Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/Yaeij5u9nLImZ4Eq5rNShRrdXVM.roa
File: Yaeij5u9nLImZ4Eq5rNShRrdXVM.roa (raw, json)
Hash identifier: MHXJaUpCtpzujQKLOh/SG7dQAjF9h/5yaNWxJpfVlyY=
Subject key identifier: 61:A7:A2:8F:9B:BD:9C:B2:26:67:81:2A:E6:B3:52:85:1A:DD:5D:53
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 018570E7453915B3B0A8C85D60E6E5165616
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/Yaeij5u9nLImZ4Eq5rNShRrdXVM.roa
Signing time: Mon 02 Jan 2023 05:14:42 +0000
ROA not before: Mon 02 Jan 2023 05:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36131
IP address blocks: 185.155.138.0/24 maxlen: 24
185.155.139.0/24 maxlen: 24
185.155.136.0/22 maxlen: 22
185.155.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:45:39:15:b3:b0:a8:c8:5d:60:e6:e5:16:56:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Jan 2 05:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61a7a28f9bbd9cb22667812ae6b352851add5d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:45:54:6d:e2:11:d9:4c:b5:c4:0a:ee:1c:e4:
ed:a4:c1:15:c7:99:3f:96:cf:1d:d4:23:d9:80:a9:
63:e6:6a:ea:aa:df:18:48:aa:88:7b:24:d3:a7:4b:
87:7f:7b:db:8c:19:52:cd:76:60:35:ee:dd:25:cb:
cc:66:e6:8c:be:f8:10:3c:db:df:8e:e1:34:fd:2a:
7e:bc:fb:08:58:de:42:bf:48:c8:93:6d:86:69:a6:
3c:24:45:29:50:2f:63:47:f9:67:91:17:2e:42:76:
0d:ae:50:33:a6:de:99:83:ac:95:7e:33:a1:9e:63:
fd:e4:2c:a7:5c:00:b8:db:4d:2b:e6:74:dd:ea:ed:
b9:df:5f:18:4d:b4:d1:8d:12:8b:07:5b:59:eb:bf:
b6:c2:a8:e1:fb:bf:59:90:78:83:20:a8:87:09:53:
ff:92:d6:4c:c6:28:e4:1c:49:be:c7:e5:51:19:98:
ae:e9:2c:78:88:df:24:47:06:45:1a:4b:77:cd:73:
f5:17:24:40:74:5d:3d:25:93:5a:b8:1d:38:cd:93:
b0:44:8b:58:4c:7b:87:b3:d4:0a:ef:43:a4:7a:ef:
98:21:14:8e:b9:0f:26:e0:32:a9:28:f0:f4:32:f9:
d8:58:42:4b:0d:c5:84:88:d9:64:db:a8:9f:23:5d:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A7:A2:8F:9B:BD:9C:B2:26:67:81:2A:E6:B3:52:85:1A:DD:5D:53
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/Yaeij5u9nLImZ4Eq5rNShRrdXVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.136.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:3c:e9:fb:0d:6f:5a:50:13:45:89:fa:73:71:0b:3c:fb:99:
55:cd:eb:38:ec:95:17:a8:77:4d:05:48:86:7b:9e:ce:0b:bf:
7f:7f:4f:42:30:0b:2c:0c:27:9b:cb:54:7c:3d:a9:e3:f2:55:
c4:1d:80:d5:85:2c:cb:be:a1:37:97:05:48:77:01:b8:2e:34:
7d:27:2c:4c:58:c4:4d:e6:3f:ce:86:ec:18:4b:f1:39:fa:92:
8a:36:6e:1f:5c:40:e2:e4:48:b3:3c:af:80:b0:47:14:35:14:
68:11:f7:21:83:b9:ff:cf:68:76:8b:75:19:d3:d9:43:d5:f3:
f2:28:61:b6:61:58:ca:95:f3:f4:dd:67:bf:76:88:d3:94:01:
f8:3f:dc:d0:ec:58:78:3b:9d:0f:28:ae:a4:62:c0:75:90:b8:
f8:f0:f9:80:f7:25:8e:62:91:ac:a9:d7:4d:5b:13:3c:9d:b7:
a1:6c:d3:50:27:03:c5:52:7e:0f:48:f2:31:66:8f:32:33:23:
5c:6b:4f:3b:55:60:5c:ec:c5:11:96:af:6f:69:15:d5:52:36:
b0:b6:83:20:7c:11:8f:94:d3:04:fd:0f:91:97:df:e1:73:c6:
86:5e:21:19:ec:a0:fa:93:d0:e7:50:8f:d6:57:40:0b:6f:9f:
2a:7b:0c:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw50U5FbOwqMhdYOblFlYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWNjZTkwMWU1ZmI3YzkyZjA5YTkxNWNmNmU2NTZmNjkz
YmExMDAwHhcNMjMwMTAyMDUxNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWE3YTI4ZjliYmQ5Y2IyMjY2NzgxMmFlNmIzNTI4NTFhZGQ1ZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UVUbeIR2Uy1xAruHOTtpMEVx5k/
ls8d1CPZgKlj5mrqqt8YSKqIeyTTp0uHf3vbjBlSzXZgNe7dJcvMZuaMvvgQPNvf
juE0/Sp+vPsIWN5Cv0jIk22GaaY8JEUpUC9jR/lnkRcuQnYNrlAzpt6Zg6yVfjOh
nmP95CynXAC4200r5nTd6u25318YTbTRjRKLB1tZ67+2wqjh+79ZkHiDIKiHCVP/
ktZMxijkHEm+x+VRGZiu6Sx4iN8kRwZFGkt3zXP1FyRAdF09JZNauB04zZOwRItY
THuHs9QK70Okeu+YIRSOuQ8m4DKpKPD0MvnYWEJLDcWEiNlk26ifI13+JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGGnoo+bvZyyJmeBKuazUoUa3V1TMB8GA1UdIwQY
MBaAFO4czpAeX7fJLwmpFc9uZW9pO6EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEt
MTRhMTkwOWIxMjM3LzEvWWFlaWo1dTluTEltWjRFcTVyTlNoUnJkWFZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEtMTRhMTkwOWIxMjM3
LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZuIMA0G
CSqGSIb3DQEBCwUAA4IBAQCOPOn7DW9aUBNFifpzcQs8+5lVzes47JUXqHdNBUiG
e57OC79/f09CMAssDCeby1R8Panj8lXEHYDVhSzLvqE3lwVIdwG4LjR9JyxMWMRN
5j/OhuwYS/E5+pKKNm4fXEDi5EizPK+AsEcUNRRoEfchg7n/z2h2i3UZ09lD1fPy
KGG2YVjKlfP03We/dojTlAH4P9zQ7Fh4O50PKK6kYsB1kLj48PmA9yWOYpGsqddN
WxM8nbehbNNQJwPFUn4PSPIxZo8yMyNca087VWBc7MURlq9vaRXVUjawtoMgfBGP
lNME/Q+Rl9/hc8aGXiEZ7KD6k9DnUI/WV0ALb58qewzX
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:10 2024 by rpki-client on console-fra.rpki-client.org