Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YijZITp1bCwkhkYKjG9N6PmQS4M.roa
File: YijZITp1bCwkhkYKjG9N6PmQS4M.roa (raw, json)
Hash identifier: W+1vET/f2HqR0jOYOGoGo3K7RcAZJkFxe82/6BoVMCQ=
Subject key identifier: 62:28:D9:21:3A:75:6C:2C:24:86:46:0A:8C:6F:4D:E8:F9:90:4B:83
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF98041A9B0335A27404DF449B82020
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YijZITp1bCwkhkYKjG9N6PmQS4M.roa
Signing time: Mon 02 Jan 2023 00:55:00 +0000
ROA not before: Mon 02 Jan 2023 00:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198280
IP address blocks: 78.83.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:80:41:a9:b0:33:5a:27:40:4d:f4:49:b8:20:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6228d9213a756c2c2486460a8c6f4de8f9904b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:bd:3a:92:ec:e8:6f:2a:52:a9:80:57:e2:
99:55:f9:10:02:30:78:b2:5b:94:3e:9c:45:04:83:
05:93:56:75:14:bd:75:6c:6c:e0:7a:23:04:77:2c:
ac:50:ec:8a:3b:35:95:6f:74:ac:c1:0d:22:20:fe:
e0:60:64:53:43:d4:51:6f:ec:a8:47:d6:2e:a8:95:
70:0a:2b:90:59:4e:7b:88:2e:6a:d1:cf:ea:6a:18:
82:90:51:9f:be:bd:e9:35:75:b9:0c:2c:ad:c7:da:
99:d1:c0:a1:15:a3:c1:48:ba:db:05:15:d4:ca:ba:
1b:6c:d2:9e:45:25:76:da:56:c0:2f:52:c4:aa:8c:
f0:2d:7c:7e:87:48:b1:80:03:94:ce:5f:af:7a:fe:
be:41:2d:52:58:e3:d6:ee:d0:e3:51:1b:0b:11:d9:
01:0c:fd:15:9c:fb:8b:a6:74:e3:be:6e:4e:a1:df:
fc:23:88:44:4a:c4:70:46:08:e7:18:8c:93:88:6c:
63:b7:23:6e:4b:f3:bd:89:26:c6:c2:57:d7:bb:a1:
25:ed:13:82:7d:a9:15:ce:6d:13:5e:05:cc:74:af:
07:30:16:5b:e5:27:ee:77:33:c7:24:cd:3b:0d:a8:
7f:26:0d:b6:d0:c4:a9:94:7a:6f:14:c3:78:90:06:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:28:D9:21:3A:75:6C:2C:24:86:46:0A:8C:6F:4D:E8:F9:90:4B:83
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YijZITp1bCwkhkYKjG9N6PmQS4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d6:ac:7b:3c:e2:bd:1f:34:e5:e8:14:d7:7d:3a:4a:b7:1e:
f5:36:63:e4:5f:fc:d2:a9:61:62:28:59:21:8c:44:ce:79:0c:
5c:5f:66:29:ec:b1:30:a4:37:e3:95:26:45:68:02:d4:8f:94:
68:a8:9c:bf:50:bf:e8:99:b5:d2:5b:47:bc:a8:cf:74:67:94:
a6:dd:08:13:79:49:cc:a6:b6:f2:73:e6:60:12:b1:8c:d5:bc:
92:97:b2:a1:a8:3f:9c:31:d0:84:a2:04:b0:57:8b:37:a4:e2:
8d:63:50:d0:4c:15:ca:a0:3f:7f:ef:ad:5d:bf:18:4c:66:bb:
7a:69:07:a0:d5:4b:4d:c1:89:0d:f2:d0:1b:37:b9:af:61:b6:
e8:f6:3d:55:7e:4b:58:da:67:91:b2:3f:4d:1c:25:5f:00:ec:
6c:6a:1d:65:2f:bd:cf:bd:09:38:2e:a8:af:57:31:c9:07:ce:
5a:49:b9:f0:47:c1:14:7b:9a:c2:0b:47:1f:e2:03:cb:50:dc:
f9:15:8a:34:de:da:4f:2e:3f:d8:9d:56:90:4c:e9:aa:b1:59:
1e:01:0f:1e:b0:6d:e8:05:df:0f:89:f4:9e:5e:35:df:fb:ad:
62:6d:d9:b4:e8:fe:9f:a7:3e:11:7c:ee:79:df:c5:85:ce:00:
b5:20:16:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv+YBBqbAzWidATfRJuCAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjMwMTAyMDA1NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjI4ZDkyMTNhNzU2YzJjMjQ4NjQ2MGE4YzZmNGRlOGY5OTA0YjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6e9OpLs6G8qUqmAV+KZVfkQAjB4
sluUPpxFBIMFk1Z1FL11bGzgeiMEdyysUOyKOzWVb3SswQ0iIP7gYGRTQ9RRb+yo
R9YuqJVwCiuQWU57iC5q0c/qahiCkFGfvr3pNXW5DCytx9qZ0cChFaPBSLrbBRXU
yrobbNKeRSV22lbAL1LEqozwLXx+h0ixgAOUzl+vev6+QS1SWOPW7tDjURsLEdkB
DP0VnPuLpnTjvm5Ood/8I4hESsRwRgjnGIyTiGxjtyNuS/O9iSbGwlfXu6El7ROC
fakVzm0TXgXMdK8HMBZb5SfudzPHJM07Dah/Jg220MSplHpvFMN4kAZBJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGIo2SE6dWwsJIZGCoxvTej5kEuDMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvWWlqWklUcDFiQ3draGtZS2pHOU42UG1RUzRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATlPRMA0G
CSqGSIb3DQEBCwUAA4IBAQCN1qx7POK9HzTl6BTXfTpKtx71NmPkX/zSqWFiKFkh
jETOeQxcX2Yp7LEwpDfjlSZFaALUj5RoqJy/UL/ombXSW0e8qM90Z5Sm3QgTeUnM
prbyc+ZgErGM1bySl7KhqD+cMdCEogSwV4s3pOKNY1DQTBXKoD9/761dvxhMZrt6
aQeg1UtNwYkN8tAbN7mvYbbo9j1VfktY2meRsj9NHCVfAOxsah1lL73PvQk4Lqiv
VzHJB85aSbnwR8EUe5rCC0cf4gPLUNz5FYo03tpPLj/YnVaQTOmqsVkeAQ8esG3o
Bd8PifSeXjXf+61ibdm06P6fpz4RfO5538WFzgC1IBaK
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org