Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/UxfHAXgMmNZF2_FLe-DTTDJrBTs.roa
File: UxfHAXgMmNZF2_FLe-DTTDJrBTs.roa (raw, json)
Hash identifier: 9kElktmc/HsyQqemRtjvnHnl6ax8/mXSwnQJpTRO3ZI=
Subject key identifier: 53:17:C7:01:78:0C:98:D6:45:DB:F1:4B:7B:E0:D3:4C:32:6B:05:3B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01890C5189D55069FF576AC5AF5A535155A6
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/UxfHAXgMmNZF2_FLe-DTTDJrBTs.roa
Signing time: Fri 30 Jun 2023 12:40:17 +0000
ROA not before: Fri 30 Jun 2023 12:40:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
178.210.224.0/22 maxlen: 24
193.138.125.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:51:89:d5:50:69:ff:57:6a:c5:af:5a:53:51:55:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 30 12:40:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5317c701780c98d645dbf14b7be0d34c326b053b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:3b:51:63:a3:9f:af:3d:2d:ab:06:bc:45:
f0:bc:6b:ea:ec:66:20:dc:d5:a1:bf:ef:33:50:6c:
07:b5:01:9b:74:1d:8b:b9:85:12:be:5d:00:48:2f:
3b:4b:75:d9:ae:57:67:f8:b0:50:9e:c3:aa:08:c4:
a2:44:d2:b3:f8:83:eb:12:ae:dc:5c:d8:bd:85:7d:
32:77:8d:8f:3b:7b:eb:2c:ef:05:d3:39:66:a6:54:
7c:48:52:86:39:4a:c8:18:60:ad:27:4e:64:ae:c6:
a7:e9:6d:73:80:da:d2:85:8c:05:d5:af:96:66:7a:
e7:65:8c:6d:65:9f:7a:9e:b3:e4:33:eb:b3:35:ab:
0f:0d:3e:46:90:38:82:5f:5c:f4:08:45:d6:cf:01:
5a:a4:0e:b0:79:dc:54:21:94:f6:d0:8b:0e:fc:80:
3d:b5:36:03:73:a5:15:eb:f9:99:8f:7b:38:17:a1:
68:39:af:e5:58:4b:5c:2c:56:b3:82:a9:d4:19:cc:
1d:62:d5:5c:82:85:7a:1e:40:b2:05:af:b7:b4:39:
0d:eb:7c:b8:81:80:16:45:94:b0:12:18:c9:3e:65:
ba:12:7f:4b:e9:2e:f4:59:41:59:e7:c1:40:39:8a:
d9:13:13:f5:12:2a:65:eb:ee:09:05:62:4b:dd:9e:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:17:C7:01:78:0C:98:D6:45:DB:F1:4B:7B:E0:D3:4C:32:6B:05:3B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/UxfHAXgMmNZF2_FLe-DTTDJrBTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.8.0/24
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
92.52.208.0/21
92.52.219.0/24
178.210.224.0/22
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
23:11:e6:74:bf:c1:d3:c2:8b:cc:7b:7f:f4:ac:87:12:01:5f:
b6:f8:57:59:db:90:96:fb:2d:ba:83:75:5f:29:b2:d8:95:55:
c0:a3:98:94:a7:d0:f3:57:b4:5b:86:20:3c:56:10:26:29:7f:
36:20:d5:5d:98:f2:10:7d:06:8e:4f:1d:66:13:87:1e:12:2b:
22:8f:2a:6a:07:de:1c:a7:06:06:9e:12:33:c1:33:f5:50:40:
e5:20:1e:53:46:e8:9f:18:2a:12:b0:bc:be:f0:96:fb:09:7b:
c7:97:ed:ee:a3:33:00:93:df:66:78:9d:58:f5:5a:e8:51:26:
75:99:24:44:34:90:86:33:6c:bc:11:81:35:f4:cf:2c:01:4f:
fe:20:e7:8a:c6:e0:7a:97:98:e8:17:cf:33:a9:14:27:82:e0:
b1:c2:54:c6:72:28:48:c3:51:b2:a0:c2:d3:e0:ed:14:66:a5:
78:49:57:5c:d1:59:2a:de:61:e5:d8:9d:23:bf:f3:88:06:47:
b5:a9:d2:d1:23:32:0b:de:f6:e3:83:ab:e3:00:dd:4c:a1:06:
fb:3f:06:91:84:30:9f:b9:8e:2a:42:4b:f2:f4:3a:22:1a:2c:
4e:58:8a:95:e7:cf:42:28:2d:80:ae:ff:59:c8:33:b0:90:ce:
84:66:d2:b9
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYkMUYnVUGn/V2rFr1pTUVWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwNjMwMTI0MDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzE3YzcwMTc4MGM5OGQ2NDVkYmYxNGI3YmUwZDM0YzMyNmIwNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLU7UWOjn689LasGvEXwvGvq7GYg
3NWhv+8zUGwHtQGbdB2LuYUSvl0ASC87S3XZrldn+LBQnsOqCMSiRNKz+IPrEq7c
XNi9hX0yd42PO3vrLO8F0zlmplR8SFKGOUrIGGCtJ05krsan6W1zgNrShYwF1a+W
ZnrnZYxtZZ96nrPkM+uzNasPDT5GkDiCX1z0CEXWzwFapA6wedxUIZT20IsO/IA9
tTYDc6UV6/mZj3s4F6FoOa/lWEtcLFazgqnUGcwdYtVcgoV6HkCyBa+3tDkN63y4
gYAWRZSwEhjJPmW6En9L6S70WUFZ58FAOYrZExP1Eipl6+4JBWJL3Z43iQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFFMXxwF4DJjWRdvxS3vg00wyawU7MB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvVXhmSEFYZ01tTlpGMl9GTGUtRFRUREpyQlRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzB2BAIAATBwMAwDBAAt
CakDBAItCagDBAAtDggDBAEtDgoDBAAtWF0wDAMEBE3ykAMEAE3ylAMEAE3ylwME
AFjRwQMEAFjRxAMEAFjR0AMEAFjR0gMEAljR1AMEA1w00AMEAFw02wMEArLS4AME
A7L4yAMEAMGKfTANBAIAAjAHAwUDKgAfQDANBgkqhkiG9w0BAQsFAAOCAQEAIxHm
dL/B08KLzHt/9KyHEgFftvhXWduQlvstuoN1Xymy2JVVwKOYlKfQ81e0W4YgPFYQ
Jil/NiDVXZjyEH0Gjk8dZhOHHhIrIo8qagfeHKcGBp4SM8Ez9VBA5SAeU0bonxgq
ErC8vvCW+wl7x5ft7qMzAJPfZnidWPVa6FEmdZkkRDSQhjNsvBGBNfTPLAFP/iDn
isbgepeY6BfPM6kUJ4LgscJUxnIoSMNRsqDC0+DtFGaleElXXNFZKt5h5didI7/z
iAZHtanS0SMyC97244Or4wDdTKEG+z8GkYQwn7mOKkJL8vQ6IhosTliKlefPQigt
gK7/WcgzsJDOhGbSuQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:01 2023 by rpki-client on console-fra.rpki-client.org