Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Yp4jE_FepFZPRCqtEO9yuugzTJE.roa
File: Yp4jE_FepFZPRCqtEO9yuugzTJE.roa (raw, json)
Hash identifier: L0mjKqvHdRKFMpVTM1FvvmyKeg0JfwAu/VkPhKOmAds=
Subject key identifier: 62:9E:23:13:F1:5E:A4:56:4F:44:2A:AD:10:EF:72:BA:E8:33:4C:91
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BBD3DD8B36AE8F2DA896DB37C533D
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Yp4jE_FepFZPRCqtEO9yuugzTJE.roa
Signing time: Tue 02 Jan 2024 12:35:13 +0000
ROA not before: Tue 02 Jan 2024 12:35:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198262
IP address blocks: 85.232.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:bd:3d:d8:b3:6a:e8:f2:da:89:6d:b3:7c:53:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=629e2313f15ea4564f442aad10ef72bae8334c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f3:55:35:39:0d:b1:59:ce:31:1d:41:10:3f:
60:9d:d4:4e:b8:59:0c:bb:cf:ff:9c:3a:90:bc:3b:
91:f2:e2:cb:8b:7e:0a:c6:a0:36:d7:16:b0:f2:30:
43:d0:ad:2c:99:68:a7:11:7c:38:b4:61:60:76:73:
57:0e:be:56:25:b3:02:95:22:6c:81:6c:40:52:f3:
69:91:9a:a3:bf:9e:d5:0a:de:0a:8b:d3:1c:0c:40:
98:00:7b:f8:c2:7c:23:95:b9:7f:ca:ea:79:97:79:
c6:ec:65:d2:63:ca:78:f9:70:9f:8e:47:b3:f7:11:
dc:7f:31:2b:71:ed:29:40:c3:bc:15:de:00:92:be:
4c:b4:7f:45:ce:e2:db:5d:30:c6:14:c6:27:d9:27:
57:ae:47:57:97:30:c9:ef:69:92:ad:3c:68:61:de:
4b:81:b1:62:ca:62:86:b9:2a:39:40:a5:cc:f1:60:
6f:91:01:e3:2b:3d:5c:a3:1d:60:2a:6a:17:f2:00:
df:98:46:d9:16:12:38:34:88:30:b2:e4:67:67:cc:
04:fe:46:27:f5:62:a4:43:eb:4f:cc:1d:48:23:70:
1b:bd:18:9c:cb:2a:36:3f:64:3f:4d:6c:10:d1:d3:
bb:91:d1:ae:24:f2:b4:ce:4e:54:b4:e8:b3:54:53:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9E:23:13:F1:5E:A4:56:4F:44:2A:AD:10:EF:72:BA:E8:33:4C:91
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Yp4jE_FepFZPRCqtEO9yuugzTJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.227.0/24
Signature Algorithm: sha256WithRSAEncryption
93:1b:5d:fe:39:57:69:a2:bf:87:4d:5c:d9:ce:f4:a0:75:d1:
38:c0:14:0e:6d:b5:bb:cc:97:6a:95:9e:fe:64:36:5e:6c:5e:
3e:86:8c:21:05:0e:47:60:31:10:18:25:ad:6a:ae:2c:16:cd:
87:5d:e6:c2:a9:75:9c:2d:cf:ef:2c:48:91:17:83:81:7c:1b:
44:47:55:b7:60:37:96:2f:63:ea:f5:56:9f:63:8b:2a:1d:5f:
0e:3c:01:b3:04:10:13:6f:0c:b0:75:97:10:ef:c4:ca:74:c8:
1b:b3:d1:38:ae:60:24:07:6d:09:ed:0e:5c:d4:e1:bc:fe:20:
9b:dd:39:2c:82:0a:98:f8:05:d9:7c:c9:9c:01:6c:f3:e6:9d:
85:64:e5:dd:49:0b:ab:0a:86:1a:84:80:d4:3d:1c:d7:49:38:
53:7b:1e:72:89:89:6e:ad:56:9f:64:1e:a9:c8:31:c1:2e:3b:
b8:f3:1c:e2:b5:e4:dc:58:ad:67:f4:49:6b:42:ee:f4:f9:88:
4e:dc:8c:cc:6e:70:9e:76:1c:1e:27:a7:f6:f8:f8:cf:93:3b:
04:2f:60:68:73:1b:31:76:0d:4b:2e:a7:55:6e:ca:b4:e8:91:
4b:11:3a:d7:5c:4f:ec:94:d1:df:49:86:4c:55:fa:cb:93:20:
2c:f4:a3:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKK7092LNq6PLaiW2zfFM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjQwMTAyMTIzNTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjllMjMxM2YxNWVhNDU2NGY0NDJhYWQxMGVmNzJiYWU4MzM0YzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfNVNTkNsVnOMR1BED9gndROuFkM
u8//nDqQvDuR8uLLi34KxqA21xaw8jBD0K0smWinEXw4tGFgdnNXDr5WJbMClSJs
gWxAUvNpkZqjv57VCt4Ki9McDECYAHv4wnwjlbl/yup5l3nG7GXSY8p4+XCfjkez
9xHcfzErce0pQMO8Fd4Akr5MtH9FzuLbXTDGFMYn2SdXrkdXlzDJ72mSrTxoYd5L
gbFiymKGuSo5QKXM8WBvkQHjKz1cox1gKmoX8gDfmEbZFhI4NIgwsuRnZ8wE/kYn
9WKkQ+tPzB1II3AbvRicyyo2P2Q/TWwQ0dO7kdGuJPK0zk5UtOizVFNx3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGKeIxPxXqRWT0QqrRDvcrroM0yRMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvWXA0akVfRmVwRlpQUkNxdEVPOXl1dWd6VEpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVejjMA0G
CSqGSIb3DQEBCwUAA4IBAQCTG13+OVdpor+HTVzZzvSgddE4wBQObbW7zJdqlZ7+
ZDZebF4+howhBQ5HYDEQGCWtaq4sFs2HXebCqXWcLc/vLEiRF4OBfBtER1W3YDeW
L2Pq9VafY4sqHV8OPAGzBBATbwywdZcQ78TKdMgbs9E4rmAkB20J7Q5c1OG8/iCb
3TksggqY+AXZfMmcAWzz5p2FZOXdSQurCoYahIDUPRzXSThTex5yiYlurVafZB6p
yDHBLju48xziteTcWK1n9ElrQu70+YhO3IzMbnCedhweJ6f2+PjPkzsEL2Bocxsx
dg1LLqdVbsq06JFLETrXXE/slNHfSYZMVfrLkyAs9KNR
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:22 2025 by rpki-client