Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/_N4YoawEyiOKyovaIheDVIserDo.roa
File: _N4YoawEyiOKyovaIheDVIserDo.roa (raw, json)
Hash identifier: Z6wps96CgxLfUPFW7IpkjEWJTYMZ6v9YVF9tq0yFjwY=
Subject key identifier: FC:DE:18:A1:AC:04:CA:23:8A:CA:8B:DA:22:17:83:54:8B:1E:AC:3A
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 018571B0D25202DD218E95795E6AA743466F
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/_N4YoawEyiOKyovaIheDVIserDo.roa
Signing time: Mon 02 Jan 2023 08:54:51 +0000
ROA not before: Mon 02 Jan 2023 08:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204835
IP address blocks: 195.138.204.0/24 maxlen: 24
91.231.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:d2:52:02:dd:21:8e:95:79:5e:6a:a7:43:46:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Jan 2 08:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcde18a1ac04ca238aca8bda221783548b1eac3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:e9:23:f5:a9:48:31:f5:2e:7a:f3:97:46:
2f:0a:a8:48:39:47:ae:0c:72:12:c2:bd:32:3f:dc:
0c:24:24:e9:a0:f3:75:02:be:d7:d9:67:df:57:5c:
c7:b8:f3:a0:8d:d9:32:5a:60:b3:02:77:a9:6c:3d:
0b:8b:df:5c:5c:4f:82:e0:50:73:66:28:f7:a1:d9:
7e:0d:85:87:db:0d:2f:8b:a4:84:ff:71:f8:e1:21:
d1:ee:07:95:0b:86:cb:e7:6f:b8:0b:1e:66:60:1c:
0e:10:36:f9:ce:2b:a6:37:0d:ee:ee:d6:49:73:eb:
1b:73:14:91:4e:dd:8f:69:23:bc:3f:1a:43:55:94:
a3:04:13:a0:4c:65:00:e7:f9:c7:81:be:dd:f5:59:
4a:04:19:72:97:44:8a:f6:3b:7b:05:03:10:66:71:
25:a2:ef:81:97:2d:2d:e4:b9:ca:ee:46:ac:6d:cd:
92:9e:6e:11:ea:c1:bf:d0:d7:e1:7f:37:0a:f5:a1:
af:9e:44:77:7f:a0:a6:eb:91:c8:b7:e7:bc:1d:2a:
b4:db:3f:32:30:17:63:67:b0:3b:a0:38:a7:61:88:
57:ae:70:52:e1:e3:2f:ad:af:0a:6c:64:80:3b:c1:
69:f7:30:40:66:15:2a:5a:a9:25:ff:c8:11:5c:82:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DE:18:A1:AC:04:CA:23:8A:CA:8B:DA:22:17:83:54:8B:1E:AC:3A
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/_N4YoawEyiOKyovaIheDVIserDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.174.0/24
195.138.204.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d5:35:88:66:48:f6:3d:9a:66:3c:e1:1c:b8:fb:7f:ef:bc:
a3:e7:44:cd:3e:ab:9d:90:cb:60:43:a3:0a:4a:08:ab:00:0a:
57:4b:bb:4e:2c:7e:0e:04:7d:ba:08:ae:28:f0:74:73:4b:1e:
80:67:4b:7e:b1:33:3f:51:c3:4c:b5:79:0a:89:1c:d4:38:e7:
08:54:77:58:3a:b7:e0:bf:42:25:83:d2:88:37:de:d1:80:4e:
53:26:29:05:a1:24:73:42:0c:3c:ec:7d:c3:b4:89:b4:71:ec:
80:75:60:68:25:69:42:d6:ce:45:f8:23:29:5b:43:34:8b:0d:
77:b6:9e:4a:a5:63:aa:2b:97:5a:18:56:42:ab:ab:73:dd:8f:
6a:3d:7a:1b:51:44:4e:23:cc:59:a4:c0:6f:83:ca:b2:89:ac:
1d:ac:37:ea:41:f9:f2:38:4d:48:47:a9:7b:ac:7e:f4:30:87:
75:82:83:8d:0d:75:ed:e9:84:e2:fe:7e:5b:e3:b4:29:cb:30:
35:b9:ff:ec:7d:4e:f8:26:af:e7:dd:d1:fa:6d:cf:13:94:63:
b6:5d:52:55:79:93:e1:69:1f:b3:38:c4:58:8f:d0:cf:79:17:
87:4d:ed:08:a8:c1:70:d1:95:14:22:ab:67:c7:4d:d1:6c:22:
eb:4f:95:19
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxsNJSAt0hjpV5XmqnQ0ZvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTE5MDEyMjc1Nzc4MDdmNGI2OGM4YjhmMjVmYmVhOWM3
MjA3NjIwHhcNMjMwMTAyMDg1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2RlMThhMWFjMDRjYTIzOGFjYThiZGEyMjE3ODM1NDhiMWVhYzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIvpI/WpSDH1Lnrzl0YvCqhIOUeu
DHISwr0yP9wMJCTpoPN1Ar7X2WffV1zHuPOgjdkyWmCzAnepbD0Li99cXE+C4FBz
Zij3odl+DYWH2w0vi6SE/3H44SHR7geVC4bL52+4Cx5mYBwOEDb5ziumNw3u7tZJ
c+sbcxSRTt2PaSO8PxpDVZSjBBOgTGUA5/nHgb7d9VlKBBlyl0SK9jt7BQMQZnEl
ou+Bly0t5LnK7kasbc2Snm4R6sG/0NfhfzcK9aGvnkR3f6Cm65HIt+e8HSq02z8y
MBdjZ7A7oDinYYhXrnBS4eMvra8KbGSAO8Fp9zBAZhUqWqkl/8gRXILAQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPzeGKGsBMojisqL2iIXg1SLHqw6MB8GA1UdIwQY
MBaAFGIRkBInV3gH9LaMi48l++qccgdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYt
N2NmZGQ4NGY3MzRkLzEvX040WW9hd0V5aU9LeW92YUloZURWSXNlckRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYtN2NmZGQ4NGY3MzRk
LzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+euAwQA
w4rMMA0GCSqGSIb3DQEBCwUAA4IBAQB21TWIZkj2PZpmPOEcuPt/77yj50TNPqud
kMtgQ6MKSgirAApXS7tOLH4OBH26CK4o8HRzSx6AZ0t+sTM/UcNMtXkKiRzUOOcI
VHdYOrfgv0Ilg9KIN97RgE5TJikFoSRzQgw87H3DtIm0ceyAdWBoJWlC1s5F+CMp
W0M0iw13tp5KpWOqK5daGFZCq6tz3Y9qPXobUUROI8xZpMBvg8qyiawdrDfqQfny
OE1IR6l7rH70MId1goONDXXt6YTi/n5b47QpyzA1uf/sfU74Jq/n3dH6bc8TlGO2
XVJVeZPhaR+zOMRYj9DPeReHTe0IqMFw0ZUUIqtnx03RbCLrT5UZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:31 2024 by rpki-client on console-ams.rpki-client.org