Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/UKAAFMpeMJO5pSTBJdnib-JEv5I.roa
File: UKAAFMpeMJO5pSTBJdnib-JEv5I.roa (raw, json)
Hash identifier: P0QR6tkejl2fH4LCro11SbzEQxfcSlyk+ACh4Jkkomw=
Subject key identifier: 50:A0:00:14:CA:5E:30:93:B9:A5:24:C1:25:D9:E2:6F:E2:44:BF:92
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0185710C2C5EF0AA17F13A6B561D797D3E64
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/UKAAFMpeMJO5pSTBJdnib-JEv5I.roa
Signing time: Mon 02 Jan 2023 05:55:01 +0000
ROA not before: Mon 02 Jan 2023 05:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 79.98.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:2c:5e:f0:aa:17:f1:3a:6b:56:1d:79:7d:3e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 05:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50a00014ca5e3093b9a524c125d9e26fe244bf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:a2:9d:83:0c:39:f1:26:f9:69:bb:1f:df:
dc:04:21:ae:2b:7f:c6:17:d2:99:28:a1:89:2a:67:
aa:c2:12:df:65:5f:8f:d9:ec:ae:ca:f9:e6:92:e5:
06:0c:8e:b0:4d:ad:92:c2:1d:a0:16:ee:dd:78:04:
5f:cd:c1:8d:f8:64:fa:c0:2b:94:70:3f:7b:10:1e:
e2:9a:cc:ac:c2:78:7a:e2:2d:ba:13:0a:72:b8:00:
b6:e9:95:f6:aa:8e:44:5f:d3:4e:cd:25:c4:e8:3f:
83:00:56:31:28:15:c5:e0:35:c2:3a:f4:b6:55:8c:
91:cb:cf:64:22:79:d5:cc:5c:3f:8e:5f:de:b1:37:
fe:46:0f:e4:a8:be:6a:d8:af:4e:17:09:3f:d9:78:
d7:fc:19:ab:bf:ff:fc:23:85:3d:39:5c:0b:b4:84:
39:d6:dc:be:2c:b9:6d:a5:f4:78:1f:aa:32:ba:c9:
b0:86:98:5d:9a:64:4e:ca:98:24:53:5c:fa:a0:bc:
3e:55:9b:a5:19:5c:63:fa:81:d6:d1:04:23:f6:35:
e6:e4:d6:e7:72:44:4d:da:28:0e:36:89:64:a2:99:
49:77:dc:2e:7c:bc:c4:c9:22:c5:9a:5d:35:8b:a2:
e2:55:aa:be:57:c7:7b:5a:c4:af:ff:73:3a:72:2c:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A0:00:14:CA:5E:30:93:B9:A5:24:C1:25:D9:E2:6F:E2:44:BF:92
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/UKAAFMpeMJO5pSTBJdnib-JEv5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.180.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:4d:04:a2:ca:f1:b5:e6:f4:96:c3:5f:b9:55:8e:4b:7b:4e:
8d:f9:08:0c:e0:16:27:0d:1b:21:89:a6:30:e5:c4:58:d6:4a:
bc:97:39:25:2e:4f:3e:3e:e8:c7:ef:64:9c:a4:68:ca:1f:f6:
94:bd:3a:2d:e8:a7:5e:2d:6d:31:7c:d2:65:bd:fa:cc:ba:c5:
94:12:37:be:90:6f:9c:69:c1:3d:23:7a:bc:91:93:56:6a:ea:
ef:3d:c5:ae:80:70:4e:49:51:5c:47:60:e6:43:5e:af:b9:9f:
0a:ff:f5:9c:96:0c:af:0f:5e:e9:4b:81:77:76:7b:75:ef:ca:
85:a3:2e:6b:1d:d2:9d:79:1c:71:66:28:5c:8f:9c:08:3c:92:
7f:75:ca:86:6f:95:ae:87:79:88:4e:0d:b5:45:b5:9a:19:f5:
df:9b:63:df:77:8f:fe:58:b9:5a:f9:2e:53:61:6d:d1:22:85:
4b:56:b0:32:07:77:3f:e0:74:6a:2b:d0:1e:31:8e:3c:e1:3d:
38:3d:e0:c0:cc:88:ef:40:f6:c9:ab:8c:ec:8a:b5:e0:36:cb:
df:97:da:d5:23:c7:f2:fe:c6:ce:9a:cf:bc:ad:77:a0:89:f6:
43:ea:36:02:b9:ac:b5:26:d9:22:e7:45:fd:63:5c:bd:f2:fd:
3e:61:5d:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxDCxe8KoX8TprVh15fT5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjMwMTAyMDU1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGEwMDAxNGNhNWUzMDkzYjlhNTI0YzEyNWQ5ZTI2ZmUyNDRiZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmainYMMOfEm+Wm7H9/cBCGuK3/G
F9KZKKGJKmeqwhLfZV+P2eyuyvnmkuUGDI6wTa2Swh2gFu7deARfzcGN+GT6wCuU
cD97EB7imsyswnh64i26EwpyuAC26ZX2qo5EX9NOzSXE6D+DAFYxKBXF4DXCOvS2
VYyRy89kInnVzFw/jl/esTf+Rg/kqL5q2K9OFwk/2XjX/Bmrv//8I4U9OVwLtIQ5
1ty+LLltpfR4H6oyusmwhphdmmROypgkU1z6oLw+VZulGVxj+oHW0QQj9jXm5Nbn
ckRN2igONolkoplJd9wufLzEySLFml01i6LiVaq+V8d7WsSv/3M6cizBTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFCgABTKXjCTuaUkwSXZ4m/iRL+SMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvVUtBQUZNcGVNSk81cFNUQkpkbmliLUpFdjVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT2K0MA0G
CSqGSIb3DQEBCwUAA4IBAQCKTQSiyvG15vSWw1+5VY5Le06N+QgM4BYnDRshiaYw
5cRY1kq8lzklLk8+PujH72ScpGjKH/aUvTot6KdeLW0xfNJlvfrMusWUEje+kG+c
acE9I3q8kZNWaurvPcWugHBOSVFcR2DmQ16vuZ8K//WclgyvD17pS4F3dnt178qF
oy5rHdKdeRxxZihcj5wIPJJ/dcqGb5Wuh3mITg21RbWaGfXfm2Pfd4/+WLla+S5T
YW3RIoVLVrAyB3c/4HRqK9AeMY484T04PeDAzIjvQPbJq4zsirXgNsvfl9rVI8fy
/sbOms+8rXegifZD6jYCuay1Jtki50X9Y1y98v0+YV0J
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:39 2024 by rpki-client on console-ams.rpki-client.org