Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/Y338VmaQFacICXGa_Yv3O8BNPHE.roa
File: Y338VmaQFacICXGa_Yv3O8BNPHE.roa (raw, json)
Hash identifier: HANap755tyglsxxgsnazD/Vbf3RLKdFRssPGlyNckFU=
Subject key identifier: 63:7D:FC:56:66:90:15:A7:08:09:71:9A:FD:8B:F7:3B:C0:4D:3C:71
Certificate issuer: /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial: 01856F94ADCCD6CFB5B3FC51417011B51EA5
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/Y338VmaQFacICXGa_Yv3O8BNPHE.roa
Signing time: Sun 01 Jan 2023 23:04:52 +0000
ROA not before: Sun 01 Jan 2023 23:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51318
IP address blocks: 195.89.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:ad:cc:d6:cf:b5:b3:fc:51:41:70:11:b5:1e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
Validity
Not Before: Jan 1 23:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=637dfc56669015a70809719afd8bf73bc04d3c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:47:df:4a:a1:65:87:03:0c:6d:13:bd:29:
60:27:db:26:5f:d6:b6:f1:01:fa:23:be:e1:ef:62:
9d:3c:3d:5a:8b:fc:44:84:38:ae:d6:af:80:55:ca:
fe:22:2e:40:79:fb:5c:50:5b:87:c6:88:78:d1:4b:
c5:ad:2e:61:d0:45:3a:66:1c:92:3b:40:8e:63:d7:
ef:08:7f:1a:0d:8f:f2:34:56:c6:c7:41:14:b1:e6:
df:94:93:ae:18:59:a3:5e:17:fe:67:ef:0c:72:5d:
da:bb:c2:b9:ae:60:5b:1a:82:8b:f2:10:e3:13:58:
59:21:ad:21:fc:c4:c9:b6:5b:76:22:cc:ad:86:19:
38:5f:5f:b3:9f:78:37:c2:a8:3d:ea:94:80:69:6c:
df:72:d7:20:ec:03:f8:61:92:1c:48:6d:cf:b1:8b:
f1:0d:01:59:f1:03:97:3a:7c:15:7b:dc:c2:d4:32:
56:79:a6:fb:85:15:9c:94:ae:be:43:8c:ac:6a:12:
66:ab:90:8f:4e:bb:d0:61:34:91:08:d2:3b:8d:37:
20:71:1f:e4:55:d5:a6:25:85:0e:e3:70:12:df:3b:
4e:de:5d:af:3b:18:99:64:88:f9:8c:2b:3c:20:83:
66:b8:0c:6c:08:92:52:9b:f1:05:c7:88:34:10:79:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7D:FC:56:66:90:15:A7:08:09:71:9A:FD:8B:F7:3B:C0:4D:3C:71
X509v3 Authority Key Identifier:
keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/Y338VmaQFacICXGa_Yv3O8BNPHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.89.13.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b0:c6:3c:48:42:37:3a:14:e7:2f:86:e1:25:76:f3:60:b3:
34:95:ed:b4:e2:2c:b7:ae:e3:41:13:ff:ad:a0:f6:d0:99:c1:
6f:42:68:f6:2d:5c:c4:23:36:f0:a9:d2:25:9e:9d:d0:08:13:
77:59:f3:8f:e6:f8:bf:83:5b:48:98:82:98:b0:f2:62:d1:54:
d4:23:dc:0e:08:f8:50:6c:d1:87:50:f1:60:0e:a4:2c:76:78:
dc:a1:58:37:b1:e2:aa:d2:a0:37:9d:b3:bc:c8:97:c7:da:a7:
75:1c:38:85:6b:bd:03:16:39:7f:f8:a7:b5:97:95:25:7a:a1:
c1:d9:32:2b:a6:da:dd:c2:b2:4e:c2:5d:2d:6c:80:14:0f:71:
8d:03:6e:ff:f7:ce:7d:5e:02:54:be:44:9d:9b:b1:da:42:2f:
72:b2:bd:81:32:32:31:f8:f3:39:85:6f:1e:1f:36:3e:d0:b5:
9b:13:c3:62:2a:5a:23:81:3c:b0:64:01:fe:36:07:af:ea:46:
bb:1a:71:fe:69:b0:be:2c:c1:80:82:7a:31:05:20:fd:3f:2e:
33:a6:65:b7:f2:e8:0a:ec:42:3d:0e:a2:03:c9:15:76:13:7c:
c3:12:bd:63:6a:25:c2:fc:df:1e:17:c8:d2:c7:11:16:02:ef:
ea:23:79:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvlK3M1s+1s/xRQXARtR6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODc0NmE3NmNkYTgzNjkwMDlkMjg5NDFlZjE1NjIzOWM2
YTYzYTEwHhcNMjMwMTAxMjMwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzdkZmM1NjY2OTAxNWE3MDgwOTcxOWFmZDhiZjczYmMwNGQzYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8tH30qhZYcDDG0TvSlgJ9smX9a2
8QH6I77h72KdPD1ai/xEhDiu1q+AVcr+Ii5AeftcUFuHxoh40UvFrS5h0EU6ZhyS
O0COY9fvCH8aDY/yNFbGx0EUsebflJOuGFmjXhf+Z+8Mcl3au8K5rmBbGoKL8hDj
E1hZIa0h/MTJtlt2Isythhk4X1+zn3g3wqg96pSAaWzfctcg7AP4YZIcSG3PsYvx
DQFZ8QOXOnwVe9zC1DJWeab7hRWclK6+Q4ysahJmq5CPTrvQYTSRCNI7jTcgcR/k
VdWmJYUO43AS3ztO3l2vOxiZZIj5jCs8IINmuAxsCJJSm/EFx4g0EHmOoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGN9/FZmkBWnCAlxmv2L9zvATTxxMB8GA1UdIwQY
MBaAFHqHRqds2oNpAJ0olB7xViOcamOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9kR3AyemFnMmtBblNpVUh2RldJNXhxWTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85MTNlMTItZjVlZC00NmY0LTk4MmMt
NTJkZWRkZGVlMzkzLzEvWTMzOFZtYVFGYWNJQ1hHYV9ZdjNPOEJOUEhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi85MTNlMTItZjVlZC00NmY0LTk4MmMtNTJkZWRkZGVlMzkz
LzEvZW9kR3AyemFnMmtBblNpVUh2RldJNXhxWTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1kNMA0G
CSqGSIb3DQEBCwUAA4IBAQBmsMY8SEI3OhTnL4bhJXbzYLM0le204iy3ruNBE/+t
oPbQmcFvQmj2LVzEIzbwqdIlnp3QCBN3WfOP5vi/g1tImIKYsPJi0VTUI9wOCPhQ
bNGHUPFgDqQsdnjcoVg3seKq0qA3nbO8yJfH2qd1HDiFa70DFjl/+Ke1l5UleqHB
2TIrptrdwrJOwl0tbIAUD3GNA27/9859XgJUvkSdm7HaQi9ysr2BMjIx+PM5hW8e
HzY+0LWbE8NiKlojgTywZAH+Ngev6ka7GnH+abC+LMGAgnoxBSD9Py4zpmW38ugK
7EI9DqIDyRV2E3zDEr1jaiXC/N8eF8jSxxEWAu/qI3ko
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:22 2024 by rpki-client on console-ams.rpki-client.org