Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/yfec0H0B7_0GuWGyw0kz3L63yHo.roa
File: yfec0H0B7_0GuWGyw0kz3L63yHo.roa (raw, json)
Hash identifier: A9brQ+JohAZhdkumpIuB2XsdONCqyH4Y07tE0tCnq50=
Subject key identifier: C9:F7:9C:D0:7D:01:EF:FD:06:B9:61:B2:C3:49:33:DC:BE:B7:C8:7A
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 01898D02EE7C6580EB681BB60365C11DB4E6
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/yfec0H0B7_0GuWGyw0kz3L63yHo.roa
Signing time: Tue 25 Jul 2023 12:25:26 +0000
ROA not before: Tue 25 Jul 2023 12:25:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 185.122.12.0/24 maxlen: 24
185.122.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8d:02:ee:7c:65:80:eb:68:1b:b6:03:65:c1:1d:b4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Jul 25 12:25:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9f79cd07d01effd06b961b2c34933dcbeb7c87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:37:d8:b5:04:bd:fb:e9:22:06:2a:c1:70:
9a:9a:32:3c:fd:f3:46:26:6e:39:e7:ad:1d:a3:49:
05:c4:c4:8e:c6:01:57:73:23:9a:7c:04:41:3c:c7:
d5:7c:ef:5d:1e:25:30:a0:39:1f:8b:10:96:0c:da:
cf:c5:a3:d9:07:a7:a3:35:37:70:54:08:c0:d2:de:
f5:f6:ea:a3:f9:45:27:2a:69:e8:55:0d:18:13:84:
ef:e7:43:a8:15:61:a5:5e:c3:6a:e9:e1:2c:b6:6a:
9a:4c:8e:f8:28:54:7c:86:50:91:5c:1e:3e:91:4a:
5b:ee:eb:c8:10:10:ca:c4:c4:31:7d:4d:db:07:e5:
70:c2:5d:0f:e5:c1:e3:87:07:28:3a:96:16:2c:f9:
db:8d:5a:26:8a:15:40:79:b4:75:76:30:6a:32:8c:
04:cb:53:33:7a:8e:5a:99:d1:43:be:d5:3c:9e:b7:
a3:77:38:a3:ba:8c:3e:9d:15:4e:10:b4:d1:56:ec:
aa:a9:fe:c7:77:8d:97:ae:e2:f3:d6:48:41:a5:77:
f2:d1:65:63:db:3c:0d:70:46:99:96:03:e6:02:98:
f2:03:f8:94:50:fc:a9:13:aa:50:5d:3a:98:5e:1f:
0f:3b:6d:60:5d:30:0f:bb:45:18:78:5a:41:7b:af:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F7:9C:D0:7D:01:EF:FD:06:B9:61:B2:C3:49:33:DC:BE:B7:C8:7A
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/yfec0H0B7_0GuWGyw0kz3L63yHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.12.0/23
Signature Algorithm: sha256WithRSAEncryption
08:d2:da:e7:1a:a6:a0:b5:1e:07:f1:1a:4c:e4:e9:3b:0f:de:
bc:01:e4:46:09:34:a0:a3:7d:bc:ec:75:3d:f2:32:d5:24:02:
85:e4:43:f4:12:07:5b:0c:a6:bb:e7:66:95:f9:38:62:59:a0:
be:17:22:5a:a5:f2:c7:bf:f6:7f:5a:b3:af:eb:e9:e5:6a:ff:
3b:92:2b:95:61:48:d1:c6:af:b8:b9:16:0b:e4:32:42:19:fb:
10:64:ad:37:fa:48:e8:2b:03:41:86:ca:8d:bc:32:27:71:1b:
6d:d8:f8:21:9a:b1:36:8d:70:cc:ba:6b:a6:94:10:d5:23:6b:
33:b7:52:38:b6:fb:7e:07:5f:a2:7d:92:6d:2d:d6:fa:f5:27:
83:56:b0:e3:7b:1f:a9:b7:1c:55:62:bc:ab:72:0a:cf:8f:cc:
b4:03:6c:54:86:53:a9:1e:7d:23:9d:0b:34:68:74:a9:95:e2:
46:c9:cd:b5:4f:2d:03:84:a3:c1:70:f1:b5:58:ee:aa:cf:64:
fa:59:fe:6a:88:bf:24:6e:53:a4:59:73:f6:64:a6:33:5c:20:
f5:57:a1:da:48:ea:e6:cf:41:b3:d3:5b:cd:52:d8:b6:e6:1c:
4f:c7:96:6f:51:b9:b8:46:64:3d:e1:e4:c7:c4:73:6a:53:88:
cc:03:99:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmNAu58ZYDraBu2A2XBHbTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Y2NkNzM1MDhhOWI1OTk4NWQ1NTk3ODY4ZTNhNWQ1ZWM3
NDVmNWUwHhcNMjMwNzI1MTIyNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWY3OWNkMDdkMDFlZmZkMDZiOTYxYjJjMzQ5MzNkY2JlYjdjODdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQI32LUEvfvpIgYqwXCamjI8/fNG
Jm45560do0kFxMSOxgFXcyOafARBPMfVfO9dHiUwoDkfixCWDNrPxaPZB6ejNTdw
VAjA0t719uqj+UUnKmnoVQ0YE4Tv50OoFWGlXsNq6eEstmqaTI74KFR8hlCRXB4+
kUpb7uvIEBDKxMQxfU3bB+Vwwl0P5cHjhwcoOpYWLPnbjVomihVAebR1djBqMowE
y1Mzeo5amdFDvtU8nrejdzijuow+nRVOELTRVuyqqf7Hd42XruLz1khBpXfy0WVj
2zwNcEaZlgPmApjyA/iUUPypE6pQXTqYXh8PO21gXTAPu0UYeFpBe68hgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMn3nNB9Ae/9BrlhssNJM9y+t8h6MB8GA1UdIwQY
MBaAFOTM1zUIqbWZhdVZeGjjpdXsdF9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgt
ODVkODBhNTQ0YmViLzEveWZlYzBIMEI3XzBHdVdHeXcwa3ozTDYzeUhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgtODVkODBhNTQ0YmVi
LzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXoMMA0G
CSqGSIb3DQEBCwUAA4IBAQAI0trnGqagtR4H8RpM5Ok7D968AeRGCTSgo3287HU9
8jLVJAKF5EP0EgdbDKa752aV+ThiWaC+FyJapfLHv/Z/WrOv6+nlav87kiuVYUjR
xq+4uRYL5DJCGfsQZK03+kjoKwNBhsqNvDIncRtt2PghmrE2jXDMumumlBDVI2sz
t1I4tvt+B1+ifZJtLdb69SeDVrDjex+ptxxVYryrcgrPj8y0A2xUhlOpHn0jnQs0
aHSpleJGyc21Ty0DhKPBcPG1WO6qz2T6Wf5qiL8kblOkWXP2ZKYzXCD1V6HaSOrm
z0Gz01vNUti25hxPx5ZvUbm4RmQ94eTHxHNqU4jMA5lY
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:30 2024 by rpki-client on console-fra.rpki-client.org