Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/RPukhcxHXHHaOlFIZceOg6dXgDc.roa
File: RPukhcxHXHHaOlFIZceOg6dXgDc.roa (raw, json)
Hash identifier: 2d6UTzCWpu2qEqOSDi2pmvhWGb52cxWeRj7t0z7oiF0=
Subject key identifier: 44:FB:A4:85:CC:47:5C:71:DA:3A:51:48:65:C7:8E:83:A7:57:80:37
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 0186A6CC423B555D37E42442B49A4E3A830C
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/RPukhcxHXHHaOlFIZceOg6dXgDc.roa
Signing time: Fri 03 Mar 2023 09:27:29 +0000
ROA not before: Fri 03 Mar 2023 09:27:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48716
IP address blocks: 80.90.180.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:cc:42:3b:55:5d:37:e4:24:42:b4:9a:4e:3a:83:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Mar 3 09:27:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44fba485cc475c71da3a514865c78e83a7578037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:54:eb:10:04:95:22:5a:d4:02:fc:a6:40:9a:
17:d7:76:db:90:cc:64:08:04:85:7f:d3:5b:31:59:
47:62:99:ba:ec:55:10:28:82:90:f8:6a:cb:1e:ec:
98:93:93:f4:bc:ed:b6:9f:b7:14:4e:82:14:1d:4e:
84:33:9a:14:f5:78:d7:73:d2:80:34:c0:1b:96:a4:
b3:75:ba:6a:ba:85:d6:3f:4c:33:65:ef:97:d7:11:
0c:73:36:cb:8e:a1:a2:f5:88:ac:6d:82:47:b7:37:
15:2e:bc:8b:c7:00:5f:e1:fb:2e:4a:ab:30:14:a5:
bf:36:94:23:5f:00:ce:5e:2d:2e:89:dc:9b:5b:86:
57:09:6c:a2:bf:a8:16:d3:88:25:c0:25:d3:e7:40:
6b:97:e7:d3:27:5a:3e:88:25:30:8f:91:ed:75:9a:
82:eb:21:4e:6a:32:29:4a:e1:b9:b3:e9:89:42:f5:
37:5f:31:ae:1f:2c:9a:c6:84:c9:21:62:8f:fc:10:
db:ee:f8:0c:a3:51:d1:07:f3:3a:db:88:a5:89:28:
0e:af:ff:01:36:51:e5:7d:d9:3c:f0:2e:7e:13:17:
64:bf:71:06:aa:c7:98:29:0b:55:36:7a:b9:d2:52:
ef:be:3a:5f:ca:5c:83:d5:d9:0f:4a:3a:f1:01:0b:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FB:A4:85:CC:47:5C:71:DA:3A:51:48:65:C7:8E:83:A7:57:80:37
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/RPukhcxHXHHaOlFIZceOg6dXgDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.180.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:11:8e:27:71:47:f8:9e:74:02:c1:5a:d1:ec:70:1e:04:bb:
95:25:21:af:e1:ce:af:2a:37:db:23:e2:9e:64:fc:99:20:d0:
88:3e:8d:f7:64:36:b1:e7:b5:cc:5f:95:1d:bb:eb:86:41:84:
bb:be:b1:34:b1:62:3e:70:18:45:88:63:af:81:8e:bb:cc:be:
b4:1a:ee:c1:fb:56:bf:d8:d2:42:ad:94:c0:0f:34:86:68:c7:
8b:7b:b9:13:1e:31:10:b1:df:3f:d0:a1:ce:46:ff:94:4d:b9:
61:24:98:5e:8c:6a:c2:59:a2:90:78:dc:6a:24:74:54:6d:7f:
c9:96:17:ed:5d:bf:58:a1:15:de:b7:d6:a3:35:0b:86:21:de:
37:a9:a6:47:17:8d:e5:8d:3d:b5:2c:4b:ac:12:bd:b6:cf:44:
d7:9e:36:cc:f9:40:c9:32:69:0b:44:d4:a5:63:ce:6d:18:10:
13:fc:55:97:48:45:15:4a:6a:bf:7f:65:fb:03:6d:0f:f6:5e:
24:0a:e0:8a:5f:83:3b:25:cb:53:1e:33:28:d7:b6:0a:7b:94:
0e:d1:5e:24:8e:8e:4f:4d:30:3c:4a:b1:0b:b2:7e:92:7e:6b:
28:66:05:2d:5c:69:ec:4f:cf:cd:71:0c:2e:7f:04:93:b3:68:
6f:65:5a:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYamzEI7VV035CRCtJpOOoMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2
N2VmMTMwHhcNMjMwMzAzMDkyNzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGZiYTQ4NWNjNDc1YzcxZGEzYTUxNDg2NWM3OGU4M2E3NTc4MDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFTrEASVIlrUAvymQJoX13bbkMxk
CASFf9NbMVlHYpm67FUQKIKQ+GrLHuyYk5P0vO22n7cUToIUHU6EM5oU9XjXc9KA
NMAblqSzdbpquoXWP0wzZe+X1xEMczbLjqGi9YisbYJHtzcVLryLxwBf4fsuSqsw
FKW/NpQjXwDOXi0uidybW4ZXCWyiv6gW04glwCXT50Brl+fTJ1o+iCUwj5HtdZqC
6yFOajIpSuG5s+mJQvU3XzGuHyyaxoTJIWKP/BDb7vgMo1HRB/M624iliSgOr/8B
NlHlfdk88C5+Exdkv3EGqseYKQtVNnq50lLvvjpfylyD1dkPSjrxAQv4LwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFET7pIXMR1xx2jpRSGXHjoOnV4A3MB8GA1UdIwQY
MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt
YjI1MDk5N2ZjNzVkLzEvUlB1a2hjeEhYSEhhT2xGSVpjZU9nNmRYZ0RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk
LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUFq0MA0G
CSqGSIb3DQEBCwUAA4IBAQAKEY4ncUf4nnQCwVrR7HAeBLuVJSGv4c6vKjfbI+Ke
ZPyZINCIPo33ZDax57XMX5Udu+uGQYS7vrE0sWI+cBhFiGOvgY67zL60Gu7B+1a/
2NJCrZTADzSGaMeLe7kTHjEQsd8/0KHORv+UTblhJJhejGrCWaKQeNxqJHRUbX/J
lhftXb9YoRXet9ajNQuGId43qaZHF43ljT21LEusEr22z0TXnjbM+UDJMmkLRNSl
Y85tGBAT/FWXSEUVSmq/f2X7A20P9l4kCuCKX4M7JctTHjMo17YKe5QO0V4kjo5P
TTA8SrELsn6SfmsoZgUtXGnsT8/NcQwufwSTs2hvZVoY
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:41 2023 by rpki-client on console-fra.rpki-client.org