Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UYS8n1qFkkiQzHvMqbkcJvgvqow.roa
File: UYS8n1qFkkiQzHvMqbkcJvgvqow.roa (raw, json)
Hash identifier: uxozOQMz4k2Ow60+f9pNc5lqrHY3a1ZciijXAUWOF4o=
Subject key identifier: 51:84:BC:9F:5A:85:92:48:90:CC:7B:CC:A9:B9:1C:26:F8:2F:AA:8C
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018586AED149490EEE976EED4341C7D18B39
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UYS8n1qFkkiQzHvMqbkcJvgvqow.roa
Signing time: Fri 06 Jan 2023 10:44:41 +0000
ROA not before: Fri 06 Jan 2023 10:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 80.71.227.0/24 maxlen: 24
80.71.239.0/24 maxlen: 24
80.71.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:ae:d1:49:49:0e:ee:97:6e:ed:43:41:c7:d1:8b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 6 10:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5184bc9f5a85924890cc7bcca9b91c26f82faa8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:67:6c:26:06:fa:4d:19:1f:9e:b1:ab:74:
12:ea:b1:1b:66:71:d1:66:b6:31:a9:75:cb:ca:2c:
09:08:74:1e:74:bf:5c:d9:f8:77:3d:db:77:4a:5d:
3d:94:e5:7a:98:d7:ed:1d:2e:5e:22:c3:4e:ec:f1:
db:5d:7f:c5:6d:e4:65:63:77:d2:8e:e1:ce:c5:f8:
9a:23:3f:62:a9:0c:ab:2a:bc:4a:12:3b:56:eb:e6:
e2:38:3a:b0:f0:0f:fb:dd:bf:f8:ec:0e:c2:89:4d:
55:1c:a2:89:30:32:db:3f:53:e6:62:b2:3d:94:f2:
5f:e6:35:cc:a1:69:05:75:72:02:82:ff:f8:fc:73:
c6:23:8d:74:7a:ba:1d:21:10:8f:4c:03:e0:07:5f:
8a:a7:e0:6a:14:1c:7a:2b:39:03:85:45:78:bb:85:
bf:3b:a7:83:c9:02:f1:a3:6b:43:b4:2a:fb:d1:dc:
62:39:e7:06:11:19:d8:f8:f5:2f:8b:d3:c6:a2:9b:
27:02:30:f2:16:96:e7:3e:2b:38:8b:fa:83:84:ec:
c5:6c:12:ac:42:ed:bb:94:52:60:76:5e:cd:1c:4f:
fd:27:8e:87:5c:89:33:0d:0f:f2:4a:fe:22:be:f3:
09:bc:4d:62:c1:c0:5c:73:e4:d7:6a:f7:a3:0a:76:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:84:BC:9F:5A:85:92:48:90:CC:7B:CC:A9:B9:1C:26:F8:2F:AA:8C
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UYS8n1qFkkiQzHvMqbkcJvgvqow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.227.0/24
80.71.234.0/24
80.71.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c5:7c:50:58:89:4a:71:fa:e1:9d:ff:5a:9e:68:71:24:63:
5b:d8:2f:97:d9:4f:48:f9:d8:8a:3d:79:ba:20:bb:e8:9e:fe:
cf:b4:9f:b9:06:75:14:3e:a2:6d:88:f2:41:c2:50:79:71:ac:
a9:db:30:ec:d8:48:b8:ad:60:5f:05:47:39:af:18:d2:3a:6c:
6c:a3:ae:62:27:ae:a8:0e:18:a8:97:25:6e:13:14:b1:e1:c5:
55:6c:4b:8b:8d:e7:b9:09:9b:7f:5f:ea:89:92:3b:03:3d:e6:
c5:2b:b0:21:9f:83:42:f7:0f:af:a2:11:ba:09:a2:17:0d:39:
5a:b6:62:0f:a7:69:fe:1c:ac:91:ad:0c:fb:50:86:1b:86:40:
bf:48:48:2a:ef:d6:a9:74:96:5f:cd:ba:a8:7f:87:d3:1c:61:
6a:19:3a:1a:96:d5:62:6a:4c:9e:b9:66:9c:ee:e8:35:81:ef:
fe:b9:5a:fb:97:63:05:e4:37:1b:90:a6:57:a6:b8:f3:46:b1:
2d:aa:9a:a2:cb:70:ce:fc:9e:f9:35:ce:dd:ba:d5:4a:bf:b6:
38:39:9d:cf:6d:c4:fd:6f:c9:d9:30:a4:08:38:87:13:1d:2c:
5a:9a:78:03:e0:6c:72:49:dc:2d:92:f5:ff:cb:a3:8d:2b:c3:
43:0d:19:4b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYWGrtFJSQ7ul27tQ0HH0Ys5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjMwMTA2MTA0NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTg0YmM5ZjVhODU5MjQ4OTBjYzdiY2NhOWI5MWMyNmY4MmZhYThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDNnbCYG+k0ZH56xq3QS6rEbZnHR
ZrYxqXXLyiwJCHQedL9c2fh3Pdt3Sl09lOV6mNftHS5eIsNO7PHbXX/FbeRlY3fS
juHOxfiaIz9iqQyrKrxKEjtW6+biODqw8A/73b/47A7CiU1VHKKJMDLbP1PmYrI9
lPJf5jXMoWkFdXICgv/4/HPGI410erodIRCPTAPgB1+Kp+BqFBx6KzkDhUV4u4W/
O6eDyQLxo2tDtCr70dxiOecGERnY+PUvi9PGopsnAjDyFpbnPis4i/qDhOzFbBKs
Qu27lFJgdl7NHE/9J46HXIkzDQ/ySv4ivvMJvE1iwcBcc+TXavejCnYTXwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFGEvJ9ahZJIkMx7zKm5HCb4L6qMMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvVVlTOG4xcUZra2lRekh2TXFia2NKdmd2cW93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUEfjAwQA
UEfqAwQAUEfvMA0GCSqGSIb3DQEBCwUAA4IBAQBfxXxQWIlKcfrhnf9anmhxJGNb
2C+X2U9I+diKPXm6ILvonv7PtJ+5BnUUPqJtiPJBwlB5cayp2zDs2Ei4rWBfBUc5
rxjSOmxso65iJ66oDhiolyVuExSx4cVVbEuLjee5CZt/X+qJkjsDPebFK7Ahn4NC
9w+vohG6CaIXDTlatmIPp2n+HKyRrQz7UIYbhkC/SEgq79apdJZfzbqof4fTHGFq
GToaltViakyeuWac7ug1ge/+uVr7l2MF5DcbkKZXprjzRrEtqpqiy3DO/J75Nc7d
utVKv7Y4OZ3PbcT9b8nZMKQIOIcTHSxamngD4GxySdwtkvX/y6ONK8NDDRlL
-----END CERTIFICATE-----
Generated at Mon Sep 4 05:33:23 2023 by rpki-client on console-fra.rpki-client.org