Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/dyq1N8L0IBZy0fblt9JZ3draj54.roa
File: dyq1N8L0IBZy0fblt9JZ3draj54.roa (raw, json)
Hash identifier: 5ykepxH77CA6fPakB0p12hJgVkWyWa84nmS1t4C6DRA=
Subject key identifier: 77:2A:B5:37:C2:F4:20:16:72:D1:F6:E5:B7:D2:59:DD:DA:DA:8F:9E
Certificate issuer: /CN=6e80725060ff4b3b55acde6a397c31eea97c237c
Certificate serial: 018740EE09E4DB2432F41743B4C3ADAF3C6C
Authority key identifier: 6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/dyq1N8L0IBZy0fblt9JZ3draj54.roa
Signing time: Sun 02 Apr 2023 07:45:54 +0000
ROA not before: Sun 02 Apr 2023 07:45:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44700
IP address blocks: 195.149.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:40:ee:09:e4:db:24:32:f4:17:43:b4:c3:ad:af:3c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e80725060ff4b3b55acde6a397c31eea97c237c
Validity
Not Before: Apr 2 07:45:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=772ab537c2f4201672d1f6e5b7d259dddada8f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:88:cf:0b:c6:c0:17:82:04:f8:b0:99:7b:66:
14:ef:cd:99:6d:a8:c0:8f:02:0d:49:81:19:49:98:
6b:85:15:49:3b:17:34:88:df:96:e8:a2:18:75:89:
f8:52:e9:69:51:cd:ed:2e:30:e8:af:ac:24:df:e2:
49:50:aa:2b:ae:88:c3:ee:e7:3d:d4:b7:16:4a:16:
99:25:a1:20:a6:2a:19:5c:dd:62:cb:98:d8:d8:63:
01:37:c5:ac:7f:0f:f9:c0:ab:01:9c:fd:a9:a4:5e:
09:36:64:01:2b:a1:8b:7d:b0:15:e2:9c:0c:31:59:
4b:55:44:44:52:02:9d:4d:d6:cc:2b:f9:0f:82:6b:
ea:c8:57:be:a6:29:60:55:0d:96:9c:d4:69:b0:a7:
a6:b4:59:26:d9:c7:de:13:b4:c4:ed:d6:92:15:10:
9b:fd:5e:4b:c4:3e:1a:90:71:b7:d4:48:af:8c:7b:
5c:3b:3a:a3:40:47:20:27:60:73:7b:af:11:55:d3:
ba:b5:d0:bc:d5:b4:73:5b:21:bc:16:3d:a6:76:1a:
69:7c:5f:74:86:83:e7:92:69:8d:f9:4c:bc:8a:14:
0c:8c:95:20:50:de:fd:ae:d4:7e:2e:d7:65:3c:47:
71:b7:94:ee:52:9c:81:a1:17:01:e3:53:3e:64:33:
97:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2A:B5:37:C2:F4:20:16:72:D1:F6:E5:B7:D2:59:DD:DA:DA:8F:9E
X509v3 Authority Key Identifier:
keyid:6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/dyq1N8L0IBZy0fblt9JZ3draj54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.99.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d4:42:31:92:39:35:89:bf:da:a1:87:6c:ee:bc:c2:08:bf:
a1:f1:1d:71:c5:4b:01:d7:26:cc:93:de:b4:16:60:3d:58:56:
53:db:37:e9:73:c6:d0:4f:dc:30:cc:38:3d:64:db:fe:fa:91:
bb:ea:29:b8:93:ec:dc:b0:55:f1:99:de:94:16:36:e5:df:77:
55:e4:a5:e0:84:ac:02:b3:fc:06:fa:ff:bd:38:bd:95:d5:6d:
ba:73:b5:52:ed:90:3c:40:fb:2a:ac:87:28:b7:ad:98:91:af:
48:97:6e:1e:58:fd:f6:01:e4:07:5a:34:b9:93:2b:5d:b6:02:
7c:3b:c2:c0:2d:5f:3c:39:80:73:52:32:3c:a0:23:78:a6:86:
58:2e:62:cf:b4:63:35:2b:00:da:91:a0:b1:64:68:09:4e:ad:
5d:c8:07:6f:e7:d6:54:37:f4:1f:eb:cc:7a:d4:7c:54:45:c3:
a6:01:3c:b2:74:8e:1c:c6:4f:f7:6a:93:47:da:d9:9f:ab:ec:
e0:cb:ae:29:ef:95:91:aa:e3:9a:ad:4e:65:70:07:00:51:06:
99:3c:b7:ee:98:a2:38:4f:0d:42:40:9e:8c:ff:1b:5a:be:55:
e1:f2:9b:44:32:cf:18:85:5e:7b:ab:62:12:f3:6c:3f:86:4b:
b9:7f:b1:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdA7gnk2yQy9BdDtMOtrzxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODA3MjUwNjBmZjRiM2I1NWFjZGU2YTM5N2MzMWVlYTk3
YzIzN2MwHhcNMjMwNDAyMDc0NTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzJhYjUzN2MyZjQyMDE2NzJkMWY2ZTViN2QyNTlkZGRhZGE4ZjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYjPC8bAF4IE+LCZe2YU782ZbajA
jwINSYEZSZhrhRVJOxc0iN+W6KIYdYn4UulpUc3tLjDor6wk3+JJUKorrojD7uc9
1LcWShaZJaEgpioZXN1iy5jY2GMBN8Wsfw/5wKsBnP2ppF4JNmQBK6GLfbAV4pwM
MVlLVUREUgKdTdbMK/kPgmvqyFe+pilgVQ2WnNRpsKemtFkm2cfeE7TE7daSFRCb
/V5LxD4akHG31EivjHtcOzqjQEcgJ2Bze68RVdO6tdC81bRzWyG8Fj2mdhppfF90
hoPnkmmN+Uy8ihQMjJUgUN79rtR+LtdlPEdxt5TuUpyBoRcB41M+ZDOXAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHcqtTfC9CAWctH25bfSWd3a2o+eMB8GA1UdIwQY
MBaAFG6AclBg/0s7Vazeajl8Me6pfCN8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYt
NTMzMzVkYTBjZmQzLzEvZHlxMU44TDBJQlp5MGZibHQ5SlozZHJhajU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYtNTMzMzVkYTBjZmQz
LzEvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5VjMA0G
CSqGSIb3DQEBCwUAA4IBAQBW1EIxkjk1ib/aoYds7rzCCL+h8R1xxUsB1ybMk960
FmA9WFZT2zfpc8bQT9wwzDg9ZNv++pG76im4k+zcsFXxmd6UFjbl33dV5KXghKwC
s/wG+v+9OL2V1W26c7VS7ZA8QPsqrIcot62Yka9Il24eWP32AeQHWjS5kytdtgJ8
O8LALV88OYBzUjI8oCN4poZYLmLPtGM1KwDakaCxZGgJTq1dyAdv59ZUN/Qf68x6
1HxURcOmATyydI4cxk/3apNH2tmfq+zgy64p75WRquOarU5lcAcAUQaZPLfumKI4
Tw1CQJ6M/xtavlXh8ptEMs8YhV57q2IS82w/hku5f7H5
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:50 2024 by rpki-client on console-ams.rpki-client.org