Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zYbDd3ydJZwIY6_WYLb2lZYfyLs.roa
File: zYbDd3ydJZwIY6_WYLb2lZYfyLs.roa (raw, json)
Hash identifier: TP460Y/YMA43Hcr6CsFoBYyLIBmBFax5rCAhLwIxZBc=
Subject key identifier: CD:86:C3:77:7C:9D:25:9C:08:63:AF:D6:60:B6:F6:95:96:1F:C8:BB
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018B5E29C0E6C475648411D7A82D5AAD5D24
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zYbDd3ydJZwIY6_WYLb2lZYfyLs.roa
Signing time: Mon 23 Oct 2023 20:11:16 +0000
ROA not before: Mon 23 Oct 2023 20:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212221
IP address blocks: 85.120.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5e:29:c0:e6:c4:75:64:84:11:d7:a8:2d:5a:ad:5d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 23 20:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd86c3777c9d259c0863afd660b6f695961fc8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:5d:cd:3a:0c:d5:a6:55:bc:b2:b6:46:b3:
cb:1b:27:4b:02:37:d6:f6:54:69:d2:31:40:44:e7:
1a:4b:39:71:37:2c:59:56:b8:da:32:63:ac:f5:5b:
a0:f1:87:85:a5:b8:8a:60:53:d0:0e:81:6d:66:56:
51:19:ba:44:86:02:ca:6f:ac:2e:6a:0f:f8:38:99:
62:f4:df:c9:97:32:20:84:67:ce:6c:d7:14:e8:df:
c5:c5:83:f6:34:df:9c:54:58:34:b4:be:8b:73:53:
1b:8e:fa:f1:3b:f8:22:50:a0:99:83:3f:b6:52:d8:
dd:7c:2d:b1:a1:2c:4b:a1:de:50:6b:6e:25:e5:56:
3b:f7:17:14:9d:1e:51:e1:dc:b3:34:a2:fe:1e:0a:
66:3f:a2:0f:8e:3f:e5:56:93:0b:f5:4d:da:93:9e:
7e:0c:89:4c:ec:ae:9b:50:6d:fb:51:80:79:80:9e:
a1:56:5f:6a:5e:0f:d9:ac:16:15:08:2c:b6:5e:d8:
81:32:6d:a0:aa:16:a7:fd:e3:2d:02:a9:8f:a6:d8:
81:ff:8e:e5:b7:2a:ab:73:a3:38:86:7c:88:d2:9b:
4b:65:3d:82:63:3b:dc:1e:25:01:90:9a:e8:78:56:
49:6b:35:a5:b2:b8:21:b9:8b:d9:b7:c7:8e:ff:fb:
da:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:86:C3:77:7C:9D:25:9C:08:63:AF:D6:60:B6:F6:95:96:1F:C8:BB
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zYbDd3ydJZwIY6_WYLb2lZYfyLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ea:84:b3:67:51:a8:87:85:58:3e:27:63:8f:aa:d0:c8:62:
d1:a4:fd:ee:ef:e4:c2:97:af:32:d3:e5:6d:0d:e4:78:b2:ee:
d4:9e:27:5e:f4:ac:7a:d1:3a:8d:18:9b:ff:f5:f2:dd:18:50:
cb:bd:a1:e5:6f:6b:96:7d:52:0a:de:f1:47:42:c0:fb:17:a5:
e1:c6:68:e1:f3:97:ac:94:f8:bc:8a:ad:8a:cc:28:ef:e1:8f:
af:27:4c:a2:c9:c8:ec:a6:83:f1:10:70:54:3c:00:6d:6f:3f:
e8:b3:d7:17:c8:f5:a9:c5:60:ec:80:53:4c:4f:bf:68:04:16:
4c:15:a8:03:98:25:9c:a7:7d:5f:18:92:d7:d5:a3:69:8d:7d:
c4:f7:7c:a2:7d:0f:a7:f0:1e:a5:97:14:cd:b5:1c:91:a8:84:
6e:04:f1:92:84:58:a3:a4:6e:a1:59:10:2a:78:38:78:ff:1e:
49:ac:4f:09:0b:1a:05:40:bd:b5:3c:1d:91:fb:39:17:05:44:
9f:30:ba:1a:60:b3:f6:00:c0:ea:52:1b:e9:cf:7a:5d:36:9c:
92:6d:a0:44:82:25:3e:c7:ad:9f:a0:d6:d6:1b:c4:eb:cd:14:
a7:48:f6:2c:3c:77:52:e7:cb:0d:c9:6d:11:cc:c5:57:d4:80:
11:e3:57:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYteKcDmxHVkhBHXqC1arV0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMxMDIzMjAxMTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDg2YzM3NzdjOWQyNTljMDg2M2FmZDY2MGI2ZjY5NTk2MWZjOGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyldzToM1aZVvLK2RrPLGydLAjfW
9lRp0jFAROcaSzlxNyxZVrjaMmOs9Vug8YeFpbiKYFPQDoFtZlZRGbpEhgLKb6wu
ag/4OJli9N/JlzIghGfObNcU6N/FxYP2NN+cVFg0tL6Lc1MbjvrxO/giUKCZgz+2
UtjdfC2xoSxLod5Qa24l5VY79xcUnR5R4dyzNKL+HgpmP6IPjj/lVpML9U3ak55+
DIlM7K6bUG37UYB5gJ6hVl9qXg/ZrBYVCCy2XtiBMm2gqhan/eMtAqmPptiB/47l
tyqrc6M4hnyI0ptLZT2CYzvcHiUBkJroeFZJazWlsrghuYvZt8eO//vagwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM2Gw3d8nSWcCGOv1mC29pWWH8i7MB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvelliRGQzeWRKWndJWTZfV1lMYjJsWllmeUxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXj7MA0G
CSqGSIb3DQEBCwUAA4IBAQCg6oSzZ1Goh4VYPidjj6rQyGLRpP3u7+TCl68y0+Vt
DeR4su7Unide9Kx60TqNGJv/9fLdGFDLvaHlb2uWfVIK3vFHQsD7F6Xhxmjh85es
lPi8iq2KzCjv4Y+vJ0yiycjspoPxEHBUPABtbz/os9cXyPWpxWDsgFNMT79oBBZM
FagDmCWcp31fGJLX1aNpjX3E93yifQ+n8B6llxTNtRyRqIRuBPGShFijpG6hWRAq
eDh4/x5JrE8JCxoFQL21PB2R+zkXBUSfMLoaYLP2AMDqUhvpz3pdNpySbaBEgiU+
x62foNbWG8TrzRSnSPYsPHdS58sNyW0RzMVX1IAR41cv
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:49 2024 by rpki-client on console-ams.rpki-client.org