Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/ys5uNTK9w9GGnjxZYJyTBaZYZAI.roa
File: ys5uNTK9w9GGnjxZYJyTBaZYZAI.roa (raw, json)
Hash identifier: XpCr4M5JNkIqKENzYlh2RbFtNWQAmdUI79dlFyGVzeY=
Subject key identifier: CA:CE:6E:35:32:BD:C3:D1:86:9E:3C:59:60:9C:93:05:A6:58:64:02
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 01856F42DB5307CE9E44211D054C94D20F16
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/ys5uNTK9w9GGnjxZYJyTBaZYZAI.roa
Signing time: Sun 01 Jan 2023 21:35:30 +0000
ROA not before: Sun 01 Jan 2023 21:35:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200168
IP address blocks: 195.254.172.0/23 maxlen: 23
185.35.212.0/22 maxlen: 24
2a04:6543::/32 maxlen: 32
2a04:6540::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:db:53:07:ce:9e:44:21:1d:05:4c:94:d2:0f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Jan 1 21:35:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cace6e3532bdc3d1869e3c59609c9305a6586402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:23:8e:d7:d2:0b:9c:b4:0d:06:df:5c:a8:5c:
5b:e4:9b:c0:b6:c5:46:2a:2e:81:9a:b3:08:d8:d6:
69:e7:5f:f0:6e:6d:4d:d6:72:ee:77:ca:fd:97:d3:
04:ba:79:19:87:25:84:2f:a0:05:fc:55:28:07:8d:
18:50:2b:68:b2:2b:32:9a:51:bd:b7:dc:09:5e:fa:
38:22:69:8c:32:29:74:90:6f:4e:c1:2b:1a:d1:3c:
bd:36:a3:e8:fe:a4:8c:58:2a:58:fb:f9:a8:e1:4e:
76:fd:f3:4a:69:59:73:b0:1b:79:89:28:68:99:dd:
87:48:f7:a5:d5:43:c5:7e:37:68:6a:b0:6a:15:10:
2c:4f:c1:78:55:be:57:90:1a:29:99:47:cf:71:11:
f2:a2:13:68:4a:83:59:21:c4:14:30:13:b9:2c:6f:
df:d2:58:e9:5d:d4:e8:7c:a7:45:b1:91:f4:81:3f:
d6:c0:28:c6:66:07:5d:a9:2e:92:cd:89:0b:40:ac:
81:5a:6a:12:b8:1a:15:9e:00:ee:04:88:87:bb:66:
16:ec:c8:ba:03:d2:a3:6b:93:cb:fb:c1:d4:87:a3:
de:6c:1f:0b:f4:6b:1c:87:57:d1:a0:57:13:a1:4a:
4c:35:4f:be:9d:e8:99:f3:70:78:04:64:ee:a2:4a:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CE:6E:35:32:BD:C3:D1:86:9E:3C:59:60:9C:93:05:A6:58:64:02
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/ys5uNTK9w9GGnjxZYJyTBaZYZAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.212.0/22
195.254.172.0/23
IPv6:
2a04:6540::/32
2a04:6543::/32
Signature Algorithm: sha256WithRSAEncryption
4e:d5:85:d9:4d:4b:af:82:32:3f:c6:6b:a5:b0:ec:3d:fc:11:
5e:3e:10:78:75:63:5a:02:8a:59:17:6d:48:1c:04:66:27:d0:
48:a9:e4:89:cc:3f:53:47:dc:95:19:2b:d1:29:6f:a4:6e:99:
99:94:2f:7f:67:05:5c:e5:c7:11:c5:c7:d8:6f:86:9b:c7:56:
5b:2a:07:96:38:08:de:b3:98:04:a1:0c:a6:ae:ce:7c:4d:f8:
7c:38:fa:59:01:39:47:d6:a4:30:71:74:13:13:ce:62:2d:d7:
78:eb:98:5e:d2:14:a8:9d:cd:25:91:12:44:fe:bf:09:d4:1f:
81:05:99:63:07:be:b6:05:7d:e9:84:0f:30:f1:cb:9d:2b:7a:
e6:e5:56:cd:66:00:47:57:97:62:3f:97:aa:a8:ad:dc:cd:2b:
aa:ae:c6:3d:ea:58:58:76:dc:b1:2d:9c:70:c4:22:69:50:ae:
39:d9:10:a8:1b:41:de:a8:b3:9e:7f:c2:8a:e3:13:ef:20:cc:
30:bd:3a:51:9e:6c:19:35:9c:7a:ec:6c:23:e2:e5:31:8a:a6:
4c:32:68:ed:15:ae:48:ba:ed:7c:cc:54:70:81:53:f2:d2:07:
9f:7a:a4:d7:16:d4:af:0e:bd:03:e1:9b:01:f3:01:d0:13:b3:
93:b1:df:b1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYVvQttTB86eRCEdBUyU0g8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOTFkNTI2MjU2MWE5ZGQ3MTNkZmEzOTE2M2RlYzg0OWZl
ZTQ2MzYwHhcNMjMwMTAxMjEzNTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWNlNmUzNTMyYmRjM2QxODY5ZTNjNTk2MDljOTMwNWE2NTg2NDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyOO19ILnLQNBt9cqFxb5JvAtsVG
Ki6BmrMI2NZp51/wbm1N1nLud8r9l9MEunkZhyWEL6AF/FUoB40YUCtosisymlG9
t9wJXvo4ImmMMil0kG9OwSsa0Ty9NqPo/qSMWCpY+/mo4U52/fNKaVlzsBt5iSho
md2HSPel1UPFfjdoarBqFRAsT8F4Vb5XkBopmUfPcRHyohNoSoNZIcQUMBO5LG/f
0ljpXdTofKdFsZH0gT/WwCjGZgddqS6SzYkLQKyBWmoSuBoVngDuBIiHu2YW7Mi6
A9Kja5PL+8HUh6PebB8L9Gsch1fRoFcToUpMNU++neiZ83B4BGTuokpxWQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMrObjUyvcPRhp48WWCckwWmWGQCMB8GA1UdIwQY
MBaAFKuR1SYlYandcT36ORY97ISf7kY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQt
Mjc1MjQyYWE2Nzc1LzEveXM1dU5USzl3OUdHbmp4WllKeVRCYVpZWkFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQtMjc1MjQyYWE2Nzc1
LzEvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuSPUAwQB
w/6sMBQEAgACMA4DBQAqBGVAAwUAKgRlQzANBgkqhkiG9w0BAQsFAAOCAQEATtWF
2U1Lr4IyP8ZrpbDsPfwRXj4QeHVjWgKKWRdtSBwEZifQSKnkicw/U0fclRkr0Slv
pG6ZmZQvf2cFXOXHEcXH2G+Gm8dWWyoHljgI3rOYBKEMpq7OfE34fDj6WQE5R9ak
MHF0ExPOYi3XeOuYXtIUqJ3NJZESRP6/CdQfgQWZYwe+tgV96YQPMPHLnSt65uVW
zWYAR1eXYj+Xqqit3M0rqq7GPepYWHbcsS2ccMQiaVCuOdkQqBtB3qiznn/CiuMT
7yDMML06UZ5sGTWceuxsI+LlMYqmTDJo7RWuSLrtfMxUcIFT8tIHn3qk1xbUrw69
A+GbAfMB0BOzk7HfsQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:19 2024 by rpki-client on console-ams.rpki-client.org