Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/ykZhe317SV4sJuGbRA7jik3DGV4.roa
File: ykZhe317SV4sJuGbRA7jik3DGV4.roa (raw, json)
Hash identifier: 41GeMzBHDhhmWJ7/o6L0PHfJF3bfoJX4WTE14ez9uiA=
Subject key identifier: CA:46:61:7B:7D:7B:49:5E:2C:26:E1:9B:44:0E:E3:8A:4D:C3:19:5E
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 0188AFDFF92B0D3D6B7DDC1E5EEF9356DBFB
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/ykZhe317SV4sJuGbRA7jik3DGV4.roa
Signing time: Mon 12 Jun 2023 13:51:10 +0000
ROA not before: Mon 12 Jun 2023 13:51:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208972
IP address blocks: 185.233.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:df:f9:2b:0d:3d:6b:7d:dc:1e:5e:ef:93:56:db:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jun 12 13:51:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca46617b7d7b495e2c26e19b440ee38a4dc3195e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e0:a0:4e:fb:8e:f7:65:f0:8b:c5:f2:90:34:
a9:76:54:98:18:95:3b:76:a4:b1:87:e9:9d:84:6d:
da:1c:a0:42:38:19:ed:e6:ec:71:b6:5e:ce:92:fa:
0d:38:7e:ab:1c:8c:2f:ab:38:39:e3:3b:0e:cb:d2:
7f:0c:8a:f9:9b:cd:0a:3c:99:99:8b:61:3e:7e:3d:
6e:4a:65:95:f0:e4:c5:70:67:0b:4a:49:16:97:d0:
88:9c:f9:1d:c0:50:39:93:19:dd:1b:23:09:35:ba:
5a:52:10:af:a9:7b:89:29:18:77:be:62:7e:00:d0:
9c:f9:cd:21:f8:c0:cd:ef:e5:5d:da:da:3b:45:a9:
99:a3:dd:e6:a5:51:2c:bf:19:26:3e:12:ce:f0:12:
cc:82:b5:1c:dc:d9:d2:7f:46:1c:a9:ec:ac:8f:2b:
c3:a8:ba:db:16:29:99:c9:db:9b:4f:42:70:bc:b2:
70:63:07:ba:a7:43:f9:d1:fe:32:0d:1c:3f:22:5c:
41:d9:82:2d:78:50:7b:19:75:90:a2:0e:fa:d7:c2:
60:52:07:02:db:25:24:03:82:8c:ed:e0:3a:a3:02:
9e:d9:50:29:96:1c:e5:11:ef:4c:d4:af:97:d7:b0:
06:de:48:ff:7b:1b:dd:16:5e:e9:c1:b2:f0:12:db:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:46:61:7B:7D:7B:49:5E:2C:26:E1:9B:44:0E:E3:8A:4D:C3:19:5E
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/ykZhe317SV4sJuGbRA7jik3DGV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.244.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:41:35:83:d1:69:82:44:c2:58:b2:f1:08:e1:74:51:0e:49:
7b:83:c9:2a:9e:4d:16:2b:08:56:3d:76:e1:ce:44:21:f1:f7:
9f:a7:9a:39:be:f5:a0:2a:e9:f9:55:3a:3f:94:c4:e7:3e:f2:
bf:5c:c3:98:55:db:49:cf:9f:fa:02:d4:0e:3d:d4:b0:c5:b9:
2f:63:95:3f:41:fe:9b:24:2c:74:a1:d1:31:25:c3:fd:09:d4:
32:79:0d:e7:36:c8:b8:c0:d4:9b:35:2f:99:df:94:eb:2e:f7:
e6:6a:a0:5a:33:bc:55:a4:65:44:cc:94:2d:d5:e8:d9:d7:12:
0a:37:a0:9f:31:0f:3b:d6:38:14:b4:bf:4b:38:b6:5a:1a:ea:
13:20:b1:9e:39:a7:0d:f3:d3:d2:a2:3a:31:ba:03:d3:a9:09:
a5:84:2e:ff:37:20:6b:79:96:ea:6f:aa:a5:60:f5:65:eb:49:
cb:49:23:1d:d9:24:46:94:05:d0:7f:e2:db:b1:50:4a:dd:bb:
0f:b8:58:30:9b:9f:b2:36:db:2d:ae:91:12:be:9b:3a:dd:d5:
e3:e4:e7:1e:fc:75:b8:ae:bc:a9:f2:ae:4a:00:61:c1:9c:b1:
ad:94:60:90:93:92:b7:7e:15:c2:c0:72:f0:fc:18:dc:71:ce:
e2:e6:ae:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiv3/krDT1rfdweXu+TVtv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw
NmViNzkwHhcNMjMwNjEyMTM1MTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTQ2NjE3YjdkN2I0OTVlMmMyNmUxOWI0NDBlZTM4YTRkYzMxOTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuCgTvuO92Xwi8XykDSpdlSYGJU7
dqSxh+mdhG3aHKBCOBnt5uxxtl7OkvoNOH6rHIwvqzg54zsOy9J/DIr5m80KPJmZ
i2E+fj1uSmWV8OTFcGcLSkkWl9CInPkdwFA5kxndGyMJNbpaUhCvqXuJKRh3vmJ+
ANCc+c0h+MDN7+Vd2to7RamZo93mpVEsvxkmPhLO8BLMgrUc3NnSf0YcqeysjyvD
qLrbFimZydubT0JwvLJwYwe6p0P50f4yDRw/IlxB2YIteFB7GXWQog7618JgUgcC
2yUkA4KM7eA6owKe2VAplhzlEe9M1K+X17AG3kj/exvdFl7pwbLwEtsAHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMpGYXt9e0leLCbhm0QO44pNwxleMB8GA1UdIwQY
MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt
MWUwZThiOTA5ZTM0LzEveWtaaGUzMTdTVjRzSnVHYlJBN2ppazNER1Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0
LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuen0MA0G
CSqGSIb3DQEBCwUAA4IBAQAvQTWD0WmCRMJYsvEI4XRRDkl7g8kqnk0WKwhWPXbh
zkQh8fefp5o5vvWgKun5VTo/lMTnPvK/XMOYVdtJz5/6AtQOPdSwxbkvY5U/Qf6b
JCx0odExJcP9CdQyeQ3nNsi4wNSbNS+Z35TrLvfmaqBaM7xVpGVEzJQt1ejZ1xIK
N6CfMQ871jgUtL9LOLZaGuoTILGeOacN89PSojoxugPTqQmlhC7/NyBreZbqb6ql
YPVl60nLSSMd2SRGlAXQf+LbsVBK3bsPuFgwm5+yNtstrpESvps63dXj5Oce/HW4
rryp8q5KAGHBnLGtlGCQk5K3fhXCwHLw/Bjccc7i5q5G
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:43 2024 by rpki-client on console-ams.rpki-client.org