Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/UACEslCF4a9sMJb2K4VUZmK6v34.roa
File: UACEslCF4a9sMJb2K4VUZmK6v34.roa (raw, json)
Hash identifier: a8mwZMXvXv0MmVEjEzTYyWVZ5AuJ2GlkUpYLf/fV7rw=
Subject key identifier: 50:00:84:B2:50:85:E1:AF:6C:30:96:F6:2B:85:54:66:62:BA:BF:7E
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 0186A6CC4554D05E5529B304EE1B82D42C2D
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/UACEslCF4a9sMJb2K4VUZmK6v34.roa
Signing time: Fri 03 Mar 2023 09:27:30 +0000
ROA not before: Fri 03 Mar 2023 09:27:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207967
IP address blocks: 80.90.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:cc:45:54:d0:5e:55:29:b3:04:ee:1b:82:d4:2c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Mar 3 09:27:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=500084b25085e1af6c3096f62b85546662babf7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:4b:9d:fd:0e:0c:75:8b:99:5b:89:1d:c4:
53:16:77:75:5c:92:44:97:b7:c9:3d:be:96:ad:36:
9e:4c:e5:dc:3d:7a:83:11:2c:5d:6e:9c:99:c6:47:
4d:f0:fe:53:1f:f6:8f:71:43:d5:68:bf:8a:59:7c:
8f:ba:59:e7:94:c1:9c:ba:fc:c5:22:71:ad:33:b0:
11:6e:56:bf:aa:b1:32:63:b1:93:b0:82:b0:79:97:
61:10:be:6e:ca:28:54:f3:4f:3c:34:44:94:89:7d:
fe:78:06:11:3d:93:12:f9:24:4b:9a:35:80:0c:72:
70:fe:8d:98:c8:dd:7a:84:d4:11:ba:c6:f2:30:48:
a5:01:44:4b:88:84:08:1d:61:7c:af:e6:0b:cb:da:
8b:96:cf:f6:a2:07:f3:16:94:82:47:f4:2b:76:c8:
46:51:14:2a:e1:d8:58:14:61:1e:fe:97:b4:54:cd:
51:e9:22:04:fb:c9:29:8b:af:3e:42:d8:dd:53:88:
52:ac:91:c9:72:d8:00:ff:05:a6:7c:1f:32:1d:c1:
14:b5:2e:cf:58:66:3a:61:32:fb:c5:cb:d6:5e:7b:
ed:cc:0f:14:1c:0a:82:b4:d7:b8:17:80:d0:2b:81:
9f:02:c0:69:d8:fd:84:eb:3d:41:6a:dd:c0:b6:4e:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:00:84:B2:50:85:E1:AF:6C:30:96:F6:2B:85:54:66:62:BA:BF:7E
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/UACEslCF4a9sMJb2K4VUZmK6v34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.184.0/22
Signature Algorithm: sha256WithRSAEncryption
55:5a:38:40:8a:ea:1f:c6:68:44:aa:c3:0a:b2:ea:a1:07:7c:
a2:e5:d2:5a:c9:93:40:d6:02:f6:8a:f0:fe:93:ba:08:e6:d4:
a6:2e:f2:20:d3:5a:ce:89:84:74:e2:02:93:61:b8:2e:ba:c7:
6e:09:c9:61:1e:6a:f5:97:d4:8f:8f:f1:18:9b:d0:18:45:5e:
fd:96:ef:7e:be:70:e1:e9:14:b7:54:f2:99:ee:fb:c5:fa:2b:
ec:e8:19:da:50:71:50:26:b0:32:4e:c1:a4:1a:f1:fc:38:87:
5e:32:d6:fb:7e:cd:89:1a:90:c3:b9:2f:8e:b2:4f:3b:46:e1:
45:23:04:1c:87:a5:ef:21:70:cb:b2:a3:4e:3d:dd:d4:97:3c:
3f:45:0f:9c:9c:81:f4:fa:9e:2e:84:89:cc:37:fa:8d:bf:e0:
36:cd:20:dc:1c:c2:03:4d:a4:2f:56:87:13:6a:fe:68:5a:2b:
3d:72:c6:a8:42:bd:bb:4c:e3:0f:28:d5:78:6e:fc:d6:b8:26:
07:98:d1:ef:07:4d:c5:bf:ed:a8:0e:c3:e7:b3:41:57:71:7e:
21:8b:18:1d:42:0f:8a:07:59:58:dd:fd:0f:9b:ab:d3:ac:a7:
75:ba:ff:53:7f:70:ca:38:d6:2a:63:91:53:0c:bb:57:e9:8f:
06:cd:76:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYamzEVU0F5VKbME7huC1CwtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2
N2VmMTMwHhcNMjMwMzAzMDkyNzMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDAwODRiMjUwODVlMWFmNmMzMDk2ZjYyYjg1NTQ2NjYyYmFiZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqJLnf0ODHWLmVuJHcRTFnd1XJJE
l7fJPb6WrTaeTOXcPXqDESxdbpyZxkdN8P5TH/aPcUPVaL+KWXyPulnnlMGcuvzF
InGtM7ARbla/qrEyY7GTsIKweZdhEL5uyihU8088NESUiX3+eAYRPZMS+SRLmjWA
DHJw/o2YyN16hNQRusbyMEilAURLiIQIHWF8r+YLy9qLls/2ogfzFpSCR/QrdshG
URQq4dhYFGEe/pe0VM1R6SIE+8kpi68+QtjdU4hSrJHJctgA/wWmfB8yHcEUtS7P
WGY6YTL7xcvWXnvtzA8UHAqCtNe4F4DQK4GfAsBp2P2E6z1Bat3Atk4HjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFAAhLJQheGvbDCW9iuFVGZiur9+MB8GA1UdIwQY
MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt
YjI1MDk5N2ZjNzVkLzEvVUFDRXNsQ0Y0YTlzTUpiMks0VlVabUs2djM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk
LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUFq4MA0G
CSqGSIb3DQEBCwUAA4IBAQBVWjhAiuofxmhEqsMKsuqhB3yi5dJayZNA1gL2ivD+
k7oI5tSmLvIg01rOiYR04gKTYbguusduCclhHmr1l9SPj/EYm9AYRV79lu9+vnDh
6RS3VPKZ7vvF+ivs6BnaUHFQJrAyTsGkGvH8OIdeMtb7fs2JGpDDuS+Osk87RuFF
IwQch6XvIXDLsqNOPd3Ulzw/RQ+cnIH0+p4uhInMN/qNv+A2zSDcHMIDTaQvVocT
av5oWis9csaoQr27TOMPKNV4bvzWuCYHmNHvB03Fv+2oDsPns0FXcX4hixgdQg+K
B1lY3f0Pm6vTrKd1uv9Tf3DKONYqY5FTDLtX6Y8GzXZj
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:41 2023 by rpki-client on console-fra.rpki-client.org