Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/yBOkNO_m5FiN-nWQucrKz2UXf6s.roa
File: yBOkNO_m5FiN-nWQucrKz2UXf6s.roa (raw, json)
Hash identifier: knEvoOs9KzoXP13SIU72IzMWohlkfdV2CJoo+dwQR18=
Subject key identifier: C8:13:A4:34:EF:E6:E4:58:8D:FA:75:90:B9:CA:CA:CF:65:17:7F:AB
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018AFBA39D58AD6B23C70789AC21B60DCF95
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/yBOkNO_m5FiN-nWQucrKz2UXf6s.roa
Signing time: Wed 04 Oct 2023 17:01:58 +0000
ROA not before: Wed 04 Oct 2023 17:01:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8474
IP address blocks: 195.138.96.0/19 maxlen: 24
194.50.200.0/23 maxlen: 24
194.50.206.0/23 maxlen: 24
195.138.105.0/24 maxlen: 24
195.138.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:a3:9d:58:ad:6b:23:c7:07:89:ac:21:b6:0d:cf:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 4 17:01:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c813a434efe6e4588dfa7590b9cacacf65177fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:63:0a:76:65:72:85:cc:7d:b1:4b:f5:bc:ee:
ff:c9:ee:4e:19:8a:a9:b4:08:8b:55:a9:23:d0:ef:
60:e9:1e:00:4f:7e:37:10:ba:59:c6:f0:47:50:bd:
4a:8f:65:7a:6b:fc:8d:37:5c:63:da:80:83:c4:01:
b9:be:a6:55:8d:a9:d7:d1:f6:f2:5e:15:64:e1:6d:
bd:30:63:f5:d0:74:f7:74:f0:2d:e6:6d:9c:5f:f1:
97:a9:20:db:d1:bf:c9:10:30:19:7e:99:8c:5f:11:
e1:a7:2a:fb:ba:3c:4a:ab:da:2b:d1:44:25:c3:d0:
46:13:b1:0d:24:cf:aa:94:35:92:46:d7:37:60:77:
32:a1:f4:38:fb:7b:eb:80:37:e6:bf:4d:d0:ba:96:
7e:e8:14:a0:9d:33:8b:c6:91:2b:d4:13:df:91:28:
f9:c3:95:1e:6e:4a:8d:67:db:5e:d9:c7:5f:df:48:
70:80:55:39:e1:4f:40:0f:dc:67:f9:81:5a:8c:81:
4d:ef:28:19:35:ee:a2:0f:16:3d:61:4a:f7:bc:78:
69:ae:f9:8e:25:25:fe:90:27:67:ad:e7:5b:bb:9d:
76:24:20:b2:11:c5:fa:54:12:e0:86:8e:c3:ff:54:
53:cc:9f:5a:35:ce:48:1f:2f:19:95:e3:df:09:e7:
09:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:13:A4:34:EF:E6:E4:58:8D:FA:75:90:B9:CA:CA:CF:65:17:7F:AB
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/yBOkNO_m5FiN-nWQucrKz2UXf6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.200.0/23
194.50.206.0/23
195.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
38:2a:ac:89:cd:1c:21:b3:43:dc:78:2a:08:f9:9f:bb:4a:dc:
b0:7f:81:90:4a:6d:bc:52:c1:4e:c6:a0:56:98:39:9e:94:49:
8e:14:42:77:41:22:03:63:8e:b9:0a:02:a5:bb:2a:cb:0f:9e:
86:35:f6:3a:fd:68:47:d5:8c:e3:0f:fa:36:34:ba:6e:b0:5f:
bf:30:e5:61:3e:11:2b:98:da:3a:fc:ae:bd:f0:17:43:e1:2f:
af:b4:53:84:be:f5:cf:18:da:46:bf:be:80:9d:dd:3a:ff:b7:
1e:8c:7b:e2:e6:e7:fd:2c:e6:0b:78:6e:09:f0:12:24:d7:2a:
55:16:c1:e2:94:97:fe:e8:b5:1c:9d:73:50:16:63:79:96:f6:
1e:f0:5c:c1:77:d2:69:80:d8:c6:f0:f8:a1:cd:64:79:38:cd:
f8:68:07:05:a2:bf:4d:56:53:f6:09:0b:7c:28:e9:01:ab:b3:
32:d3:03:cc:3e:f0:f6:77:66:07:6c:80:a4:06:d4:ae:2f:46:
82:21:71:dc:b2:b5:44:67:b5:2d:5e:2a:f2:74:60:ce:b6:c5:
1f:b8:5b:d6:0d:a1:64:c0:31:14:3a:61:b3:b6:f0:1c:84:29:
fe:a4:63:fa:52:b5:30:29:e8:fc:e2:10:f4:bb:e5:bd:5c:3d:
65:59:33:48
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYr7o51YrWsjxweJrCG2Dc+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMxMDA0MTcwMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODEzYTQzNGVmZTZlNDU4OGRmYTc1OTBiOWNhY2FjZjY1MTc3ZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWMKdmVyhcx9sUv1vO7/ye5OGYqp
tAiLVakj0O9g6R4AT343ELpZxvBHUL1Kj2V6a/yNN1xj2oCDxAG5vqZVjanX0fby
XhVk4W29MGP10HT3dPAt5m2cX/GXqSDb0b/JEDAZfpmMXxHhpyr7ujxKq9or0UQl
w9BGE7ENJM+qlDWSRtc3YHcyofQ4+3vrgDfmv03QupZ+6BSgnTOLxpEr1BPfkSj5
w5UebkqNZ9te2cdf30hwgFU54U9AD9xn+YFajIFN7ygZNe6iDxY9YUr3vHhprvmO
JSX+kCdnredbu512JCCyEcX6VBLgho7D/1RTzJ9aNc5IHy8ZlePfCecJaQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMgTpDTv5uRYjfp1kLnKys9lF3+rMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEveUJPa05PX201RmlOLW5XUXVjckt6MlVYZjZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwjLIAwQB
wjLOAwQFw4pgMA0GCSqGSIb3DQEBCwUAA4IBAQA4KqyJzRwhs0PceCoI+Z+7Styw
f4GQSm28UsFOxqBWmDmelEmOFEJ3QSIDY465CgKluyrLD56GNfY6/WhH1YzjD/o2
NLpusF+/MOVhPhErmNo6/K698BdD4S+vtFOEvvXPGNpGv76And06/7cejHvi5uf9
LOYLeG4J8BIk1ypVFsHilJf+6LUcnXNQFmN5lvYe8FzBd9JpgNjG8PihzWR5OM34
aAcFor9NVlP2CQt8KOkBq7My0wPMPvD2d2YHbICkBtSuL0aCIXHcsrVEZ7UtXiry
dGDOtsUfuFvWDaFkwDEUOmGztvAchCn+pGP6UrUwKej84hD0u+W9XD1lWTNI
-----END CERTIFICATE-----
Generated at Mon Dec 18 09:53:55 2023 by rpki-client on console-ams.rpki-client.org