:8f:9a:5f:76:a9:40:3c:
35:57:ef:08:0a:ca:53:d0:08:85:28:3d:e1:8c:fa:4f:fe:23:
19:c4:8a:ce
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYppBn6vy9eJbyZNRWOCxrYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjMwOTA2MDU0NTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTUyODQwMDA5N2M1ZDcyNWNlNjViNjIzY2ViZTM4ODczODI4M2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfLoRe1aoYRySWIjseMctpu+RoxN
1c3jnpZ3DQW1o8pLcs/BNTg8lJpevJe7wVj89pFVPyGZNPWPkzsLq70ZwiEkOBYK
WFkvLfH+y1gboyGLvG/GGaspx4GtiNtRSLker5c/Ikomc6QwBnCErdFm3mvMX7xr
6do00cErQVhNmayW3hzkUYVqnIeO5Ia7UDmkgyRtxdXwbXacuIYylcoy2YLNxKy3
5QmLYb/aLSMWT7aBFGxW+axi6W8PjbViz0Ysm619lzWnk6smL/67FFLZIN7bP+Z5
Hrwo9uwBjAK9HklBM4jbFfaytEu1Y0kmuqpKAmjo43MvqvzbO2VfAMqXvwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFFShAAJfF1yXOZbYjzr44hzgoP+MB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvVVZLRUFBbDhYWEpjNWx0aVBPdmppSE9DZ180LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEfmAwQA
UR2dMA0GCSqGSIb3DQEBCwUAA4IBAQCTppIAiGdAXJt5Uc1SX5TNxkSrDKz3EP/j
zh8MuSkQOiGctLmgVr1BktGzhOiqRMVbcFER6u65ACPNwT+gG1hHD2RxmT1Xk9ho
ip2L21UHGu9g8AtXK4IjIKpWXNQoRUBabGvlQq76JbnPHxwVjJ593CJvqGGOm25O
0+nqayU6CZlpiaJ+CDdcfsuZisi6oQyXQA8nDg/h4L0Ii5nyOOBMykVP4a+Twd2P
xZQsoJNjZA68sXstDISqMSYrFa54YxQ37f95L7gMXFLE7N38URLgnVbonNCRfiiH
7rUgYmBfPbcAYI+aX3apQDw1V+8ICspT0AiFKD3hjPpP/iMZxIrO
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:02 2024 by rpki-client on console-fra.rpki-client.org