Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/yrilaxFDM-ZGy6Ux2UoExO5iTrM.roa
File: yrilaxFDM-ZGy6Ux2UoExO5iTrM.roa (raw, json)
Hash identifier: D2fHhuKJCh87PHdk62bhmdk2d8yqJQHov5E9i/wkMGI=
Subject key identifier: CA:B8:A5:6B:11:43:33:E6:46:CB:A5:31:D9:4A:04:C4:EE:62:4E:B3
Certificate issuer: /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial: 018573313A3529F6D0935CB76558D389843D
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/yrilaxFDM-ZGy6Ux2UoExO5iTrM.roa
Signing time: Mon 02 Jan 2023 15:54:44 +0000
ROA not before: Mon 02 Jan 2023 15:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 160.45.0.0/16 maxlen: 16
130.133.0.0/16 maxlen: 16
87.77.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:31:3a:35:29:f6:d0:93:5c:b7:65:58:d3:89:84:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
Validity
Not Before: Jan 2 15:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cab8a56b114333e646cba531d94a04c4ee624eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:15:d3:84:58:21:c7:ef:54:5d:a6:c8:ff:3b:
0e:75:89:0d:b8:8d:5c:bb:2b:83:91:18:91:cd:f2:
5c:5e:4d:d5:78:cc:71:67:5a:d5:31:86:32:e4:b0:
78:28:43:fd:9e:83:a1:b0:7f:da:45:b8:7d:65:43:
81:ac:60:af:f8:a1:bf:40:e3:79:6e:37:77:f0:db:
39:04:57:9e:0f:c8:34:2a:a0:52:64:75:ab:f3:fd:
28:43:b5:98:7c:c4:80:07:a5:72:68:08:4a:49:ee:
9c:1f:b4:85:fb:34:f7:e9:0f:57:1c:66:0a:eb:5d:
70:a3:08:f4:de:37:9c:ce:e5:7a:1c:fb:e5:f5:84:
a3:ee:7c:0c:d4:d8:2d:90:f0:61:6f:90:58:06:df:
ae:94:a4:9e:73:a7:99:77:de:b7:eb:dd:21:ee:9b:
72:28:ed:c8:0c:5a:0d:c4:25:e4:0d:ed:61:82:fa:
4e:f0:cd:7c:02:df:3f:51:76:3e:28:18:bf:b9:14:
fa:1c:a4:94:5a:40:72:82:75:c1:a0:b7:aa:d7:c8:
64:9b:db:81:42:0f:94:49:82:1f:fb:8b:6c:7a:35:
fb:ec:11:60:f3:4b:18:03:35:c1:94:4f:9b:92:45:
b8:7c:82:e3:6a:5d:c2:04:2a:dc:fa:1b:15:2b:a8:
15:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B8:A5:6B:11:43:33:E6:46:CB:A5:31:D9:4A:04:C4:EE:62:4E:B3
X509v3 Authority Key Identifier:
keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/yrilaxFDM-ZGy6Ux2UoExO5iTrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.77.0.0/16
130.133.0.0/16
160.45.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:62:98:3e:87:50:7f:03:0d:c1:a6:05:18:3a:ad:1e:35:60:
8e:74:88:25:22:b1:25:9c:f3:8f:ec:b4:df:af:fc:99:02:75:
a0:be:90:7e:3f:f9:90:73:eb:83:64:b3:04:1c:11:25:0e:be:
9b:60:01:e0:2a:20:8f:ee:7d:be:ad:8d:87:35:c7:3c:6a:6e:
c7:95:75:78:7c:0a:7f:0b:87:2b:f9:53:25:50:43:50:37:ef:
b5:4c:a3:ab:71:c1:d7:3a:9b:f8:66:a4:3e:8b:86:fc:eb:3c:
d0:de:d7:a9:6a:8f:05:7b:c1:5c:42:04:e3:3f:c3:29:63:34:
b3:1a:8e:a0:10:ee:66:b9:db:dc:19:ad:6d:a0:15:b3:e8:0b:
25:76:f7:43:f0:ab:3b:24:f3:4d:0c:4c:13:58:a9:2b:2e:3f:
db:a8:f1:94:c2:c2:fb:dc:d5:f7:f2:c1:a1:69:23:70:bc:fe:
36:00:22:c6:7f:8e:a3:9a:6b:ba:d8:fe:7d:f5:80:1e:ac:da:
2a:b7:0f:b4:fd:99:62:52:f1:29:d9:9e:4f:b5:dc:b0:af:b0:
d6:16:6a:86:bb:9c:4e:e6:16:2a:6d:4d:2b:5a:67:c1:57:0e:
35:cd:f4:ab:70:1a:9a:39:28:20:78:8f:c8:d4:10:aa:9f:9d:
50:6d:0d:dc
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAYVzMTo1KfbQk1y3ZVjTiYQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YmMyOWYzNTM4NTJkMTgwZDIzNDEwOTk3ZDBmMDQ3ZWMx
Nzc4ZDMwHhcNMjMwMTAyMTU1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWI4YTU2YjExNDMzM2U2NDZjYmE1MzFkOTRhMDRjNGVlNjI0ZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRXThFghx+9UXabI/zsOdYkNuI1c
uyuDkRiRzfJcXk3VeMxxZ1rVMYYy5LB4KEP9noOhsH/aRbh9ZUOBrGCv+KG/QON5
bjd38Ns5BFeeD8g0KqBSZHWr8/0oQ7WYfMSAB6VyaAhKSe6cH7SF+zT36Q9XHGYK
611wowj03jeczuV6HPvl9YSj7nwM1NgtkPBhb5BYBt+ulKSec6eZd963690h7pty
KO3IDFoNxCXkDe1hgvpO8M18At8/UXY+KBi/uRT6HKSUWkBygnXBoLeq18hkm9uB
Qg+USYIf+4tsejX77BFg80sYAzXBlE+bkkW4fILjal3CBCrc+hsVK6gVFQIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFMq4pWsRQzPmRsulMdlKBMTuYk6zMB8GA1UdIwQY
MBaAFPe8KfNThS0YDSNBCZfQ8EfsF3jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTd3cDgxT0ZMUmdOSTBFSmw5RHdSLXdYZU5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83ZWQwOGItNDkyZC00NGJmLTllNGUt
ZmU1NzNiMDIzZmQyLzEveXJpbGF4RkRNLVpHeTZVeDJVb0V4TzVpVHJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS83ZWQwOGItNDkyZC00NGJmLTllNGUtZmU1NzNiMDIzZmQy
LzEvOTd3cDgxT0ZMUmdOSTBFSmw5RHdSLXdYZU5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAATAPAwMAV00DAwCC
hQMDAKAtMA0GCSqGSIb3DQEBCwUAA4IBAQAeYpg+h1B/Aw3BpgUYOq0eNWCOdIgl
IrElnPOP7LTfr/yZAnWgvpB+P/mQc+uDZLMEHBElDr6bYAHgKiCP7n2+rY2HNcc8
am7HlXV4fAp/C4cr+VMlUENQN++1TKOrccHXOpv4ZqQ+i4b86zzQ3tepao8Fe8Fc
QgTjP8MpYzSzGo6gEO5mudvcGa1toBWz6AsldvdD8Ks7JPNNDEwTWKkrLj/bqPGU
wsL73NX38sGhaSNwvP42ACLGf46jmmu62P599YAerNoqtw+0/ZliUvEp2Z5Ptdyw
r7DWFmqGu5xO5hYqbU0rWmfBVw41zfSrcBqaOSggeI/I1BCqn51QbQ3c
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:01 2024 by rpki-client on console-ams.rpki-client.org