Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y0xL2KvZie6oXY2ex4C_I77wepY.roa
File: y0xL2KvZie6oXY2ex4C_I77wepY.roa (raw, json)
Hash identifier: CDf7/5tZYpkjl4qkk1wBXOIzxZwLtrDPSr5IsYXJ4Y4=
Subject key identifier: CB:4C:4B:D8:AB:D9:89:EE:A8:5D:8D:9E:C7:80:BF:23:BE:F0:7A:96
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01875F41873F5A1765771AF17962FB3854E1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y0xL2KvZie6oXY2ex4C_I77wepY.roa
Signing time: Sat 08 Apr 2023 05:05:42 +0000
ROA not before: Sat 08 Apr 2023 05:05:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 45.88.66.0/24 maxlen: 24
185.225.75.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:41:87:3f:5a:17:65:77:1a:f1:79:62:fb:38:54:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 8 05:05:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb4c4bd8abd989eea85d8d9ec780bf23bef07a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:73:f4:62:f1:da:43:f7:64:c1:4e:f1:05:
38:eb:89:9f:48:c6:46:10:49:3b:14:63:01:86:27:
7b:c3:ba:c3:1f:b9:44:cb:32:aa:d4:ec:c7:7f:e3:
a1:e4:c2:f4:7c:af:8b:16:81:2f:c8:12:d9:34:c3:
49:51:b0:1f:25:22:b2:bc:83:7e:3d:d7:f5:f9:63:
e8:de:10:00:ca:83:a2:9f:9b:6a:e4:2a:6a:9f:f6:
07:c0:01:66:50:35:04:e4:16:68:8e:f1:50:fe:ff:
85:80:bb:33:f7:68:5b:ec:25:1c:4e:72:10:20:b8:
82:6b:9f:50:3f:97:e9:53:94:f0:3c:33:90:24:9c:
0f:1b:8e:a0:da:fe:82:52:f2:98:aa:68:36:46:d4:
85:ce:6b:5a:91:fa:7a:09:0a:2a:ca:7c:b2:36:02:
bc:29:49:c4:19:78:19:99:23:4c:0e:69:c5:35:bf:
64:93:72:5f:43:c5:70:82:3f:db:61:f4:b5:74:67:
b2:b5:bb:f0:57:ed:06:9b:15:03:53:0a:b4:e0:8e:
0c:e9:78:cb:8b:0d:b7:07:c1:04:2c:e1:cd:70:94:
f6:7f:50:cf:e9:c0:eb:64:44:88:c6:1c:99:fb:1c:
67:70:c9:28:4b:90:d1:c7:40:be:ee:12:27:38:bb:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4C:4B:D8:AB:D9:89:EE:A8:5D:8D:9E:C7:80:BF:23:BE:F0:7A:96
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y0xL2KvZie6oXY2ex4C_I77wepY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.66.0/24
45.128.235.0/24
185.225.75.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a3:21:d1:6c:24:da:b2:c1:db:8f:91:db:8e:15:0e:6d:ff:
e5:d0:cd:a7:ba:7a:52:7c:52:f6:56:c2:c8:0a:30:4f:95:77:
38:27:55:67:12:89:8f:9b:2d:59:09:3a:73:23:19:01:5f:9d:
99:41:4e:37:e9:09:2b:86:dc:2c:e7:87:ee:d6:35:94:49:c7:
80:d3:fe:fb:b8:76:cb:4a:81:ef:10:97:73:ab:b8:a5:63:1e:
d1:b4:44:a3:a0:50:a6:78:82:66:73:74:91:67:ee:55:d8:c5:
f4:be:2a:4a:d4:03:47:3b:14:99:c1:6b:d3:34:b5:ce:92:3c:
dd:56:c6:b8:ab:a0:b2:68:54:0f:69:33:4b:b1:5e:ea:b6:44:
bb:b2:3b:ba:12:33:52:96:bb:44:2d:99:b0:f4:67:cc:09:08:
29:f5:61:46:47:19:cd:cf:a3:71:e8:9c:cf:0a:d9:0d:86:a4:
32:98:68:20:d4:2e:43:e5:57:41:6d:34:0c:64:d7:7a:3e:09:
35:37:92:38:a5:c7:e5:3a:29:32:e4:f5:fd:03:b2:42:c4:03:
30:6d:84:12:30:17:51:e7:f2:67:45:c2:2e:c2:a2:31:c5:a7:
87:38:67:e8:12:94:a8:05:7f:4f:8b:61:0a:12:a4:f6:51:c5:
06:3f:9e:24
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYdfQYc/WhdldxrxeWL7OFThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNDA4MDUwNTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjRjNGJkOGFiZDk4OWVlYTg1ZDhkOWVjNzgwYmYyM2JlZjA3YTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYVz9GLx2kP3ZMFO8QU464mfSMZG
EEk7FGMBhid7w7rDH7lEyzKq1OzHf+Oh5ML0fK+LFoEvyBLZNMNJUbAfJSKyvIN+
Pdf1+WPo3hAAyoOin5tq5Cpqn/YHwAFmUDUE5BZojvFQ/v+FgLsz92hb7CUcTnIQ
ILiCa59QP5fpU5TwPDOQJJwPG46g2v6CUvKYqmg2RtSFzmtakfp6CQoqynyyNgK8
KUnEGXgZmSNMDmnFNb9kk3JfQ8Vwgj/bYfS1dGeytbvwV+0GmxUDUwq04I4M6XjL
iw23B8EELOHNcJT2f1DP6cDrZESIxhyZ+xxncMkoS5DRx0C+7hInOLve6wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMtMS9ir2YnuqF2NnseAvyO+8HqWMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEveTB4TDJLdlppZTZvWFkyZXg0Q19JNzd3ZXBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVhCAwQA
LYDrAwQAueFLMA0GCSqGSIb3DQEBCwUAA4IBAQCRoyHRbCTassHbj5HbjhUObf/l
0M2nunpSfFL2VsLICjBPlXc4J1VnEomPmy1ZCTpzIxkBX52ZQU436Qkrhtws54fu
1jWUSceA0/77uHbLSoHvEJdzq7ilYx7RtESjoFCmeIJmc3SRZ+5V2MX0vipK1ANH
OxSZwWvTNLXOkjzdVsa4q6CyaFQPaTNLsV7qtkS7sju6EjNSlrtELZmw9GfMCQgp
9WFGRxnNz6Nx6JzPCtkNhqQymGgg1C5D5VdBbTQMZNd6Pgk1N5I4pcflOiky5PX9
A7JCxAMwbYQSMBdR5/JnRcIuwqIxxaeHOGfoEpSoBX9Pi2EKEqT2UcUGP54k
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-ams.rpki-client.org