Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/yJZhmjFRYIei3SLSGbwfyOi4qqw.roa
File: yJZhmjFRYIei3SLSGbwfyOi4qqw.roa (raw, json)
Hash identifier: zFckkaf7T41q1Mg2bpoZlpvh49dEwnHlb2jlY+EeEOc=
Subject key identifier: C8:96:61:9A:31:51:60:87:A2:DD:22:D2:19:BC:1F:C8:E8:B8:AA:AC
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01856ED4BA9CA9C5AA444697731BAE37F57E
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/yJZhmjFRYIei3SLSGbwfyOi4qqw.roa
Signing time: Sun 01 Jan 2023 19:35:13 +0000
ROA not before: Sun 01 Jan 2023 19:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.83.200.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ba:9c:a9:c5:aa:44:46:97:73:1b:ae:37:f5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 19:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c896619a31516087a2dd22d219bc1fc8e8b8aaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:55:34:cf:b2:6c:0f:d4:ea:19:4d:26:f3:
0f:4b:10:f3:90:93:f0:90:28:55:bf:e2:3a:d4:1d:
71:51:6b:eb:84:b9:26:73:1b:09:c5:18:68:a1:74:
ca:c6:05:33:e0:fb:e3:85:6b:be:86:6a:9d:17:ab:
cf:f0:8e:94:58:ff:12:2d:c3:a0:b4:30:e4:f7:63:
79:9d:f5:d4:3d:64:65:cc:18:87:3f:77:fa:ab:4d:
0e:25:3e:81:8c:bd:6d:19:97:04:82:81:6c:f3:93:
d2:84:bf:f9:f9:ce:b2:38:14:0e:c0:5c:e4:c3:b7:
af:a2:cb:69:2b:03:b1:a6:97:df:b4:6e:51:9e:82:
80:d1:a1:de:fe:f0:03:77:96:99:8b:68:2e:80:47:
7f:bf:04:9a:77:a3:33:98:cb:eb:2f:48:8d:ae:7c:
2f:f2:6d:ae:70:cb:40:26:dc:2c:9f:b3:f5:e5:5f:
69:77:19:aa:5a:8b:6d:8b:7d:cf:60:12:70:8a:22:
ca:7b:01:af:01:84:c1:37:da:28:24:40:7f:8f:f9:
82:63:e8:ba:01:4b:99:9a:c3:ad:2b:2a:a4:e9:c1:
78:e2:28:90:69:e7:90:33:73:9c:4c:bf:1b:87:49:
4f:ab:dd:d7:5c:ec:d9:46:cc:08:ab:28:08:b1:78:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:96:61:9A:31:51:60:87:A2:DD:22:D2:19:BC:1F:C8:E8:B8:AA:AC
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/yJZhmjFRYIei3SLSGbwfyOi4qqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.200.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:b7:3b:4d:1a:c8:70:7a:bf:4c:95:7b:71:2f:70:4c:d3:a0:
44:1f:7b:6f:9d:0e:e3:3a:ff:65:2a:82:9b:c9:b8:78:37:47:
40:bc:9e:b6:8b:c7:58:ac:c1:06:ac:b6:5d:a3:11:29:fd:1f:
cb:b1:46:74:11:da:b7:de:c0:77:5c:31:bb:8b:30:bb:4d:49:
86:91:6c:fa:c4:45:9f:3b:19:7e:ff:9b:81:7c:25:bc:f8:c8:
51:b0:ad:6f:48:ca:c3:f9:f0:d9:ce:21:cb:f5:dd:b6:e7:a8:
87:20:f8:04:d5:d7:9a:08:35:88:d7:47:4a:34:c5:af:20:60:
b7:21:3b:30:b1:d4:c5:b2:b8:af:80:65:8d:e8:f4:8f:24:27:
41:3f:fc:f3:6b:52:4c:1a:79:16:ce:bb:39:55:57:35:e4:c8:
51:2d:ad:db:b7:cc:de:e4:3d:00:ab:2e:28:c1:84:19:5e:1d:
65:d0:08:b9:af:30:b8:12:01:f5:19:c0:7f:0d:84:0a:e0:80:
b5:c6:83:46:bd:80:f8:86:5d:05:1e:8d:69:93:29:51:64:b7:
43:ff:4d:24:ad:a2:34:70:af:c9:7c:b4:f7:6a:4f:17:33:62:
a8:59:c5:9a:a3:c2:bb:88:33:f6:00:df:2b:cc:2b:0e:be:01:
b1:f6:4d:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1LqcqcWqREaXcxuuN/V+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjMwMTAxMTkzNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODk2NjE5YTMxNTE2MDg3YTJkZDIyZDIxOWJjMWZjOGU4YjhhYWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7tVNM+ybA/U6hlNJvMPSxDzkJPw
kChVv+I61B1xUWvrhLkmcxsJxRhooXTKxgUz4PvjhWu+hmqdF6vP8I6UWP8SLcOg
tDDk92N5nfXUPWRlzBiHP3f6q00OJT6BjL1tGZcEgoFs85PShL/5+c6yOBQOwFzk
w7evostpKwOxppfftG5RnoKA0aHe/vADd5aZi2gugEd/vwSad6MzmMvrL0iNrnwv
8m2ucMtAJtwsn7P15V9pdxmqWotti33PYBJwiiLKewGvAYTBN9ooJEB/j/mCY+i6
AUuZmsOtKyqk6cF44iiQaeeQM3OcTL8bh0lPq93XXOzZRswIqygIsXjhkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMiWYZoxUWCHot0i0hm8H8jouKqsMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEveUpaaG1qRlJZSWVpM1NMU0did2Z5T2k0cXF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVPIMA0G
CSqGSIb3DQEBCwUAA4IBAQCwtztNGshwer9MlXtxL3BM06BEH3tvnQ7jOv9lKoKb
ybh4N0dAvJ62i8dYrMEGrLZdoxEp/R/LsUZ0Edq33sB3XDG7izC7TUmGkWz6xEWf
Oxl+/5uBfCW8+MhRsK1vSMrD+fDZziHL9d2256iHIPgE1deaCDWI10dKNMWvIGC3
ITswsdTFsrivgGWN6PSPJCdBP/zza1JMGnkWzrs5VVc15MhRLa3bt8ze5D0Aqy4o
wYQZXh1l0Ai5rzC4EgH1GcB/DYQK4IC1xoNGvYD4hl0FHo1pkylRZLdD/00kraI0
cK/JfLT3ak8XM2KoWcWao8K7iDP2AN8rzCsOvgGx9k27
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:23 2024 by rpki-client on console-fra.rpki-client.org