Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YT0Jv5uL9VE2diaXYMy9vQ0Vu4Y.roa
File: YT0Jv5uL9VE2diaXYMy9vQ0Vu4Y.roa (raw, json)
Hash identifier: Qmt/zGUptgEwxRMJPLikCUqYfY2IzPZgEf+xgfPf068=
Subject key identifier: 61:3D:09:BF:9B:8B:F5:51:36:76:26:97:60:CC:BD:BD:0D:15:BB:86
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CFB4486BDD84CF3C0A74ED8B7C8D396C9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YT0Jv5uL9VE2diaXYMy9vQ0Vu4Y.roa
Signing time: Fri 12 Jan 2024 01:23:41 +0000
ROA not before: Fri 12 Jan 2024 01:23:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199865
IP address blocks: 93.123.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 01:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fb:44:86:bd:d8:4c:f3:c0:a7:4e:d8:b7:c8:d3:96:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 12 01:23:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=613d09bf9b8bf5513676269760ccbdbd0d15bb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:5f:97:27:c1:56:3e:5a:eb:87:8a:0b:2f:
a2:ec:ab:db:e7:73:f1:ac:de:c7:4d:d2:42:18:fe:
80:64:2a:e5:e4:c1:4e:8f:54:88:54:07:2c:a2:bb:
26:b3:2f:e1:97:43:b4:e9:5f:77:94:4e:20:29:f9:
45:e6:98:c6:cb:df:57:ad:0b:86:b1:28:95:47:b2:
ac:c6:ac:96:aa:34:fe:20:91:e6:2e:d4:b0:c4:17:
2f:66:de:6e:46:4d:69:15:4e:5c:6b:dd:da:37:cd:
f3:4f:f2:cb:19:b7:a0:90:68:1d:1f:30:b4:0b:e0:
39:b5:25:84:d6:0a:ac:4f:4c:a4:75:f4:5e:20:1d:
44:16:e5:d7:d6:ba:3d:28:a8:41:ed:f0:f2:8e:54:
42:04:91:0f:8b:b5:c7:db:05:a2:55:26:e2:92:9f:
59:ac:2d:b7:d5:6c:bb:28:88:9e:11:58:f9:7b:4a:
13:f3:df:3a:74:99:fd:a1:ae:a6:c3:e9:8b:a1:a4:
77:2b:29:7d:4a:07:ba:11:70:fe:a6:8c:ba:61:b1:
58:45:c4:a9:d1:f3:49:50:3c:61:b6:7c:a8:cb:5e:
94:d2:34:17:51:19:b4:6a:28:c1:ed:ab:33:0f:05:
32:57:25:d9:e8:0e:57:2d:84:3b:e3:df:73:5d:eb:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3D:09:BF:9B:8B:F5:51:36:76:26:97:60:CC:BD:BD:0D:15:BB:86
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YT0Jv5uL9VE2diaXYMy9vQ0Vu4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.16.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ea:ce:a1:42:83:0f:76:cf:b2:f6:18:ed:2f:1b:52:ac:a7:
67:df:8f:d3:6a:7c:fe:e7:a0:c8:3b:e6:d0:c9:1a:c6:01:82:
7c:30:f4:15:98:53:c2:7d:49:13:d2:2b:f6:80:46:2a:06:e0:
64:a2:f5:ec:5f:a4:13:52:4c:16:cb:e1:18:04:0a:e1:8e:3a:
34:18:11:80:bc:ef:92:4e:5e:ab:5b:56:f2:f4:96:b4:35:ca:
d0:e4:95:77:2a:c2:f2:22:5d:d7:fc:8f:9a:43:52:64:5b:7c:
24:60:e8:ec:d1:82:64:b0:2f:b5:9e:d9:25:25:cb:fe:18:b7:
3b:8a:eb:24:16:f8:bd:d3:a5:80:7b:06:fe:38:d9:29:3a:83:
a8:d2:33:b0:8e:f2:38:6a:d8:9d:01:f6:d2:fe:8e:1c:24:98:
05:69:1b:70:e5:de:34:fa:3d:9f:f7:15:c0:1c:98:c0:7b:cc:
c3:12:54:a1:f1:ca:1d:41:eb:93:f6:8a:a3:6a:15:0f:0e:3f:
5e:d1:d3:ee:ef:5d:1c:17:39:37:03:6e:7e:da:e2:10:57:70:
6a:b1:22:7c:b8:a8:18:19:fe:d0:e7:7c:1e:8d:f3:d7:e0:1d:
30:ee:75:68:eb:9f:2a:cc:63:8c:33:55:da:b0:ea:a1:12:0c:
de:13:0e:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYz7RIa92EzzwKdO2LfI05bJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTEyMDEyMzQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTNkMDliZjliOGJmNTUxMzY3NjI2OTc2MGNjYmRiZDBkMTViYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPtflyfBVj5a64eKCy+i7Kvb53Px
rN7HTdJCGP6AZCrl5MFOj1SIVAcsorsmsy/hl0O06V93lE4gKflF5pjGy99XrQuG
sSiVR7KsxqyWqjT+IJHmLtSwxBcvZt5uRk1pFU5ca93aN83zT/LLGbegkGgdHzC0
C+A5tSWE1gqsT0ykdfReIB1EFuXX1ro9KKhB7fDyjlRCBJEPi7XH2wWiVSbikp9Z
rC231Wy7KIieEVj5e0oT8986dJn9oa6mw+mLoaR3Kyl9Sge6EXD+poy6YbFYRcSp
0fNJUDxhtnyoy16U0jQXURm0aijB7aszDwUyVyXZ6A5XLYQ7499zXetyZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGE9Cb+bi/VRNnYml2DMvb0NFbuGMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWVQwSnY1dUw5VkUyZGlhWFlNeTl2UTBWdTRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXsQMA0G
CSqGSIb3DQEBCwUAA4IBAQB26s6hQoMPds+y9hjtLxtSrKdn34/Tanz+56DIO+bQ
yRrGAYJ8MPQVmFPCfUkT0iv2gEYqBuBkovXsX6QTUkwWy+EYBArhjjo0GBGAvO+S
Tl6rW1by9Ja0NcrQ5JV3KsLyIl3X/I+aQ1JkW3wkYOjs0YJksC+1ntklJcv+GLc7
iuskFvi906WAewb+ONkpOoOo0jOwjvI4atidAfbS/o4cJJgFaRtw5d40+j2f9xXA
HJjAe8zDElSh8codQeuT9oqjahUPDj9e0dPu710cFzk3A25+2uIQV3BqsSJ8uKgY
Gf7Q53wejfPX4B0w7nVo658qzGOMM1XasOqhEgzeEw42
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:13 2024 by rpki-client on console-fra.rpki-client.org