Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/uux-ryrLW-zvFhkbnhzv4LJ_zFM.roa
File: uux-ryrLW-zvFhkbnhzv4LJ_zFM.roa (raw, json)
Hash identifier: 5eZ0rYhsQc1Gq70IqzlKyzbQOxJpCrIey7I+L3fvrQA=
Subject key identifier: BA:EC:7E:AF:2A:CB:5B:EC:EF:16:19:1B:9E:1C:EF:E0:B2:7F:CC:53
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018674E4CD3E5F1C9F60BC970F085BEFB6A2
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/uux-ryrLW-zvFhkbnhzv4LJ_zFM.roa
Signing time: Tue 21 Feb 2023 16:53:17 +0000
ROA not before: Tue 21 Feb 2023 16:53:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.94.0/23 maxlen: 24
80.246.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:e4:cd:3e:5f:1c:9f:60:bc:97:0f:08:5b:ef:b6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Feb 21 16:53:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baec7eaf2acb5becef16191b9e1cefe0b27fcc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:50:5c:3d:39:4a:ba:38:7c:bb:e1:6a:10:10:
48:32:a2:d4:91:5a:97:51:89:dd:a3:e8:84:b2:37:
42:22:a8:1d:fe:9f:c9:d7:da:92:6b:b9:99:7b:96:
4f:01:53:08:b5:96:f2:d2:a4:3b:66:17:60:33:9c:
90:b2:bb:2b:e2:1f:0e:dc:17:2e:9e:11:ee:df:97:
a6:5f:ca:9a:61:90:cc:53:39:be:89:18:59:22:6d:
8a:8b:01:42:1d:82:af:10:c9:80:25:7f:e2:d7:12:
39:9d:89:ec:e8:d7:3c:f0:b8:1d:29:07:37:74:f2:
7a:09:f5:6b:e3:48:c5:23:01:75:cb:ac:ba:11:1c:
1e:9d:9b:de:97:00:fd:4f:d6:68:e9:84:8b:2a:bd:
98:73:20:a8:8e:bd:81:e1:f5:f2:63:b1:c8:82:f5:
80:12:7c:14:19:88:f1:99:c0:f5:3c:2f:42:9b:da:
0b:24:6b:09:e6:d5:22:9d:56:6c:77:d0:80:50:e0:
22:99:75:b9:9a:1f:3c:40:78:66:86:77:b8:d6:eb:
36:2c:18:57:22:ee:24:c6:9b:55:07:4b:74:e3:c4:
7f:71:92:ca:04:00:f5:3d:c7:08:c2:80:2c:71:66:
ea:43:a4:76:5a:35:d1:84:a2:48:0f:1f:3f:d8:b5:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EC:7E:AF:2A:CB:5B:EC:EF:16:19:1B:9E:1C:EF:E0:B2:7F:CC:53
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/uux-ryrLW-zvFhkbnhzv4LJ_zFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/23
80.246.229.0/24
Signature Algorithm: sha256WithRSAEncryption
05:08:a4:1b:cf:f0:ba:6c:f8:9b:d9:b7:c6:b7:bd:cd:6c:42:
35:34:38:79:07:9c:85:e4:33:4d:94:91:27:a6:8f:4b:9c:c2:
fd:5c:1a:d9:ac:6a:3e:20:a5:a9:7c:8e:96:ea:d5:f8:07:33:
4a:61:4f:ac:7e:cf:77:c2:04:a5:3b:f2:70:54:39:c9:08:98:
ea:ea:f3:83:7b:df:77:c5:c6:f8:a1:1a:67:72:86:b7:68:f5:
b2:47:76:f9:31:6c:c9:f9:60:32:33:7f:25:4a:c3:af:29:cf:
ab:2f:49:a7:9a:6e:7b:3b:c4:44:7c:54:a2:6b:08:81:63:aa:
29:8f:66:7b:f5:be:6e:2b:48:df:d4:bf:43:89:d2:fa:73:2a:
fd:aa:fd:9e:4a:36:30:28:04:c9:fb:88:00:23:c0:f9:c1:15:
93:94:19:49:15:8b:52:63:9d:4f:ba:ee:0f:32:7f:12:e5:dc:
53:d8:a2:df:10:4a:52:4b:18:ea:b4:74:d8:ca:ba:97:23:4a:
0f:08:6e:f3:50:f3:9e:c7:2a:6f:8f:9c:9e:72:00:ae:5b:60:
c0:c7:91:2b:2f:9e:d1:46:53:c0:32:3a:ab:67:63:bc:aa:fd:
09:e0:29:34:8a:d5:80:f4:2d:b5:4a:a6:77:3a:b6:74:10:87:
36:d4:86:0f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZ05M0+XxyfYLyXDwhb77aiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjMwMjIxMTY1MzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWVjN2VhZjJhY2I1YmVjZWYxNjE5MWI5ZTFjZWZlMGIyN2ZjYzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1BcPTlKujh8u+FqEBBIMqLUkVqX
UYndo+iEsjdCIqgd/p/J19qSa7mZe5ZPAVMItZby0qQ7ZhdgM5yQsrsr4h8O3Bcu
nhHu35emX8qaYZDMUzm+iRhZIm2KiwFCHYKvEMmAJX/i1xI5nYns6Nc88LgdKQc3
dPJ6CfVr40jFIwF1y6y6ERwenZvelwD9T9Zo6YSLKr2YcyCojr2B4fXyY7HIgvWA
EnwUGYjxmcD1PC9Cm9oLJGsJ5tUinVZsd9CAUOAimXW5mh88QHhmhne41us2LBhX
Iu4kxptVB0t048R/cZLKBAD1PccIwoAscWbqQ6R2WjXRhKJIDx8/2LX3ewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLrsfq8qy1vs7xYZG54c7+Cyf8xTMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvdXV4LXJ5ckxXLXp2RmhrYm5oenY0TEpfekZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZVeAwQA
UPblMA0GCSqGSIb3DQEBCwUAA4IBAQAFCKQbz/C6bPib2bfGt73NbEI1NDh5B5yF
5DNNlJEnpo9LnML9XBrZrGo+IKWpfI6W6tX4BzNKYU+sfs93wgSlO/JwVDnJCJjq
6vODe993xcb4oRpncoa3aPWyR3b5MWzJ+WAyM38lSsOvKc+rL0mnmm57O8REfFSi
awiBY6opj2Z79b5uK0jf1L9DidL6cyr9qv2eSjYwKATJ+4gAI8D5wRWTlBlJFYtS
Y51Puu4PMn8S5dxT2KLfEEpSSxjqtHTYyrqXI0oPCG7zUPOexypvj5yecgCuW2DA
x5ErL57RRlPAMjqrZ2O8qv0J4Ck0itWA9C21SqZ3OrZ0EIc21IYP
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-fra.rpki-client.org