Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/Ry4yBkUyj_lKpc8m01g7hLngT6I.roa
File: Ry4yBkUyj_lKpc8m01g7hLngT6I.roa (raw, json)
Hash identifier: r0yN45kLgu90AIestjXWtc0JUndCuPdy7+grOqjWmCw=
Subject key identifier: 47:2E:32:06:45:32:8F:F9:4A:A5:CF:26:D3:58:3B:84:B9:E0:4F:A2
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 01856ED4C0FA64266661E1EDB99C787B3577
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/Ry4yBkUyj_lKpc8m01g7hLngT6I.roa
Signing time: Sun 01 Jan 2023 19:35:14 +0000
ROA not before: Sun 01 Jan 2023 19:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30781
IP address blocks: 185.61.163.0/24 maxlen: 24
185.61.162.0/24 maxlen: 24
185.61.161.0/24 maxlen: 24
185.61.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c0:fa:64:26:66:61:e1:ed:b9:9c:78:7b:35:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Jan 1 19:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=472e320645328ff94aa5cf26d3583b84b9e04fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:59:32:fb:fa:c1:b4:e3:08:a2:aa:6b:86:
de:3a:d0:fc:a8:92:db:92:b4:27:90:bb:2e:30:42:
2e:71:07:7f:ad:7e:87:0a:24:5c:19:b3:1a:ad:ee:
b7:40:c5:18:04:1d:68:5f:80:d2:59:84:09:7f:3c:
cf:09:d1:4a:0b:a3:36:71:d1:97:f4:ac:86:c7:45:
d9:24:10:74:1c:82:5c:35:51:91:2c:0e:ec:86:30:
cd:b9:4f:55:3e:7b:80:ea:df:61:c0:26:a5:82:db:
0c:0a:ff:0e:b2:1e:2d:ba:60:e5:53:5c:c2:d3:32:
47:39:2a:82:ef:c6:88:87:d3:60:de:a3:c7:d6:8f:
7f:a0:37:54:85:fa:78:ae:fb:f7:10:ba:47:8f:01:
17:b3:8b:d2:1c:6c:8a:18:e8:79:45:f2:db:fa:a7:
07:aa:43:1f:c0:3a:d9:01:85:fe:92:bb:72:38:98:
d3:ab:c3:c1:2e:c9:d4:ec:e9:56:63:e2:49:05:5b:
4a:a9:38:a9:96:e7:83:67:92:56:47:cc:f9:9a:5b:
26:71:30:1a:48:6c:9c:53:1c:9a:a5:92:75:73:82:
6b:4a:56:f5:7c:62:f1:11:02:30:7d:2e:87:a3:c1:
2f:c7:b1:ed:1e:f8:da:9f:11:5e:0c:1f:65:6e:a6:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:32:06:45:32:8F:F9:4A:A5:CF:26:D3:58:3B:84:B9:E0:4F:A2
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/Ry4yBkUyj_lKpc8m01g7hLngT6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.160.0/22
Signature Algorithm: sha256WithRSAEncryption
07:eb:ee:83:fa:5b:15:44:9c:78:08:e7:8c:e1:fa:10:f2:d9:
6c:f7:dd:d4:a6:c3:30:10:eb:4d:82:67:9d:50:ae:09:99:b9:
70:a8:2e:6b:dd:91:ca:62:01:0f:d7:ec:1e:5a:59:b3:9b:e9:
89:ab:0e:f8:41:ee:40:d1:75:af:c7:fd:ea:09:f9:3f:98:a2:
e4:d9:8c:58:4d:1f:37:e5:7b:b0:1f:d2:fb:23:04:ba:b6:34:
d7:ac:92:fe:36:6c:89:c7:5d:00:db:06:cd:97:34:97:6f:71:
62:d5:e3:7c:e3:e3:62:57:97:9c:4a:80:53:38:97:88:bf:9e:
d1:b5:d3:d8:64:8b:6e:c3:df:2e:0b:0b:e5:33:fe:c2:47:5d:
df:46:e2:fe:1a:97:50:f4:bd:78:b6:91:80:dc:ff:f3:04:c9:
c8:39:32:da:1a:cf:b9:f8:9b:5b:82:10:4b:5a:ea:a1:3f:b0:
5c:fb:42:d2:7c:1a:6e:f5:22:c5:f7:c9:94:7d:a0:96:e8:06:
56:6b:64:f2:97:23:07:87:06:e4:dd:ad:14:6e:58:0b:72:ab:
ce:c4:2e:b3:50:76:01:45:8a:e6:af:c7:10:e4:c9:84:d6:b4:
76:23:91:df:63:9d:fa:99:2c:48:5b:9a:83:47:97:9a:c3:60:
43:50:2d:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1MD6ZCZmYeHtuZx4ezV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzI0NzQzMzA0YjdmZDlhMDY1ZDIyY2Q4OWNkYTk1MDQ1
ZTI2OWMwHhcNMjMwMTAxMTkzNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzJlMzIwNjQ1MzI4ZmY5NGFhNWNmMjZkMzU4M2I4NGI5ZTA0ZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzxZMvv6wbTjCKKqa4beOtD8qJLb
krQnkLsuMEIucQd/rX6HCiRcGbMare63QMUYBB1oX4DSWYQJfzzPCdFKC6M2cdGX
9KyGx0XZJBB0HIJcNVGRLA7shjDNuU9VPnuA6t9hwCalgtsMCv8Osh4tumDlU1zC
0zJHOSqC78aIh9Ng3qPH1o9/oDdUhfp4rvv3ELpHjwEXs4vSHGyKGOh5RfLb+qcH
qkMfwDrZAYX+krtyOJjTq8PBLsnU7OlWY+JJBVtKqTiplueDZ5JWR8z5mlsmcTAa
SGycUxyapZJ1c4JrSlb1fGLxEQIwfS6Ho8Evx7HtHvjanxFeDB9lbqYNSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEcuMgZFMo/5SqXPJtNYO4S54E+iMB8GA1UdIwQY
MBaAFF/CR0MwS3/ZoGXSLNic2pUEXiacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMt
MGJhOTY3OWRlMmU2LzEvUnk0eUJrVXlqX2xLcGM4bTAxZzdoTG5nVDZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMtMGJhOTY3OWRlMmU2
LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuT2gMA0G
CSqGSIb3DQEBCwUAA4IBAQAH6+6D+lsVRJx4COeM4foQ8tls993UpsMwEOtNgmed
UK4JmblwqC5r3ZHKYgEP1+weWlmzm+mJqw74Qe5A0XWvx/3qCfk/mKLk2YxYTR83
5XuwH9L7IwS6tjTXrJL+NmyJx10A2wbNlzSXb3Fi1eN84+NiV5ecSoBTOJeIv57R
tdPYZItuw98uCwvlM/7CR13fRuL+GpdQ9L14tpGA3P/zBMnIOTLaGs+5+JtbghBL
WuqhP7Bc+0LSfBpu9SLF98mUfaCW6AZWa2TylyMHhwbk3a0UblgLcqvOxC6zUHYB
RYrmr8cQ5MmE1rR2I5HfY536mSxIW5qDR5eaw2BDUC3N
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:12 2024 by rpki-client on console-ams.rpki-client.org