Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/yzgtdUYlglg-Mtd6IiaE1RwtZbI.roa
File: yzgtdUYlglg-Mtd6IiaE1RwtZbI.roa (raw, json)
Hash identifier: aHfQJQzZq+JwHV5lVWywpk513X4tQnUhNr89WiZz3Pc=
Subject key identifier: CB:38:2D:75:46:25:82:58:3E:32:D7:7A:22:26:84:D5:1C:2D:65:B2
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 01856F9E0A3A22FA5BC815B6E09D74F11F46
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/yzgtdUYlglg-Mtd6IiaE1RwtZbI.roa
Signing time: Sun 01 Jan 2023 23:15:06 +0000
ROA not before: Sun 01 Jan 2023 23:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 185.152.92.0/22 maxlen: 24
85.239.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 19:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9e:0a:3a:22:fa:5b:c8:15:b6:e0:9d:74:f1:1f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 23:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb382d75462582583e32d77a222684d51c2d65b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:ef:a8:61:2a:a5:38:17:70:f1:b9:9c:d0:
16:79:c7:7b:10:dd:17:ae:67:04:02:84:77:1a:29:
00:5c:0f:32:ae:80:9d:f4:be:aa:65:8a:26:fb:1f:
81:36:7a:4c:5a:35:5c:99:de:d6:18:4a:ca:d8:7f:
87:89:ec:81:de:77:dc:08:32:f4:e4:d7:17:9d:98:
12:1e:28:e8:a1:72:1e:5b:ac:d6:81:72:75:05:f0:
d7:77:d4:f7:de:b7:c4:31:3f:be:fe:1f:00:1b:97:
8b:77:ea:14:f9:93:f7:a7:49:05:6c:ff:85:8a:58:
e1:65:27:9a:1d:c1:f4:6a:37:4c:5c:94:20:10:d8:
7f:93:9d:01:88:68:e2:9a:fc:17:93:9d:46:5c:03:
10:c7:b1:01:94:e0:65:47:f1:27:09:ff:e0:b0:7a:
21:e8:1f:a4:0c:56:82:38:bf:76:8e:fe:d8:d2:86:
d0:ae:57:c5:a5:5c:c9:c4:37:c4:7f:d5:74:2c:dd:
d1:a7:fe:56:dc:dc:da:e6:6c:f1:8d:01:da:6c:af:
c5:9b:93:71:aa:55:06:26:27:bc:be:1d:5d:cc:ea:
1e:84:9b:99:cc:41:cb:6a:da:a4:31:a0:ed:97:5c:
46:c8:93:83:14:27:6d:ab:55:83:78:9e:b0:3d:d4:
4e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:38:2D:75:46:25:82:58:3E:32:D7:7A:22:26:84:D5:1C:2D:65:B2
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/yzgtdUYlglg-Mtd6IiaE1RwtZbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.36.0/22
185.152.92.0/22
Signature Algorithm: sha256WithRSAEncryption
98:34:8b:d8:6e:f6:8f:7f:2e:1a:4b:8f:36:38:f9:f5:13:3d:
d5:bd:b4:cd:61:61:72:ce:76:07:e7:0a:6b:6a:0b:39:2a:82:
e1:d1:01:1d:d0:1f:bc:fe:40:86:18:37:c4:a7:9c:17:1f:06:
45:d8:e5:e4:b9:21:ed:e1:f9:00:87:bb:ef:b7:86:da:f1:99:
d7:17:61:dc:5c:95:b2:df:de:b3:ac:f4:d4:a7:47:d4:ff:ab:
d9:ff:be:71:6e:43:90:ad:4b:41:af:da:a7:c8:25:21:81:0e:
fe:0f:74:84:42:46:a5:9c:b0:37:e3:b8:0a:40:3c:9f:65:26:
67:90:9d:26:49:a2:da:2a:4f:5c:7d:5c:59:83:8d:f4:db:20:
91:58:85:67:15:87:4d:bf:5b:d7:10:7b:71:a7:a2:f1:60:7b:
7c:51:c6:48:79:60:d4:fb:d9:fb:85:63:f2:97:7a:69:42:34:
0f:a9:2d:30:5a:9f:f1:49:c5:db:4c:61:48:ac:e4:b7:61:28:
e7:e8:44:89:6b:fc:8b:4b:bd:3f:6e:ad:24:00:19:71:ba:70:
6e:6c:dd:36:70:68:f3:1c:9a:01:34:3a:83:58:df:84:df:00:
d0:3e:69:82:b2:72:c2:4b:be:41:57:51:52:66:d7:d6:23:ad:
fd:2e:87:07
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvngo6IvpbyBW24J108R9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiN2VjOTQyM2JmOTBjODFkMjJkOTQ4NDFjMTAzNTdhNTQy
NjAzNzkwHhcNMjMwMTAxMjMxNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjM4MmQ3NTQ2MjU4MjU4M2UzMmQ3N2EyMjI2ODRkNTFjMmQ2NWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K3vqGEqpTgXcPG5nNAWecd7EN0X
rmcEAoR3GikAXA8yroCd9L6qZYom+x+BNnpMWjVcmd7WGErK2H+HieyB3nfcCDL0
5NcXnZgSHijooXIeW6zWgXJ1BfDXd9T33rfEMT++/h8AG5eLd+oU+ZP3p0kFbP+F
iljhZSeaHcH0ajdMXJQgENh/k50BiGjimvwXk51GXAMQx7EBlOBlR/EnCf/gsHoh
6B+kDFaCOL92jv7Y0obQrlfFpVzJxDfEf9V0LN3Rp/5W3Nza5mzxjQHabK/Fm5Nx
qlUGJie8vh1dzOoehJuZzEHLatqkMaDtl1xGyJODFCdtq1WDeJ6wPdRO/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMs4LXVGJYJYPjLXeiImhNUcLWWyMB8GA1UdIwQY
MBaAFDt+yUI7+QyB0i2UhBwQNXpUJgN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzM3SlFqdjVESUhTTFpTRUhCQTFlbFFtQTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZWE0N2YtZWZmMy00NjI3LTk0ZWQt
MWQxMGYzYzcwYmI0LzEveXpndGRVWWxnbGctTXRkNklpYUUxUnd0WmJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZWE0N2YtZWZmMy00NjI3LTk0ZWQtMWQxMGYzYzcwYmI0
LzEvTzM3SlFqdjVESUhTTFpTRUhCQTFlbFFtQTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVe8kAwQC
uZhcMA0GCSqGSIb3DQEBCwUAA4IBAQCYNIvYbvaPfy4aS482OPn1Ez3VvbTNYWFy
znYH5wprags5KoLh0QEd0B+8/kCGGDfEp5wXHwZF2OXkuSHt4fkAh7vvt4ba8ZnX
F2HcXJWy396zrPTUp0fU/6vZ/75xbkOQrUtBr9qnyCUhgQ7+D3SEQkalnLA347gK
QDyfZSZnkJ0mSaLaKk9cfVxZg4302yCRWIVnFYdNv1vXEHtxp6LxYHt8UcZIeWDU
+9n7hWPyl3ppQjQPqS0wWp/xScXbTGFIrOS3YSjn6ESJa/yLS70/bq0kABlxunBu
bN02cGjzHJoBNDqDWN+E3wDQPmmCsnLCS75BV1FSZtfWI639LocH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:32 2024 by rpki-client on console-fra.rpki-client.org