Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/yfWbC_nOofpwqPOFn-uLRyqrVD4.roa
File: yfWbC_nOofpwqPOFn-uLRyqrVD4.roa (raw, json)
Hash identifier: d2fV0XF8t8CSmSaXNlMwsJEJKjSRjoeBrNbLS0cq8Dc=
Subject key identifier: C9:F5:9B:0B:F9:CE:A1:FA:70:A8:F3:85:9F:EB:8B:47:2A:AB:54:3E
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0189DA93134B65FD379F92B78A9277EB7BB9
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/yfWbC_nOofpwqPOFn-uLRyqrVD4.roa
Signing time: Wed 09 Aug 2023 13:53:39 +0000
ROA not before: Wed 09 Aug 2023 13:53:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210489
IP address blocks: 45.135.96.0/23 maxlen: 23
45.135.98.0/23 maxlen: 23
45.136.64.0/22 maxlen: 23
185.222.32.0/23 maxlen: 23
185.222.34.0/23 maxlen: 23
45.141.16.0/23 maxlen: 23
45.152.8.0/23 maxlen: 23
45.141.18.0/23 maxlen: 23
91.244.204.0/22 maxlen: 23
46.161.220.0/23 maxlen: 23
46.161.222.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 09 Aug 2023 13:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:da:93:13:4b:65:fd:37:9f:92:b7:8a:92:77:eb:7b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Aug 9 13:53:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9f59b0bf9cea1fa70a8f3859feb8b472aab543e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:4f:8c:57:a4:8e:4e:81:ae:b4:bc:5e:b6:
96:a4:81:c6:fd:b6:3d:e8:3a:ed:9a:46:48:63:ad:
16:38:ac:97:c1:67:17:81:37:e2:94:eb:12:11:25:
14:68:b0:02:cd:49:8c:91:f5:43:eb:43:24:10:4e:
47:b5:c6:3a:dc:b7:bd:1b:70:b1:2b:17:3d:7b:93:
d7:9a:7f:4f:5c:fe:db:bc:98:c8:dd:c9:60:d9:5f:
90:13:19:ea:ca:28:39:1a:2a:ec:0e:9c:cb:ea:c4:
89:56:1b:2e:0c:1c:57:45:29:24:7d:5b:5f:84:a8:
90:91:6f:c7:3a:c1:7b:2b:c3:ca:03:db:f1:69:8e:
5e:22:6c:9e:97:9c:ac:06:5f:9c:c8:60:1f:28:bd:
a3:87:9d:db:71:5e:ed:48:74:09:55:3e:6a:1e:0e:
51:73:b4:bc:b4:2d:55:2a:ae:8f:6f:39:ae:99:6e:
c2:cb:d1:52:ca:32:ab:8f:66:e4:64:27:77:50:88:
4e:78:b2:05:74:b7:3a:7f:35:d7:7f:f8:9a:eb:ac:
9c:3e:28:e7:f4:49:1e:e4:60:b9:1e:4d:15:ee:c6:
50:af:f7:57:0e:10:50:a7:9c:2f:b8:4d:bc:d3:c6:
c2:5d:e2:5a:0e:19:43:c1:bf:7f:69:bd:d0:d1:00:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F5:9B:0B:F9:CE:A1:FA:70:A8:F3:85:9F:EB:8B:47:2A:AB:54:3E
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/yfWbC_nOofpwqPOFn-uLRyqrVD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.96.0/22
45.136.64.0/22
45.141.16.0/22
45.152.8.0/23
46.161.220.0/22
91.244.204.0/22
185.222.32.0/22
Signature Algorithm: sha256WithRSAEncryption
28:0b:75:85:8d:93:89:b7:9c:61:d4:4b:31:4e:ae:1f:8f:84:
b7:1d:57:37:c3:f0:39:ca:53:e8:1a:28:68:6c:48:ff:d4:8a:
b6:e1:ae:66:8c:06:ea:af:a5:28:e3:c0:d4:3c:99:13:2c:55:
5b:2d:a0:7a:2a:f9:15:68:07:26:3f:35:bc:84:0c:0f:ba:ba:
a5:b9:5a:c3:aa:b5:6d:92:97:68:17:a0:44:80:16:31:49:be:
25:9a:c4:09:36:65:a0:8f:13:fb:1e:95:af:e3:2f:01:65:bb:
74:f8:2e:f5:9f:87:70:29:7b:1f:1c:b6:67:96:fd:5d:6e:eb:
c5:a8:f8:60:41:8b:5f:f8:5b:bc:86:e5:fb:ae:1c:2f:f0:a9:
5e:62:db:c7:47:2b:98:67:62:2c:09:3d:e2:71:c9:95:e2:2a:
27:32:c8:aa:dc:44:ad:e4:07:74:e1:0d:82:cf:de:e3:09:60:
5e:ab:f1:75:4f:97:92:ff:ab:5b:74:86:0d:82:dc:7f:06:14:
84:c7:96:72:fd:38:7a:dd:a6:80:29:a0:e4:aa:19:21:53:b3:
21:c1:f7:e3:3f:d4:5c:17:e1:b4:72:1c:7d:be:be:99:7d:7f:
8e:22:db:60:3b:9d:e5:52:04:4a:1d:d1:28:66:db:0e:7c:d2:
65:2c:61:1d
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYnakxNLZf03n5K3ipJ363u5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjMwODA5MTM1MzM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWY1OWIwYmY5Y2VhMWZhNzBhOGYzODU5ZmViOGI0NzJhYWI1NDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfJPjFekjk6BrrS8XraWpIHG/bY9
6DrtmkZIY60WOKyXwWcXgTfilOsSESUUaLACzUmMkfVD60MkEE5HtcY63Le9G3Cx
Kxc9e5PXmn9PXP7bvJjI3clg2V+QExnqyig5GirsDpzL6sSJVhsuDBxXRSkkfVtf
hKiQkW/HOsF7K8PKA9vxaY5eImyel5ysBl+cyGAfKL2jh53bcV7tSHQJVT5qHg5R
c7S8tC1VKq6PbzmumW7Cy9FSyjKrj2bkZCd3UIhOeLIFdLc6fzXXf/ia66ycPijn
9Eke5GC5Hk0V7sZQr/dXDhBQp5wvuE2808bCXeJaDhlDwb9/ab3Q0QBwUwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFMn1mwv5zqH6cKjzhZ/ri0cqq1Q+MB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEveWZXYkNfbk9vZnB3cVBPRm4tdUxSeXFyVkQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLYdgAwQC
LYhAAwQCLY0QAwQBLZgIAwQCLqHcAwQCW/TMAwQCud4gMA0GCSqGSIb3DQEBCwUA
A4IBAQAoC3WFjZOJt5xh1EsxTq4fj4S3HVc3w/A5ylPoGihobEj/1Iq24a5mjAbq
r6Uo48DUPJkTLFVbLaB6KvkVaAcmPzW8hAwPurqluVrDqrVtkpdoF6BEgBYxSb4l
msQJNmWgjxP7HpWv4y8BZbt0+C71n4dwKXsfHLZnlv1dbuvFqPhgQYtf+Fu8huX7
rhwv8KleYtvHRyuYZ2IsCT3iccmV4ionMsiq3ESt5Ad04Q2Cz97jCWBeq/F1T5eS
/6tbdIYNgtx/BhSEx5Zy/Th63aaAKaDkqhkhU7MhwffjP9RcF+G0chx9vr6ZfX+O
IttgO53lUgRKHdEoZtsOfNJlLGEd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:26 2024 by rpki-client on console-fra.rpki-client.org