Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/Ev7YeHf02oGPt-GCim25PacPWoc.roa
File: Ev7YeHf02oGPt-GCim25PacPWoc.roa (raw, json)
Hash identifier: bIaTjyZUBLJvt3/j9Xyo1tGFGuEDOxAlmx0YByrByBw=
Subject key identifier: 12:FE:D8:78:77:F4:DA:81:8F:B7:E1:82:8A:6D:B9:3D:A7:0F:5A:87
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 01856D5CF18763374FCF6D2F82A8DB3A0352
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/Ev7YeHf02oGPt-GCim25PacPWoc.roa
Signing time: Sun 01 Jan 2023 12:44:45 +0000
ROA not before: Sun 01 Jan 2023 12:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203545
IP address blocks: 91.148.126.0/23 maxlen: 24
62.108.100.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:f1:87:63:37:4f:cf:6d:2f:82:a8:db:3a:03:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Jan 1 12:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12fed87877f4da818fb7e1828a6db93da70f5a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:97:94:1c:82:11:b0:71:1c:eb:fd:7f:df:
10:bd:46:58:b2:44:c4:ae:60:7b:6a:82:12:5d:1c:
0b:db:c7:4f:a5:43:e8:11:ca:9d:c0:69:db:bf:23:
94:31:b8:86:23:b0:de:06:00:2b:55:1f:a3:4a:48:
f5:9a:df:02:99:ee:1a:c7:43:e0:24:1a:e0:0f:b5:
7b:89:10:f0:98:34:ef:2d:a4:9c:c6:8a:ea:e0:62:
1c:6e:f6:2e:b9:c0:e0:05:97:40:ee:5c:89:00:4e:
bb:8d:81:3b:6a:7b:46:92:b7:fd:31:1c:94:fe:a6:
59:ee:9b:d9:8d:f7:c4:a7:03:41:91:70:2b:9b:c2:
db:54:24:21:ee:d6:de:1d:7a:d0:83:c7:73:ca:60:
6c:dc:f8:7f:ea:76:47:9d:13:f9:b3:5f:30:dc:3a:
cd:10:a1:c3:9c:0c:19:b6:0f:71:ec:76:a6:3a:50:
ab:d0:5c:e3:38:82:24:91:a1:9b:ce:b1:e9:17:1a:
5d:37:24:27:4f:6e:72:91:cd:95:b6:86:7c:9b:13:
8b:a8:c5:0b:a1:83:32:56:94:f4:3a:05:46:91:a6:
58:8c:40:40:80:63:e3:05:c6:9a:6e:34:82:1f:ae:
24:cb:fd:fd:b2:33:db:af:be:25:c0:91:cd:0b:06:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FE:D8:78:77:F4:DA:81:8F:B7:E1:82:8A:6D:B9:3D:A7:0F:5A:87
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/Ev7YeHf02oGPt-GCim25PacPWoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.100.0/23
91.148.126.0/23
Signature Algorithm: sha256WithRSAEncryption
66:19:75:d1:fc:a5:28:f1:ea:4d:dc:5d:9d:8e:28:f4:61:6b:
28:fa:ea:98:9b:5f:97:94:c5:49:84:7c:cf:fd:2e:53:7b:44:
f5:ca:b6:7d:16:ac:b4:79:b1:26:23:7e:51:ba:84:30:af:fa:
66:ad:cf:3d:19:c6:71:66:03:ad:20:a4:8a:20:e1:60:88:d2:
bc:82:78:50:e2:3b:dd:39:ff:6f:65:4b:1f:2b:96:96:8e:f0:
c8:11:ab:0d:fe:00:9d:94:1d:8c:9a:e7:a4:36:05:77:84:c3:
71:6b:51:49:13:3b:b5:e1:57:ba:68:37:47:71:95:94:59:03:
59:f1:46:e3:43:81:f4:43:c8:5e:84:5e:8b:a7:b7:79:3c:2b:
72:34:0c:29:c9:96:1e:49:55:29:58:ff:1f:69:97:f7:af:f3:
c5:25:40:dd:94:43:23:4f:6a:d3:5b:f7:2d:78:c4:7a:e8:9e:
e3:76:ef:8b:a1:3a:a5:eb:4d:e5:76:26:04:1e:1f:c6:bc:4d:
d5:e7:27:8c:e0:3a:04:e7:a1:c9:c1:b8:54:e7:e9:1b:46:a4:
f1:8a:82:db:3c:18:d6:e1:28:d3:d7:05:c4:ef:0f:ac:e4:4c:
bd:3d:5a:74:e4:3f:c4:77:7a:93:d8:97:ab:f3:b6:c3:81:74:
96:c0:90:d7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtXPGHYzdPz20vgqjbOgNSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNzhhNzY4YzkxMGJhZGNkNWM0YWVmN2MxNzJhOWYwNjE1
NDdlOGMwHhcNMjMwMTAxMTI0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmZlZDg3ODc3ZjRkYTgxOGZiN2UxODI4YTZkYjkzZGE3MGY1YTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFSXlByCEbBxHOv9f98QvUZYskTE
rmB7aoISXRwL28dPpUPoEcqdwGnbvyOUMbiGI7DeBgArVR+jSkj1mt8Cme4ax0Pg
JBrgD7V7iRDwmDTvLaScxorq4GIcbvYuucDgBZdA7lyJAE67jYE7antGkrf9MRyU
/qZZ7pvZjffEpwNBkXArm8LbVCQh7tbeHXrQg8dzymBs3Ph/6nZHnRP5s18w3DrN
EKHDnAwZtg9x7HamOlCr0FzjOIIkkaGbzrHpFxpdNyQnT25ykc2VtoZ8mxOLqMUL
oYMyVpT0OgVGkaZYjEBAgGPjBcaabjSCH64ky/39sjPbr74lwJHNCwbp6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBL+2Hh39NqBj7fhgoptuT2nD1qHMB8GA1UdIwQY
MBaAFGJ4p2jJELrc1cSu98FyqfBhVH6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5pbmFNa1F1dHpWeEs3M3dYS3A4R0ZVZm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80MmRmYzAtYTc2NC00ZDVkLWE2MzQt
MzQ1NGY0OTBmZDk2LzEvRXY3WWVIZjAyb0dQdC1HQ2ltMjVQYWNQV29jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80MmRmYzAtYTc2NC00ZDVkLWE2MzQtMzQ1NGY0OTBmZDk2
LzEvWW5pbmFNa1F1dHpWeEs3M3dYS3A4R0ZVZm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBPmxkAwQB
W5R+MA0GCSqGSIb3DQEBCwUAA4IBAQBmGXXR/KUo8epN3F2djij0YWso+uqYm1+X
lMVJhHzP/S5Te0T1yrZ9Fqy0ebEmI35RuoQwr/pmrc89GcZxZgOtIKSKIOFgiNK8
gnhQ4jvdOf9vZUsfK5aWjvDIEasN/gCdlB2MmuekNgV3hMNxa1FJEzu14Ve6aDdH
cZWUWQNZ8UbjQ4H0Q8hehF6Lp7d5PCtyNAwpyZYeSVUpWP8faZf3r/PFJUDdlEMj
T2rTW/cteMR66J7jdu+LoTql603ldiYEHh/GvE3V5yeM4DoE56HJwbhU5+kbRqTx
ioLbPBjW4SjT1wXE7w+s5Ey9PVp05D/Ed3qT2Jer87bDgXSWwJDX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:30 2024 by rpki-client on console-fra.rpki-client.org