Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ytdlJSgKebMrz7aWFu_lH86ykWs.roa
File: ytdlJSgKebMrz7aWFu_lH86ykWs.roa (raw, json)
Hash identifier: X/s+BKYTVN/HhjzjiUyVC+KZMjon/tL59yngMC2bef4=
Subject key identifier: CA:D7:65:25:28:0A:79:B3:2B:CF:B6:96:16:EF:E5:1F:CE:B2:91:6B
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018B39C09DB5CC3702BB95455F16F00D3036
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ytdlJSgKebMrz7aWFu_lH86ykWs.roa
Signing time: Mon 16 Oct 2023 18:30:06 +0000
ROA not before: Mon 16 Oct 2023 18:30:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.14.0/23 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:39:c0:9d:b5:cc:37:02:bb:95:45:5f:16:f0:0d:30:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 16 18:30:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cad76525280a79b32bcfb69616efe51fceb2916b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:2f:05:83:4d:38:95:c1:80:fb:55:b6:79:
91:be:1e:b7:ff:c1:0b:44:5c:e9:4f:8f:78:05:b2:
d3:e2:3a:21:63:de:b9:d1:77:c3:f0:45:d2:7c:fd:
19:1e:a0:86:45:5e:c9:fc:ef:70:26:d2:fa:97:15:
78:4b:48:b1:25:b1:39:24:51:1c:2b:0f:7f:b1:cf:
97:87:20:64:6a:98:08:6b:a7:6a:16:34:b0:37:57:
87:45:b2:38:56:6b:cb:c7:2d:1e:b2:ee:f5:1b:50:
fb:61:18:66:76:cb:e9:93:a5:3f:d7:c3:b9:6d:f4:
b6:c6:60:16:6d:e1:75:d8:f0:92:81:c4:d1:89:0b:
be:b7:ce:23:e0:91:f4:4f:cc:bb:d7:88:9d:2c:57:
14:77:de:26:01:3f:cd:bd:7e:c1:c1:55:79:c4:c1:
f6:7a:45:d0:f4:27:cb:9e:bd:d8:cd:76:4e:d9:2c:
84:ca:4a:95:45:83:eb:6a:50:07:0c:b6:23:4f:2c:
42:2a:61:b5:8b:c0:cb:76:f7:64:e3:ab:e5:54:da:
94:2d:eb:e6:cd:3c:23:1d:12:85:51:d1:a0:74:4f:
ad:74:40:7c:c1:7f:d4:3f:b7:5e:fb:f4:c1:39:a5:
71:23:51:08:79:a2:37:e1:18:ce:da:df:ee:3d:fb:
55:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D7:65:25:28:0A:79:B3:2B:CF:B6:96:16:EF:E5:1F:CE:B2:91:6B
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ytdlJSgKebMrz7aWFu_lH86ykWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/23
94.154.34.0-94.154.36.255
Signature Algorithm: sha256WithRSAEncryption
9c:eb:2f:8d:f7:8d:dd:a3:1d:e4:84:23:81:ca:06:59:8c:e5:
0e:6c:4a:3c:ee:ed:ce:dd:99:73:02:65:e2:2e:95:32:3d:b7:
e9:78:f7:f3:ae:29:b6:59:e5:31:98:5f:d5:ff:d1:53:a2:f3:
f8:1f:a3:bf:8f:eb:30:35:b3:25:4e:0d:df:f1:b8:0f:35:ee:
6b:bd:7b:94:c0:c0:08:23:66:33:85:60:dc:39:16:2a:7e:e5:
ba:ab:e2:5c:dd:7f:f6:24:af:54:9a:e2:87:fc:2b:f5:ad:cb:
62:f0:9f:9e:06:31:d9:8a:94:df:e2:d8:02:ab:e0:67:1d:d6:
e2:5a:ee:ab:33:1c:47:20:a5:6b:88:87:f7:35:93:1e:e2:23:
5c:99:40:96:3a:48:36:e4:12:71:4e:60:1c:cc:99:ce:25:57:
d2:9d:1e:43:aa:83:e5:a8:7d:d6:6a:32:d2:4e:1d:20:f9:12:
e2:61:80:99:f5:23:b1:8a:54:f0:0a:20:ce:d1:59:98:04:26:
4d:5c:a8:d1:87:72:14:92:1f:19:96:5c:af:da:85:e2:49:4a:
8f:37:ea:fd:08:45:8b:a9:82:a7:e9:0e:eb:de:82:a6:4c:8a:
dc:99:c8:9d:7f:58:cc:36:0b:37:b1:9a:fe:af:09:2d:d1:bc:
ab:e9:fa:4f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYs5wJ21zDcCu5VFXxbwDTA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjMxMDE2MTgzMDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWQ3NjUyNTI4MGE3OWIzMmJjZmI2OTYxNmVmZTUxZmNlYjI5MTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaovBYNNOJXBgPtVtnmRvh63/8EL
RFzpT494BbLT4johY9650XfD8EXSfP0ZHqCGRV7J/O9wJtL6lxV4S0ixJbE5JFEc
Kw9/sc+XhyBkapgIa6dqFjSwN1eHRbI4VmvLxy0esu71G1D7YRhmdsvpk6U/18O5
bfS2xmAWbeF12PCSgcTRiQu+t84j4JH0T8y714idLFcUd94mAT/NvX7BwVV5xMH2
ekXQ9CfLnr3YzXZO2SyEykqVRYPralAHDLYjTyxCKmG1i8DLdvdk46vlVNqULevm
zTwjHRKFUdGgdE+tdEB8wX/UP7de+/TBOaVxI1EIeaI34RjO2t/uPftVvwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMrXZSUoCnmzK8+2lhbv5R/OspFrMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEveXRkbEpTZ0tlYk1yejdhV0Z1X2xIODZ5a1dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBW+QOMAwD
BAFemiIDBABemiQwDQYJKoZIhvcNAQELBQADggEBAJzrL433jd2jHeSEI4HKBlmM
5Q5sSjzu7c7dmXMCZeIulTI9t+l49/OuKbZZ5TGYX9X/0VOi8/gfo7+P6zA1syVO
Dd/xuA817mu9e5TAwAgjZjOFYNw5Fip+5bqr4lzdf/Ykr1Sa4of8K/Wty2Lwn54G
MdmKlN/i2AKr4Gcd1uJa7qszHEcgpWuIh/c1kx7iI1yZQJY6SDbkEnFOYBzMmc4l
V9KdHkOqg+WofdZqMtJOHSD5EuJhgJn1I7GKVPAKIM7RWZgEJk1cqNGHchSSHxmW
XK/aheJJSo836v0IRYupgqfpDuvegqZMityZyJ1/WMw2Czexmv6vCS3RvKvp+k8=
-----END CERTIFICATE-----
Generated at Tue Oct 17 08:35:50 2023 by rpki-client on console-ams.rpki-client.org