Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/YernHkALR9DOk1VoO5g7HJSuF1M.roa
File: YernHkALR9DOk1VoO5g7HJSuF1M.roa (raw, json)
Hash identifier: rgDpDEtjFdPr7JNLuqQuhws36gPvTbdqhzkrNYevYNs=
Subject key identifier: 61:EA:E7:1E:40:0B:47:D0:CE:93:55:68:3B:98:3B:1C:94:AE:17:53
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 01857102BA8BF8EE7199C3758893C19CDD4D
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/YernHkALR9DOk1VoO5g7HJSuF1M.roa
Signing time: Mon 02 Jan 2023 05:44:42 +0000
ROA not before: Mon 02 Jan 2023 05:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 194.59.137.0/24 maxlen: 24
194.59.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:ba:8b:f8:ee:71:99:c3:75:88:93:c1:9c:dd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Jan 2 05:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61eae71e400b47d0ce9355683b983b1c94ae1753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a7:96:90:21:97:84:12:18:5a:1b:01:da:ef:
00:cd:28:6a:92:f1:32:38:db:64:01:f9:64:dc:f3:
aa:bf:1c:36:45:dc:99:5c:81:7f:b0:30:f4:3d:4c:
45:c5:55:f3:d6:5a:23:5c:9b:d4:ef:b0:25:38:a7:
98:d7:40:60:dc:6c:a2:5c:a9:b2:ae:9b:0b:a0:4e:
07:46:93:51:4a:63:00:d6:a8:4c:38:72:a7:7b:ba:
6c:63:d5:50:a7:2c:e2:1d:2c:4e:5c:d4:94:d7:c6:
1a:03:0f:29:26:ec:4d:c8:a9:69:e6:c2:67:9b:18:
f4:fa:a0:6d:88:d1:cb:35:e7:6d:c0:27:63:aa:6c:
81:17:5a:a1:51:bd:d5:63:90:23:e0:85:08:21:c5:
99:11:38:99:33:ff:d4:83:1c:6a:75:b5:a8:6f:dc:
ad:5f:61:46:5a:25:51:92:79:04:c7:31:ba:6e:90:
8e:d9:45:07:1e:8e:36:9d:5c:f9:64:35:72:40:95:
16:22:ab:5d:b6:03:c1:68:7f:26:67:f3:bf:b9:30:
93:a2:18:25:e3:dc:fc:33:e6:fd:ca:0b:a2:7d:a0:
f9:f5:88:2b:bc:36:4d:3d:33:fd:4f:ea:ed:84:01:
7f:ab:85:49:d5:6b:3f:a1:39:f3:ec:69:2f:d1:fa:
bd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EA:E7:1E:40:0B:47:D0:CE:93:55:68:3B:98:3B:1C:94:AE:17:53
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/YernHkALR9DOk1VoO5g7HJSuF1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.137.0/24
194.59.139.0/24
Signature Algorithm: sha256WithRSAEncryption
30:40:c8:75:43:31:59:ed:f4:08:70:9a:c5:65:a9:2f:c0:ce:
4e:d2:17:b0:aa:71:86:db:50:81:81:48:9b:c4:49:dc:6c:21:
95:ac:27:00:01:90:0c:cd:51:7d:57:6d:93:b4:29:9e:2c:88:
de:6d:f7:fe:cd:31:a9:27:6b:86:a2:72:d3:3c:db:ed:a9:00:
1f:a0:61:9a:1a:d4:6f:ba:fc:f0:3b:d2:6a:6b:7c:73:ad:ef:
47:52:10:48:2a:f2:b7:f0:de:d1:85:2b:7e:34:45:09:7e:18:
05:6c:12:8f:df:5e:04:5c:13:a8:f5:85:fc:97:ef:c0:63:7f:
da:3c:f1:b4:09:a1:bd:45:bd:15:9e:0b:d7:2f:a8:e5:fb:07:
40:c3:47:21:fa:7a:10:76:b1:04:9a:fd:16:c9:80:da:db:01:
85:29:aa:9d:f6:43:5b:2e:f8:e7:dd:7c:66:82:01:e3:e8:70:
1c:ee:bb:8c:cd:10:8a:09:01:63:e2:9d:65:aa:df:8d:4f:a6:
53:d8:61:5c:35:67:fc:04:ea:4b:78:80:2d:0a:25:74:77:00:
d7:7c:4e:46:2c:b1:b7:7a:78:2b:f9:9b:66:80:21:bd:f1:f3:
47:68:6f:2c:83:8c:7c:60:c2:9a:13:32:0a:92:34:fa:b3:d8:
55:de:a5:fa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxArqL+O5xmcN1iJPBnN1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzkxMmEwNDExYmIwMTc0NTA3MDkyZDBjYTM1YTkxYWQ3
OTkwNWMwHhcNMjMwMTAyMDU0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWVhZTcxZTQwMGI0N2QwY2U5MzU1NjgzYjk4M2IxYzk0YWUxNzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqeWkCGXhBIYWhsB2u8AzShqkvEy
ONtkAflk3POqvxw2RdyZXIF/sDD0PUxFxVXz1lojXJvU77AlOKeY10Bg3GyiXKmy
rpsLoE4HRpNRSmMA1qhMOHKne7psY9VQpyziHSxOXNSU18YaAw8pJuxNyKlp5sJn
mxj0+qBtiNHLNedtwCdjqmyBF1qhUb3VY5Aj4IUIIcWZETiZM//UgxxqdbWob9yt
X2FGWiVRknkExzG6bpCO2UUHHo42nVz5ZDVyQJUWIqtdtgPBaH8mZ/O/uTCTohgl
49z8M+b9yguifaD59YgrvDZNPTP9T+rthAF/q4VJ1Ws/oTnz7Gkv0fq9TQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGHq5x5AC0fQzpNVaDuYOxyUrhdTMB8GA1UdIwQY
MBaAFFPJEqBBG7AXRQcJLQyjWpGteZBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAt
ZTIxYzQzNmI2MmVmLzEvWWVybkhrQUxSOURPazFWb081ZzdISlN1RjFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAtZTIxYzQzNmI2MmVm
LzEvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwjuJAwQA
wjuLMA0GCSqGSIb3DQEBCwUAA4IBAQAwQMh1QzFZ7fQIcJrFZakvwM5O0hewqnGG
21CBgUibxEncbCGVrCcAAZAMzVF9V22TtCmeLIjebff+zTGpJ2uGonLTPNvtqQAf
oGGaGtRvuvzwO9Jqa3xzre9HUhBIKvK38N7RhSt+NEUJfhgFbBKP314EXBOo9YX8
l+/AY3/aPPG0CaG9Rb0VngvXL6jl+wdAw0ch+noQdrEEmv0WyYDa2wGFKaqd9kNb
Lvjn3XxmggHj6HAc7ruMzRCKCQFj4p1lqt+NT6ZT2GFcNWf8BOpLeIAtCiV0dwDX
fE5GLLG3engr+ZtmgCG98fNHaG8sg4x8YMKaEzIKkjT6s9hV3qX6
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:57 2023 by rpki-client on console-ams.rpki-client.org