Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/yfAAnz7Kvc4w_KG7-WB3EIsvIN4.roa
File: yfAAnz7Kvc4w_KG7-WB3EIsvIN4.roa (raw, json)
Hash identifier: RVoWc+tKQ30cPRWNCunnMKsZaSoblVztipJDPCN2L9Y=
Subject key identifier: C9:F0:00:9F:3E:CA:BD:CE:30:FC:A1:BB:F9:60:77:10:8B:2F:20:DE
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018DEF13CB2463D6C0C305918F082346BFAC
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/yfAAnz7Kvc4w_KG7-WB3EIsvIN4.roa
Signing time: Wed 28 Feb 2024 09:37:48 +0000
ROA not before: Wed 28 Feb 2024 09:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.180.0/24 maxlen: 24
45.83.181.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.83.183.0/24 maxlen: 24
139.28.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 06:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:13:cb:24:63:d6:c0:c3:05:91:8f:08:23:46:bf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Feb 28 09:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9f0009f3ecabdce30fca1bbf96077108b2f20de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:8c:fe:40:5e:eb:e3:8e:90:6c:f4:bc:59:
b7:f3:a8:2a:22:a3:13:90:75:a7:a4:6e:d3:47:1c:
60:a7:a7:34:ab:9b:12:6e:1b:63:db:9e:a4:14:58:
d5:17:7f:7c:78:1d:27:8c:1a:dc:ef:69:89:88:9a:
3b:ba:1c:81:6c:7e:8e:dc:b5:3c:49:0b:57:66:39:
72:97:76:a9:d6:91:eb:60:2a:9e:d2:74:9f:ee:3c:
00:13:c8:8d:89:1d:80:50:e9:f9:d2:c0:24:31:c7:
ed:64:9d:35:9b:1e:b6:8e:56:ec:26:c4:ac:ba:ee:
ec:6f:9a:1b:b8:f9:d8:c5:ff:d8:e2:00:97:eb:f2:
f1:47:13:f1:9f:50:12:f7:83:1c:92:7e:a8:4b:9c:
37:13:82:b8:dd:4f:36:56:30:c9:ac:c7:88:02:f0:
d6:65:bb:1e:bd:c1:a1:4a:54:11:db:ab:a9:73:bf:
53:c6:b7:6a:21:0b:9b:db:39:37:a1:1c:9a:45:4a:
61:b8:b0:48:1a:b2:2f:84:18:e4:6f:b7:56:ef:68:
c2:31:b1:da:1e:07:31:1d:93:76:0f:b1:9f:c8:d3:
c6:bd:d7:45:34:96:36:67:fd:e7:6d:1e:8a:08:2e:
b5:81:8c:0e:e7:8a:fe:07:7b:e0:0d:25:1c:6c:b0:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F0:00:9F:3E:CA:BD:CE:30:FC:A1:BB:F9:60:77:10:8B:2F:20:DE
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/yfAAnz7Kvc4w_KG7-WB3EIsvIN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0/22
139.28.72.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:df:f5:b5:b6:c2:38:d4:44:ec:92:85:d8:e5:6b:99:b4:94:
00:f2:a9:0b:92:58:b0:e8:0f:fb:a6:a1:12:d5:03:29:4c:e1:
9e:41:ad:92:8f:25:ce:c8:81:17:a6:d7:fc:f8:40:c0:f4:30:
35:5f:9a:d9:41:24:fd:b2:59:a9:ad:a2:b7:b3:56:a9:40:fa:
c3:0e:35:de:a5:a1:d6:45:25:da:e3:39:c6:8f:14:66:a4:37:
84:b9:6f:08:97:84:01:91:28:3d:cc:be:22:e5:5f:d8:a5:42:
c2:84:b9:e7:9c:4d:80:fe:26:f4:c7:6f:a3:e1:c9:6f:ea:28:
ba:20:c5:a6:52:18:b8:46:5e:80:3b:1f:56:4d:91:c3:a2:c7:
ec:3a:5a:01:3f:57:9e:ed:8c:d6:0e:ff:80:aa:7f:96:b7:b6:
71:32:83:b5:b7:a6:98:0b:30:d8:ae:73:89:57:b3:50:e5:37:
92:71:72:c8:56:03:1c:67:23:5e:34:11:22:a3:16:4b:dc:16:
64:00:e4:03:75:9b:10:0e:19:c0:49:6e:be:e7:00:7c:10:ac:
0a:1d:6d:81:f3:7b:b8:dd:0a:16:ce:7f:19:0b:9d:7e:3a:e1:
3e:a3:8f:f6:cb:64:31:8b:77:e7:d4:14:42:16:55:e7:3b:d7:
36:1a:39:a7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY3vE8skY9bAwwWRjwgjRr+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjQwMjI4MDkzNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWYwMDA5ZjNlY2FiZGNlMzBmY2ExYmJmOTYwNzcxMDhiMmYyMGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1yM/kBe6+OOkGz0vFm386gqIqMT
kHWnpG7TRxxgp6c0q5sSbhtj256kFFjVF398eB0njBrc72mJiJo7uhyBbH6O3LU8
SQtXZjlyl3ap1pHrYCqe0nSf7jwAE8iNiR2AUOn50sAkMcftZJ01mx62jlbsJsSs
uu7sb5obuPnYxf/Y4gCX6/LxRxPxn1AS94Mckn6oS5w3E4K43U82VjDJrMeIAvDW
ZbsevcGhSlQR26upc79TxrdqIQub2zk3oRyaRUphuLBIGrIvhBjkb7dW72jCMbHa
HgcxHZN2D7GfyNPGvddFNJY2Z/3nbR6KCC61gYwO54r+B3vgDSUcbLD9RQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMnwAJ8+yr3OMPyhu/lgdxCLLyDeMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEveWZBQW56N0t2YzR3X0tHNy1XQjNFSXN2SU40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVO0AwQC
ixxIMA0GCSqGSIb3DQEBCwUAA4IBAQAd3/W1tsI41ETskoXY5WuZtJQA8qkLkliw
6A/7pqES1QMpTOGeQa2SjyXOyIEXptf8+EDA9DA1X5rZQST9slmpraK3s1apQPrD
DjXepaHWRSXa4znGjxRmpDeEuW8Il4QBkSg9zL4i5V/YpULChLnnnE2A/ib0x2+j
4clv6ii6IMWmUhi4Rl6AOx9WTZHDosfsOloBP1ee7YzWDv+Aqn+Wt7ZxMoO1t6aY
CzDYrnOJV7NQ5TeScXLIVgMcZyNeNBEioxZL3BZkAOQDdZsQDhnASW6+5wB8EKwK
HW2B83u43QoWzn8ZC51+OuE+o4/2y2Qxi3fn1BRCFlXnO9c2Gjmn
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org