Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/yk_6XOInOsOBlVncsjqOZcm7gbs.roa
File: yk_6XOInOsOBlVncsjqOZcm7gbs.roa (raw, json)
Hash identifier: 8oitPz24OLaC4vJXcF8SxjEenXmLoeGgXb8g3u3bTaU=
Subject key identifier: CA:4F:FA:5C:E2:27:3A:C3:81:95:59:DC:B2:3A:8E:65:C9:BB:81:BB
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 018B4AB8F06E785639F31366AF81CADC080E
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/yk_6XOInOsOBlVncsjqOZcm7gbs.roa
Signing time: Fri 20 Oct 2023 01:35:15 +0000
ROA not before: Fri 20 Oct 2023 01:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 185.33.94.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4a:b8:f0:6e:78:56:39:f3:13:66:af:81:ca:dc:08:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Oct 20 01:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca4ffa5ce2273ac3819559dcb23a8e65c9bb81bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:a9:8b:b2:64:9a:f8:60:3a:b1:39:8a:a9:
dd:f5:f1:04:bf:a4:d1:aa:d9:63:a6:80:9a:93:e1:
44:e1:3d:77:99:7b:cf:1f:a0:be:58:42:3d:56:70:
5c:72:39:42:5e:ad:26:79:44:49:c7:b3:49:f5:5e:
ae:ad:84:81:49:af:06:a0:50:84:db:74:fc:d5:69:
7a:da:73:d7:cb:5d:bf:20:5f:c5:1e:68:84:46:5b:
6b:1c:9a:e0:7e:3a:df:ed:c3:a4:75:d1:b1:50:8d:
8d:04:84:c3:e8:e8:a3:04:73:dd:95:38:9d:f5:8d:
c6:e4:60:61:73:75:bc:07:be:8f:90:3b:4c:6b:3f:
d5:af:50:9f:b1:bb:d4:e3:e5:1d:b7:84:07:ef:82:
4b:c8:e3:4f:b9:87:f3:7c:1f:6f:04:45:90:9e:53:
90:fd:46:9f:40:cb:93:f4:e6:35:e8:04:64:a9:59:
7a:15:88:e3:26:2a:cf:be:26:01:60:ce:f2:6d:90:
54:ef:41:57:28:8e:c4:0b:b3:e2:29:4a:27:48:7e:
a5:3d:e1:e7:7e:2e:5b:1e:9e:20:e0:96:e7:33:97:
6c:93:46:ec:2a:f1:7b:69:f8:84:1e:06:5d:e2:1e:
a1:82:f6:b4:9c:fe:02:2e:4c:65:e0:ba:20:ca:59:
af:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4F:FA:5C:E2:27:3A:C3:81:95:59:DC:B2:3A:8E:65:C9:BB:81:BB
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/yk_6XOInOsOBlVncsjqOZcm7gbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.94.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:b0:2b:32:ac:61:68:e1:9c:f3:ab:e3:6e:67:7f:83:04:83:
d8:c2:8d:4a:14:e2:33:bb:2b:38:c1:7e:be:83:68:f4:fc:31:
8b:26:47:32:a0:9f:92:70:a2:2d:54:80:73:6c:03:5e:0b:1e:
44:7c:fc:be:92:fd:a0:eb:3b:f8:5e:fd:42:e8:d0:3b:1c:25:
58:cd:9d:34:46:80:8d:87:10:ee:1f:6f:4e:db:51:04:f9:e5:
e1:17:d1:a7:33:94:42:33:38:9e:d4:9b:9e:ee:05:3a:36:b1:
d8:b9:7d:a5:cb:77:94:77:9f:7a:74:2d:31:80:10:d9:3c:4e:
7f:f8:f9:13:97:66:68:4c:d7:b7:e7:f5:f9:8f:e6:0f:b5:74:
88:13:cf:a9:40:5f:70:1e:be:75:21:d2:d9:22:91:63:6f:ef:
f0:a8:44:5b:d5:7a:c4:d9:d6:74:ef:27:53:e8:6c:19:65:dd:
8b:d8:b0:6e:c1:36:3e:ac:57:cb:e5:d7:b7:a9:9b:36:e8:60:
4b:05:ab:30:ad:92:d3:ea:47:ec:0a:34:e9:c2:92:4c:59:b5:
63:b7:a1:71:2e:21:2c:13:76:b2:7c:3f:34:11:b7:1e:09:59:
4d:a0:f8:09:00:1a:92:33:4f:05:af:f0:a5:2c:b0:2c:10:ba:
43:ab:e4:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtKuPBueFY58xNmr4HK3AgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzY2NDAzYWQwYzQ1MzdhZjljMzJiMGRlZjBjNTJhYzJh
YWIxMDQwHhcNMjMxMDIwMDEzNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTRmZmE1Y2UyMjczYWMzODE5NTU5ZGNiMjNhOGU2NWM5YmI4MWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosepi7JkmvhgOrE5iqnd9fEEv6TR
qtljpoCak+FE4T13mXvPH6C+WEI9VnBccjlCXq0meURJx7NJ9V6urYSBSa8GoFCE
23T81Wl62nPXy12/IF/FHmiERltrHJrgfjrf7cOkddGxUI2NBITD6OijBHPdlTid
9Y3G5GBhc3W8B76PkDtMaz/Vr1CfsbvU4+Udt4QH74JLyONPuYfzfB9vBEWQnlOQ
/UafQMuT9OY16ARkqVl6FYjjJirPviYBYM7ybZBU70FXKI7EC7PiKUonSH6lPeHn
fi5bHp4g4JbnM5dsk0bsKvF7afiEHgZd4h6hgva0nP4CLkxl4Logylmv0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMpP+lziJzrDgZVZ3LI6jmXJu4G7MB8GA1UdIwQY
MBaAFOvGZAOtDEU3r5wysN7wxSrCqrEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMt
ZDFhOWRhNGExMzBkLzEveWtfNlhPSW5Pc09CbFZuY3NqcU9aY203Z2JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMtZDFhOWRhNGExMzBk
LzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSFeMA0G
CSqGSIb3DQEBCwUAA4IBAQA6sCsyrGFo4Zzzq+NuZ3+DBIPYwo1KFOIzuys4wX6+
g2j0/DGLJkcyoJ+ScKItVIBzbANeCx5EfPy+kv2g6zv4Xv1C6NA7HCVYzZ00RoCN
hxDuH29O21EE+eXhF9GnM5RCMzie1Jue7gU6NrHYuX2ly3eUd596dC0xgBDZPE5/
+PkTl2ZoTNe35/X5j+YPtXSIE8+pQF9wHr51IdLZIpFjb+/wqERb1XrE2dZ07ydT
6GwZZd2L2LBuwTY+rFfL5de3qZs26GBLBaswrZLT6kfsCjTpwpJMWbVjt6FxLiEs
E3ayfD80EbceCVlNoPgJABqSM08Fr/ClLLAsELpDq+Rb
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:15 2024 by rpki-client on console-ams.rpki-client.org