Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYQiRpTL_KFId-bJDICIE454DYM.roa
File: YYQiRpTL_KFId-bJDICIE454DYM.roa (raw, json)
Hash identifier: p/8x4+uWtk4b1h9P762eKajHySwwUkLi23ohDEaRRuY=
Subject key identifier: 61:84:22:46:94:CB:FC:A1:48:77:E6:C9:0C:80:88:13:8E:78:0D:83
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018733F2AC476E6FEA0F55D360EF2EBB0CCD
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYQiRpTL_KFId-bJDICIE454DYM.roa
Signing time: Thu 30 Mar 2023 19:15:54 +0000
ROA not before: Thu 30 Mar 2023 19:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42375
IP address blocks: 45.147.254.0/23 maxlen: 23
2.57.149.0/24 maxlen: 24
45.147.202.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 02 Apr 2023 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:f2:ac:47:6e:6f:ea:0f:55:d3:60:ef:2e:bb:0c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 30 19:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6184224694cbfca14877e6c90c8088138e780d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:2d:33:9b:d6:1f:de:4f:e7:3a:07:46:36:
8b:43:af:5d:87:a1:64:1d:c7:cc:e6:a8:8b:33:27:
79:45:23:88:45:ed:a7:cc:f4:98:20:46:80:57:b0:
74:a1:79:d8:40:c6:36:7e:c9:21:0b:74:5f:94:e1:
fe:65:54:4f:e1:89:c3:16:91:01:47:c0:08:51:fb:
47:9d:ac:8d:0d:0a:ec:96:bd:4c:e9:63:24:02:c5:
21:2e:e2:92:14:fb:e0:99:d9:84:82:5f:b2:c9:c5:
c7:5d:31:6d:31:e1:e9:06:d7:ed:d0:f8:19:41:21:
bd:71:3c:4a:23:d9:d4:58:84:53:6b:b3:11:7e:22:
02:26:24:9c:af:b4:2a:4f:41:81:32:11:50:7a:35:
30:11:9d:e2:dd:72:54:d8:ea:ef:e0:fb:00:79:b9:
f6:c8:27:06:ff:82:a3:c3:51:97:05:7b:1c:45:7f:
a4:9f:9d:73:02:68:75:89:cd:76:5f:5e:45:99:dc:
a1:76:ce:8c:95:c1:c7:73:a6:8a:34:c6:51:85:b0:
14:1c:f1:78:39:84:79:73:37:c2:e3:e0:c7:08:50:
f7:dd:3a:70:8e:94:1a:c1:76:1b:e2:c7:32:83:67:
16:c9:25:55:f7:2f:f0:7a:bb:b8:54:e1:10:c8:95:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:84:22:46:94:CB:FC:A1:48:77:E6:C9:0C:80:88:13:8E:78:0D:83
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYQiRpTL_KFId-bJDICIE454DYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.149.0/24
45.147.202.0/23
45.147.254.0/23
Signature Algorithm: sha256WithRSAEncryption
83:ea:4a:00:0e:c7:b2:d0:60:0a:46:c2:10:f6:1c:a1:03:68:
41:1a:79:e0:5f:1f:50:bb:29:41:9e:81:40:07:de:06:a4:07:
ca:96:95:c1:5b:17:d9:16:df:14:31:a2:30:35:70:25:d0:92:
c1:a0:85:6f:19:9e:8f:bc:6b:01:c6:e5:2b:d4:99:9e:c5:83:
ea:c2:c0:f4:5a:1a:9a:c3:0c:c9:0c:5d:44:d4:df:e6:d3:8a:
1c:3c:47:94:3e:89:0a:6c:e6:11:98:9e:e1:df:8f:e8:fd:12:
a7:93:97:8c:d7:ac:f7:35:df:fe:af:25:db:a6:0d:ed:ac:c2:
d3:66:99:73:55:24:8a:c9:16:de:44:a2:53:1f:5f:6a:40:e0:
08:cd:27:65:fd:3c:b1:4e:06:ea:96:2e:58:66:8c:f0:bd:d4:
09:1f:91:dc:e4:dc:b2:76:7c:1e:60:1e:97:ab:f5:89:b6:ed:
af:58:b2:ac:71:4d:c3:49:a7:5d:74:4a:6c:9c:71:e2:14:1b:
28:74:17:08:86:88:f4:5d:dc:68:0b:14:da:21:72:af:11:e9:
20:d7:f7:e2:75:96:3c:0a:c4:14:08:33:ed:b3:d9:86:13:2f:
03:68:0a:91:39:db:2b:f2:ee:c9:a6:53:c6:df:91:b1:48:9b:
87:18:52:a0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYcz8qxHbm/qD1XTYO8uuwzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjMwMzMwMTkxNTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTg0MjI0Njk0Y2JmY2ExNDg3N2U2YzkwYzgwODgxMzhlNzgwZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyAtM5vWH95P5zoHRjaLQ69dh6Fk
HcfM5qiLMyd5RSOIRe2nzPSYIEaAV7B0oXnYQMY2fskhC3RflOH+ZVRP4YnDFpEB
R8AIUftHnayNDQrslr1M6WMkAsUhLuKSFPvgmdmEgl+yycXHXTFtMeHpBtft0PgZ
QSG9cTxKI9nUWIRTa7MRfiICJiScr7QqT0GBMhFQejUwEZ3i3XJU2Orv4PsAebn2
yCcG/4Kjw1GXBXscRX+kn51zAmh1ic12X15Fmdyhds6MlcHHc6aKNMZRhbAUHPF4
OYR5czfC4+DHCFD33TpwjpQawXYb4scyg2cWySVV9y/weru4VOEQyJWd8wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGGEIkaUy/yhSHfmyQyAiBOOeA2DMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvWVlRaVJwVExfS0ZJZC1iSkRJQ0lFNDU0RFlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAjmVAwQB
LZPKAwQBLZP+MA0GCSqGSIb3DQEBCwUAA4IBAQCD6koADsey0GAKRsIQ9hyhA2hB
GnngXx9QuylBnoFAB94GpAfKlpXBWxfZFt8UMaIwNXAl0JLBoIVvGZ6PvGsBxuUr
1JmexYPqwsD0WhqawwzJDF1E1N/m04ocPEeUPokKbOYRmJ7h34/o/RKnk5eM16z3
Nd/+ryXbpg3trMLTZplzVSSKyRbeRKJTH19qQOAIzSdl/TyxTgbqli5YZozwvdQJ
H5Hc5NyydnweYB6Xq/WJtu2vWLKscU3DSadddEpsnHHiFBsodBcIhoj0XdxoCxTa
IXKvEekg1/fidZY8CsQUCDPts9mGEy8DaAqROdsr8u7JplPG35GxSJuHGFKg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org