Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Y59AuAwvUgyWL5TDRX08W6449x4.roa
File: Y59AuAwvUgyWL5TDRX08W6449x4.roa (raw, json)
Hash identifier: obHhLEAcVko5LjzU5rpsU+096D9HP66neDs6UXJNgzg=
Subject key identifier: 63:9F:40:B8:0C:2F:52:0C:96:2F:94:C3:45:7D:3C:5B:AE:38:F7:1E
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0186078E9F78D9C6DAF9A4E5F0C1FDE774DB
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Y59AuAwvUgyWL5TDRX08W6449x4.roa
Signing time: Tue 31 Jan 2023 11:20:32 +0000
ROA not before: Tue 31 Jan 2023 11:20:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43444
IP address blocks: 146.185.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:8e:9f:78:d9:c6:da:f9:a4:e5:f0:c1:fd:e7:74:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 31 11:20:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=639f40b80c2f520c962f94c3457d3c5bae38f71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9f:b9:59:5e:01:a4:5a:fb:db:c6:55:71:b4:
04:0c:42:c3:fc:c2:94:4e:f7:07:f7:25:ce:be:0e:
91:12:6f:49:1a:99:ae:87:ef:df:ae:92:fe:33:7f:
4a:5f:6a:7d:f0:2b:0e:f5:f2:74:52:1c:1b:d8:10:
c2:87:b6:b0:d2:13:82:5a:b8:67:df:9c:4e:00:d4:
d0:0b:a7:bf:4d:79:85:68:f0:1f:61:23:9a:d6:33:
31:1e:ea:58:67:4c:72:f2:a4:e6:c7:06:ea:27:7b:
68:00:ad:69:de:9c:7e:bc:bb:7a:d1:b1:1f:2e:e9:
f0:31:2a:9d:11:4b:cb:56:55:ff:42:ad:5e:47:01:
f8:7f:a4:f1:45:f8:1e:4b:25:f2:0a:05:b8:a1:55:
16:36:a5:40:a9:51:4f:64:af:6b:75:b7:b9:45:9b:
5b:28:77:b0:cf:8d:6e:91:c8:49:12:f0:12:b6:25:
cf:25:a9:ab:28:2f:01:37:eb:6a:76:c8:d0:b2:ec:
de:0c:16:a2:85:ea:19:23:94:00:78:98:ba:89:9a:
14:16:90:d3:02:7c:02:07:97:b6:f5:67:f6:84:36:
89:12:a6:b4:fc:cd:05:bf:e0:db:91:df:1f:84:5e:
3e:2e:15:db:d4:69:ec:5e:01:ee:e5:33:b7:91:49:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9F:40:B8:0C:2F:52:0C:96:2F:94:C3:45:7D:3C:5B:AE:38:F7:1E
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Y59AuAwvUgyWL5TDRX08W6449x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.185.207.0/24
Signature Algorithm: sha256WithRSAEncryption
17:55:cd:e8:d2:f8:a1:2f:b4:40:d3:5a:a9:d0:71:7d:57:20:
58:3c:ae:f0:83:1f:73:9c:48:91:ce:5f:9f:57:b7:6b:cb:7f:
9a:eb:53:af:bf:04:1c:92:b8:73:d1:5d:60:ef:ca:99:11:59:
0e:cc:03:af:5a:41:5e:dc:10:2b:4f:cf:12:c8:b7:ff:e3:24:
15:e0:94:a8:3a:a2:21:1a:3e:79:ae:4b:84:6c:17:b0:e9:09:
8b:87:5c:73:57:cc:d6:ca:3b:69:56:3c:d4:be:2a:3e:96:41:
93:95:41:98:db:3b:fd:60:6b:c4:fb:ba:01:10:b1:2c:4a:58:
6a:b3:53:7e:07:18:8d:9c:fa:d3:20:8a:b5:5b:79:6b:77:07:
03:e3:f3:86:c6:ea:0f:97:9d:c7:34:ff:4c:79:f1:25:e1:e4:
ce:5a:44:42:92:9d:f6:0c:b8:a6:76:54:ff:59:7e:a6:dc:39:
1c:4f:29:05:45:97:07:65:7d:68:61:0b:00:96:34:8f:97:78:
08:30:8b:ee:f6:1a:17:29:bb:4d:dd:36:d2:7d:02:f3:4d:a0:
c1:61:eb:34:6e:b4:04:95:16:c4:63:6e:8f:ee:38:18:4a:53:
5e:4e:dd:e6:86:ee:de:9d:fa:2c:85:f8:97:e5:33:e8:10:3e:
5d:7f:20:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYHjp942cba+aTl8MH953TbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMwMTMxMTEyMDMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzlmNDBiODBjMmY1MjBjOTYyZjk0YzM0NTdkM2M1YmFlMzhmNzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ+5WV4BpFr728ZVcbQEDELD/MKU
TvcH9yXOvg6REm9JGpmuh+/frpL+M39KX2p98CsO9fJ0Uhwb2BDCh7aw0hOCWrhn
35xOANTQC6e/TXmFaPAfYSOa1jMxHupYZ0xy8qTmxwbqJ3toAK1p3px+vLt60bEf
LunwMSqdEUvLVlX/Qq1eRwH4f6TxRfgeSyXyCgW4oVUWNqVAqVFPZK9rdbe5RZtb
KHewz41ukchJEvAStiXPJamrKC8BN+tqdsjQsuzeDBaiheoZI5QAeJi6iZoUFpDT
AnwCB5e29Wf2hDaJEqa0/M0Fv+Dbkd8fhF4+LhXb1GnsXgHu5TO3kUkVHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGOfQLgML1IMli+Uw0V9PFuuOPceMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvWTU5QXVBd3ZVZ3lXTDVURFJYMDhXNjQ0OXg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkrnPMA0G
CSqGSIb3DQEBCwUAA4IBAQAXVc3o0vihL7RA01qp0HF9VyBYPK7wgx9znEiRzl+f
V7dry3+a61OvvwQckrhz0V1g78qZEVkOzAOvWkFe3BArT88SyLf/4yQV4JSoOqIh
Gj55rkuEbBew6QmLh1xzV8zWyjtpVjzUvio+lkGTlUGY2zv9YGvE+7oBELEsSlhq
s1N+BxiNnPrTIIq1W3lrdwcD4/OGxuoPl53HNP9MefEl4eTOWkRCkp32DLimdlT/
WX6m3DkcTykFRZcHZX1oYQsAljSPl3gIMIvu9hoXKbtN3TbSfQLzTaDBYes0brQE
lRbEY26P7jgYSlNeTt3mhu7enfoshfiX5TPoED5dfyA4
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org