Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/yUFqn1OnWHePnJOui_T1RRc3rAI.roa
File: yUFqn1OnWHePnJOui_T1RRc3rAI.roa (raw, json)
Hash identifier: w4DPgLlycartH9nECCDXty01eogGSaO4t/H70Z3JOnI=
Subject key identifier: C9:41:6A:9F:53:A7:58:77:8F:9C:93:AE:8B:F4:F5:45:17:37:AC:02
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE6624D767BA3B91AB7FDF34C39D70A
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/yUFqn1OnWHePnJOui_T1RRc3rAI.roa
Signing time: Sun 01 Jan 2023 10:35:15 +0000
ROA not before: Sun 01 Jan 2023 10:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197050
IP address blocks: 95.43.232.0/22 maxlen: 22
213.16.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 08:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:62:4d:76:7b:a3:b9:1a:b7:fd:f3:4c:39:d7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9416a9f53a758778f9c93ae8bf4f5451737ac02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:88:2c:7a:e5:70:6e:a1:69:8e:b2:58:e0:
3b:26:41:71:55:dc:aa:86:20:17:ea:21:f8:ab:78:
5f:26:45:cd:25:3f:10:d5:b1:c3:e5:90:83:01:52:
df:bc:34:ab:70:3f:ef:b9:86:7e:46:c3:5b:27:2a:
2d:e5:52:cf:7d:44:ce:ca:ab:f2:e3:0a:f4:8c:cc:
38:59:4c:a7:7d:7d:46:c9:19:66:d6:4f:19:34:e4:
7f:6e:4e:b1:60:1d:1b:0d:05:59:14:36:2e:ba:74:
78:c0:3f:bf:c9:60:68:af:95:ab:10:1c:05:8d:ac:
2f:31:7b:b2:6a:46:54:a1:7d:df:ff:15:a9:cf:4b:
ac:48:e2:25:22:b2:20:44:d8:be:49:29:07:89:8b:
72:9e:a7:f1:42:34:a3:24:29:04:57:b1:2d:db:e7:
4f:18:50:3e:ca:36:aa:e7:94:22:f5:8e:e9:c9:a4:
0c:6d:fe:57:ce:e8:10:b4:0f:cb:df:b8:44:e0:96:
82:a1:37:9a:7c:29:7e:17:3a:2d:91:ff:d9:90:96:
54:08:b6:c3:46:9b:f0:50:59:8c:b6:80:94:ee:d1:
bf:70:3e:1a:79:ce:da:6f:43:9f:aa:ab:3f:2e:bf:
c4:5a:f3:e0:f4:9f:c6:0f:1f:b6:29:36:c7:c8:64:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:41:6A:9F:53:A7:58:77:8F:9C:93:AE:8B:F4:F5:45:17:37:AC:02
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/yUFqn1OnWHePnJOui_T1RRc3rAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.43.232.0/22
213.16.45.0/24
Signature Algorithm: sha256WithRSAEncryption
15:92:63:3e:c8:d7:bf:50:8a:53:3c:b5:dc:bf:46:59:39:e4:
66:1e:ae:c4:6e:94:fa:bc:6f:d3:e5:4e:b7:ad:c1:97:82:6e:
52:15:ad:50:ee:41:66:f0:5d:e1:94:c2:8b:93:80:e3:98:81:
8c:5a:e1:0c:b5:f5:34:a3:5e:d9:5c:73:85:f0:93:50:a4:2f:
8c:74:bc:00:66:c2:c8:c1:ca:3c:0a:0d:24:14:b9:21:7d:0d:
34:8c:1d:10:ad:a2:a2:c9:8f:25:46:87:bd:90:41:19:25:5d:
77:8e:d1:7c:94:1c:13:cc:6c:27:83:09:6f:9a:f9:3b:4f:97:
a0:db:b0:f3:9c:4d:30:39:31:0a:6e:b2:e1:36:76:1c:65:0c:
8d:7e:d1:da:eb:58:05:6c:99:db:de:48:e4:bf:7a:81:7b:a1:
be:e5:42:a7:b6:43:2f:dd:20:6d:75:0b:74:f6:56:42:9a:bd:
cd:95:5b:25:f9:f7:97:65:ad:ca:aa:64:6c:03:51:fb:d5:83:
c6:2f:1d:fe:0a:a3:bf:50:0b:42:5c:7d:a1:17:c8:5e:58:50:
95:a8:4f:18:45:71:4b:a3:a5:cd:b7:1a:29:11:7e:d9:35:f2:
c2:83:bc:5d:d0:9a:4b:1b:12:28:af:6e:d3:e5:79:45:8b:b4:
8c:96:4e:00
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVs5mJNdnujuRq3/fNMOdcKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjMwMTAxMTAzNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTQxNmE5ZjUzYTc1ODc3OGY5YzkzYWU4YmY0ZjU0NTE3MzdhYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiuILHrlcG6haY6yWOA7JkFxVdyq
hiAX6iH4q3hfJkXNJT8Q1bHD5ZCDAVLfvDSrcD/vuYZ+RsNbJyot5VLPfUTOyqvy
4wr0jMw4WUynfX1GyRlm1k8ZNOR/bk6xYB0bDQVZFDYuunR4wD+/yWBor5WrEBwF
jawvMXuyakZUoX3f/xWpz0usSOIlIrIgRNi+SSkHiYtynqfxQjSjJCkEV7Et2+dP
GFA+yjaq55Qi9Y7pyaQMbf5XzugQtA/L37hE4JaCoTeafCl+Fzotkf/ZkJZUCLbD
RpvwUFmMtoCU7tG/cD4aec7ab0Ofqqs/Lr/EWvPg9J/GDx+2KTbHyGQlgQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMlBap9Tp1h3j5yTrov09UUXN6wCMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEveVVGcW4xT25XSGVQbkpPdWlfVDFSUmMzckFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXyvoAwQA
1RAtMA0GCSqGSIb3DQEBCwUAA4IBAQAVkmM+yNe/UIpTPLXcv0ZZOeRmHq7EbpT6
vG/T5U63rcGXgm5SFa1Q7kFm8F3hlMKLk4DjmIGMWuEMtfU0o17ZXHOF8JNQpC+M
dLwAZsLIwco8Cg0kFLkhfQ00jB0QraKiyY8lRoe9kEEZJV13jtF8lBwTzGwngwlv
mvk7T5eg27DznE0wOTEKbrLhNnYcZQyNftHa61gFbJnb3kjkv3qBe6G+5UKntkMv
3SBtdQt09lZCmr3NlVsl+feXZa3KqmRsA1H71YPGLx3+CqO/UAtCXH2hF8heWFCV
qE8YRXFLo6XNtxopEX7ZNfLCg7xd0JpLGxIor27T5XlFi7SMlk4A
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:54 2024 by rpki-client on console-ams.rpki-client.org