Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/yctRj_YlH3ZQXuAu7F3WtK4peO8.roa
File: yctRj_YlH3ZQXuAu7F3WtK4peO8.roa (raw, json)
Hash identifier: 4crvye03TNCGifZPF4gjKgR283+bvep0372d+YX2I2U=
Subject key identifier: C9:CB:51:8F:F6:25:1F:76:50:5E:E0:2E:EC:5D:D6:B4:AE:29:78:EF
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01892A0510EEA04B0B7D2BFB2CF0FA554BCA
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/yctRj_YlH3ZQXuAu7F3WtK4peO8.roa
Signing time: Thu 06 Jul 2023 07:05:22 +0000
ROA not before: Thu 06 Jul 2023 07:05:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.115.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:05:10:ee:a0:4b:0b:7d:2b:fb:2c:f0:fa:55:4b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jul 6 07:05:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9cb518ff6251f76505ee02eec5dd6b4ae2978ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:76:38:b4:35:9b:60:07:ca:ce:ea:4f:28:
42:43:fb:e7:bc:86:88:69:3e:d1:11:ab:b0:4e:d3:
97:5d:e0:46:37:e9:a4:28:9a:ee:40:ba:01:98:f7:
18:d3:ce:6d:a5:79:9b:01:f4:bb:7f:98:e8:65:7c:
86:1b:72:3f:ae:03:f4:d7:59:74:07:a7:9b:ab:62:
d8:ec:e9:b5:34:63:f8:99:fb:b1:2f:12:99:0c:05:
ac:cc:ea:ab:56:a8:43:fd:fc:84:aa:fb:6b:2f:45:
80:dd:9e:ee:cc:f9:7e:63:e6:8e:27:b1:ad:1b:70:
11:2a:5a:64:11:bc:50:3e:fa:80:36:51:c3:b4:cb:
c7:3d:58:c6:66:a2:f7:e9:42:00:b0:72:0d:41:f1:
07:aa:46:c3:9e:fc:56:7b:74:89:eb:33:94:d2:de:
8e:9f:a8:6e:f1:39:a2:ac:15:82:c0:ed:2f:10:54:
4f:8e:48:fc:a6:37:7d:8d:9b:67:6c:a2:0f:c5:20:
05:8f:48:5a:ed:06:32:61:ff:0d:c9:0e:5b:d0:b4:
c0:36:10:85:a3:3e:b9:76:16:05:2c:92:4f:e1:d5:
0b:c7:66:04:3e:a0:d5:b5:a6:9c:78:23:9b:50:97:
77:fc:82:01:14:33:58:f9:c3:0c:93:33:d6:d1:08:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CB:51:8F:F6:25:1F:76:50:5E:E0:2E:EC:5D:D6:B4:AE:29:78:EF
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/yctRj_YlH3ZQXuAu7F3WtK4peO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.207.0/24
Signature Algorithm: sha256WithRSAEncryption
31:44:67:bc:34:40:70:7b:45:e6:94:0f:fd:3e:44:c8:5f:ef:
fb:5b:27:73:ff:b5:ee:0b:07:69:ae:ea:6c:82:dc:01:7a:30:
80:95:bc:2d:98:3a:0b:86:94:36:fc:86:98:26:fa:6d:e6:0e:
37:4a:bf:5c:5d:c6:91:fe:8e:61:c2:c9:9e:0f:af:2c:c6:81:
72:46:09:a1:ac:8d:f7:b3:e4:2b:b6:40:3b:c5:93:6e:83:e8:
b3:9e:cc:59:bd:6b:2a:41:e6:be:ea:3e:bf:be:23:c4:b6:ec:
01:40:5e:42:d3:2d:90:9c:57:84:d0:17:53:2b:fe:13:1e:41:
0c:d6:a4:89:c8:97:53:7c:11:7a:17:f4:e9:47:30:2d:1b:df:
65:9a:3b:7e:d8:c5:48:9c:49:08:7d:81:f3:03:b4:14:fd:45:
05:37:15:2e:e9:1a:a5:97:ef:be:78:3d:ff:76:c0:72:22:93:
3a:cd:8e:18:d5:fc:c4:d0:46:04:60:07:64:cb:01:00:4c:8d:
19:88:a9:9b:5e:0c:f3:e6:d7:ed:70:50:79:26:0a:1b:a5:1e:
c8:8c:b0:2a:a5:10:42:c6:39:d3:02:2b:29:ee:13:46:6d:7d:
3f:a3:3e:ad:9b:eb:35:5b:d4:77:5a:ab:ba:01:27:20:ec:24:
c8:55:84:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkqBRDuoEsLfSv7LPD6VUvKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjMwNzA2MDcwNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWNiNTE4ZmY2MjUxZjc2NTA1ZWUwMmVlYzVkZDZiNGFlMjk3OGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHh2OLQ1m2AHys7qTyhCQ/vnvIaI
aT7REauwTtOXXeBGN+mkKJruQLoBmPcY085tpXmbAfS7f5joZXyGG3I/rgP011l0
B6ebq2LY7Om1NGP4mfuxLxKZDAWszOqrVqhD/fyEqvtrL0WA3Z7uzPl+Y+aOJ7Gt
G3ARKlpkEbxQPvqANlHDtMvHPVjGZqL36UIAsHINQfEHqkbDnvxWe3SJ6zOU0t6O
n6hu8TmirBWCwO0vEFRPjkj8pjd9jZtnbKIPxSAFj0ha7QYyYf8NyQ5b0LTANhCF
oz65dhYFLJJP4dULx2YEPqDVtaaceCObUJd3/IIBFDNY+cMMkzPW0QhL1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMnLUY/2JR92UF7gLuxd1rSuKXjvMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEveWN0UmpfWWxIM1pRWHVBdTdGM1d0SzRwZU84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXPPMA0G
CSqGSIb3DQEBCwUAA4IBAQAxRGe8NEBwe0XmlA/9PkTIX+/7Wydz/7XuCwdprups
gtwBejCAlbwtmDoLhpQ2/IaYJvpt5g43Sr9cXcaR/o5hwsmeD68sxoFyRgmhrI33
s+QrtkA7xZNug+iznsxZvWsqQea+6j6/viPEtuwBQF5C0y2QnFeE0BdTK/4THkEM
1qSJyJdTfBF6F/TpRzAtG99lmjt+2MVInEkIfYHzA7QU/UUFNxUu6Rqll+++eD3/
dsByIpM6zY4Y1fzE0EYEYAdkywEATI0ZiKmbXgzz5tftcFB5JgobpR7IjLAqpRBC
xjnTAisp7hNGbX0/oz6tm+s1W9R3Wqu6AScg7CTIVYTW
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org