Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/YNw_-KelPUlmroC80Zh31MFp9zY.roa
File: YNw_-KelPUlmroC80Zh31MFp9zY.roa (raw, json)
Hash identifier: xMSN/Oa1RIGMC74tNgfQJ7RXvF/trpBO571Zbrheokw=
Subject key identifier: 60:DC:3F:F8:A7:A5:3D:49:66:AE:80:BC:D1:98:77:D4:C1:69:F7:36
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 01856F0B7B6B49254F65A18C2F5CE43EDE73
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/YNw_-KelPUlmroC80Zh31MFp9zY.roa
Signing time: Sun 01 Jan 2023 20:35:01 +0000
ROA not before: Sun 01 Jan 2023 20:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212370
IP address blocks: 37.49.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Mar 2023 17:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:7b:6b:49:25:4f:65:a1:8c:2f:5c:e4:3e:de:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Jan 1 20:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60dc3ff8a7a53d4966ae80bcd19877d4c169f736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:e9:d5:c4:50:d9:8d:86:ed:ff:9b:8c:65:
c5:8c:7a:d5:5c:08:a7:86:d4:19:8e:56:c6:ef:85:
9e:d9:f4:7f:5a:89:c7:2e:f2:01:2b:1a:d0:71:d7:
55:fb:de:a6:ce:ed:95:3f:99:22:bb:83:fa:00:78:
f0:a6:b5:3f:78:39:44:e3:f9:ff:0d:ea:35:bb:0e:
d3:ee:57:f9:06:0f:7c:2c:9e:5a:6a:e9:c7:0e:48:
ef:fe:7b:ed:e7:fb:18:17:8f:bb:e8:02:fb:aa:27:
90:d8:80:d1:56:5c:ab:92:62:43:ea:3c:84:a5:9c:
3d:3e:3b:f4:6d:57:56:43:be:6c:08:95:90:68:06:
ba:88:f6:8c:05:26:ec:4c:4f:9d:39:fd:f6:ac:b9:
6f:f7:68:86:e0:43:77:9b:4e:6f:6c:8c:59:99:b6:
5c:e6:c6:01:30:00:af:84:33:dd:d3:30:d5:99:f4:
5a:16:76:6e:47:38:04:4a:d1:bc:74:2f:ef:7e:cf:
b1:a1:1b:c9:6e:15:22:90:33:a9:1f:7e:66:2b:32:
ea:e5:ba:e8:a3:a0:96:e5:76:2d:6b:b0:a6:8f:56:
01:09:95:0f:93:8a:e3:dc:c9:4f:53:fa:a5:67:03:
4b:91:a1:42:0f:8a:0c:0e:98:53:c0:30:9c:b6:c0:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DC:3F:F8:A7:A5:3D:49:66:AE:80:BC:D1:98:77:D4:C1:69:F7:36
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/YNw_-KelPUlmroC80Zh31MFp9zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:72:77:b7:ec:9f:71:29:4e:86:28:70:8f:06:07:9c:9f:48:
7c:2d:90:8d:94:89:69:34:ab:51:38:9a:a1:04:a0:ed:a7:98:
00:b5:4f:5e:6c:e3:1e:ec:39:59:f7:81:ab:a0:4d:11:be:46:
c3:e6:fe:bb:7b:2b:76:43:4c:26:5c:bf:4d:ea:83:95:0d:30:
dc:5e:d5:98:b4:37:4f:6c:e4:af:6b:9c:71:33:ec:ba:63:7d:
85:60:f3:e4:17:30:a8:86:2d:40:f7:90:28:05:46:4c:5b:2f:
11:28:1b:3b:ec:65:7a:94:5e:df:8c:d9:bc:c9:36:42:30:80:
1e:a2:03:f8:80:65:88:7c:06:3e:f9:7b:18:4e:b6:b3:ee:bb:
a0:8b:f3:df:55:39:74:54:a4:05:41:8f:71:49:4a:0f:7d:be:
e1:c8:3c:0c:5d:f8:98:f5:f9:a9:f4:3e:a5:ee:fc:ab:a8:91:
ab:6c:cc:56:75:dd:58:34:d4:46:47:c8:44:5f:3c:e7:d9:11:
bb:aa:07:41:72:20:be:15:cf:e5:4e:2f:60:f5:22:4e:49:c3:
0e:ec:2d:5e:5c:32:0b:dd:d0:93:d7:5c:8e:d3:4d:b6:88:89:
b4:fd:64:b9:8c:fd:52:f9:26:1e:bd:b5:12:56:08:3c:27:98:
e9:3a:1a:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvC3trSSVPZaGML1zkPt5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2N2UyYTQ2ZTM0ZjQ5MTQzM2M4YjYyZjMxOWI5MDJiZGRm
ZGU4MzEwHhcNMjMwMTAxMjAzNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGRjM2ZmOGE3YTUzZDQ5NjZhZTgwYmNkMTk4NzdkNGMxNjlmNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9fp1cRQ2Y2G7f+bjGXFjHrVXAin
htQZjlbG74We2fR/WonHLvIBKxrQcddV+96mzu2VP5kiu4P6AHjwprU/eDlE4/n/
Deo1uw7T7lf5Bg98LJ5aaunHDkjv/nvt5/sYF4+76AL7qieQ2IDRVlyrkmJD6jyE
pZw9Pjv0bVdWQ75sCJWQaAa6iPaMBSbsTE+dOf32rLlv92iG4EN3m05vbIxZmbZc
5sYBMACvhDPd0zDVmfRaFnZuRzgEStG8dC/vfs+xoRvJbhUikDOpH35mKzLq5bro
o6CW5XYta7Cmj1YBCZUPk4rj3MlPU/qlZwNLkaFCD4oMDphTwDCctsBUwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGDcP/inpT1JZq6AvNGYd9TBafc2MB8GA1UdIwQY
MBaAFMZ+KkbjT0kUM8i2LzGbkCvd/egxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQt
MDY2ODY2ZjJkZWQwLzEvWU53Xy1LZWxQVWxtcm9DODBaaDMxTUZwOXpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQtMDY2ODY2ZjJkZWQw
LzEveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJTHhMA0G
CSqGSIb3DQEBCwUAA4IBAQBfcne37J9xKU6GKHCPBgecn0h8LZCNlIlpNKtROJqh
BKDtp5gAtU9ebOMe7DlZ94GroE0RvkbD5v67eyt2Q0wmXL9N6oOVDTDcXtWYtDdP
bOSva5xxM+y6Y32FYPPkFzCohi1A95AoBUZMWy8RKBs77GV6lF7fjNm8yTZCMIAe
ogP4gGWIfAY++XsYTraz7rugi/PfVTl0VKQFQY9xSUoPfb7hyDwMXfiY9fmp9D6l
7vyrqJGrbMxWdd1YNNRGR8hEXzzn2RG7qgdBciC+Fc/lTi9g9SJOScMO7C1eXDIL
3dCT11yO0022iIm0/WS5jP1S+SYevbUSVgg8J5jpOhoJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:39 2024 by rpki-client on console-fra.rpki-client.org