Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/YpRzcIPIMc1y3wJ4lzrTGR5DMJ8.roa
File: YpRzcIPIMc1y3wJ4lzrTGR5DMJ8.roa (raw, json)
Hash identifier: ghD2Rp7I8RWsQ48h4ChWdG7y1XdzZUc+y3X06iUn+MQ=
Subject key identifier: 62:94:73:70:83:C8:31:CD:72:DF:02:78:97:3A:D3:19:1E:43:30:9F
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018B046EB2D9ED95AE020D835B3355B278D8
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/YpRzcIPIMc1y3wJ4lzrTGR5DMJ8.roa
Signing time: Fri 06 Oct 2023 10:00:45 +0000
ROA not before: Fri 06 Oct 2023 10:00:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.243.179.0/24 maxlen: 24
195.242.240.0/24 maxlen: 24
89.46.8.0/24 maxlen: 24
93.114.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:6e:b2:d9:ed:95:ae:02:0d:83:5b:33:55:b2:78:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 6 10:00:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6294737083c831cd72df0278973ad3191e43309f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:34:38:77:2d:b9:8f:61:85:c1:05:86:7b:9a:
23:69:43:14:22:21:d3:59:bd:5b:02:45:5a:b2:17:
26:41:6c:ea:18:6b:f4:bf:9e:71:b2:1d:aa:f4:86:
45:07:5d:9e:24:5d:e9:7d:d6:bc:34:8a:5c:80:c0:
f6:b6:54:c2:8c:70:9a:68:0e:17:ac:21:fc:cc:b4:
52:4d:3f:e9:d6:79:e2:ae:f7:1f:8c:f1:86:38:e9:
a6:3d:f0:16:ca:95:6b:f1:5f:98:70:ec:45:9e:f6:
54:81:82:c4:97:24:84:42:0a:9c:dd:b9:3c:cb:98:
c2:54:4c:2b:62:42:b4:83:96:96:12:fb:61:f3:e0:
5a:97:bd:66:b0:bf:50:51:40:d8:e4:8b:72:15:b8:
ee:42:76:f2:5d:0b:2d:e4:26:02:05:82:69:59:3a:
48:41:95:87:bc:58:b9:01:10:58:6a:d6:78:0e:b3:
6a:ac:ca:f0:eb:68:69:3b:82:8d:15:c0:33:76:7b:
c8:80:76:e6:b3:eb:1c:3a:cf:ca:32:e2:a5:53:f6:
20:e2:78:09:2f:4e:24:65:51:24:88:56:9a:e7:8e:
e2:c3:d1:4d:ca:b0:89:ca:e7:1e:53:ba:97:b1:aa:
fd:b1:d7:63:49:11:26:0e:9e:8d:46:5b:c7:5f:d1:
e1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:94:73:70:83:C8:31:CD:72:DF:02:78:97:3A:D3:19:1E:43:30:9F
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/YpRzcIPIMc1y3wJ4lzrTGR5DMJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.8.0/24
91.243.179.0/24
93.114.60.0/24
195.242.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:0d:46:33:be:19:2e:28:d2:97:da:2c:ed:31:94:ce:64:c4:
bc:f5:a5:9e:f1:57:23:1b:91:69:68:f1:53:f1:85:d6:67:5e:
46:a1:91:7a:d8:8b:05:cd:fd:30:49:7a:3a:60:c8:82:e8:4b:
02:0c:bf:2c:55:a1:46:18:35:ae:48:bc:9d:91:16:60:4b:82:
82:c0:17:4d:73:73:d3:3c:ef:c4:e9:38:3e:d8:78:73:cc:41:
1c:4a:af:5e:a2:3a:fb:81:d0:b9:12:e8:f4:be:ba:b6:2d:b1:
a3:a0:3c:4e:5f:4f:59:d9:da:26:e3:7b:51:4f:67:eb:df:63:
86:4d:c1:6a:ce:a2:9f:9f:00:d1:1d:ea:ab:49:72:0c:3f:0a:
6e:ca:3d:8c:15:21:39:a0:5b:bf:31:dd:cb:24:33:cf:83:92:
2c:c3:0a:fd:9a:74:bc:9d:1b:93:76:ab:75:a4:c5:2c:a6:76:
d3:5a:93:0f:05:50:1c:29:31:f0:3f:90:64:e3:1d:b6:fc:18:
d0:06:01:ec:bb:ef:46:65:f2:81:df:87:ac:4c:c9:f0:f2:41:
2f:78:6e:0a:39:e4:10:a8:b2:17:03:ee:e9:06:dc:e6:2b:11:
e8:0d:33:77:f9:b4:93:6e:70:99:16:69:ff:79:24:2b:6c:ce:
7a:e3:4a:bd
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYsEbrLZ7ZWuAg2DWzNVsnjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjMxMDA2MTAwMDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Mjk0NzM3MDgzYzgzMWNkNzJkZjAyNzg5NzNhZDMxOTFlNDMzMDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DQ4dy25j2GFwQWGe5ojaUMUIiHT
Wb1bAkVashcmQWzqGGv0v55xsh2q9IZFB12eJF3pfda8NIpcgMD2tlTCjHCaaA4X
rCH8zLRSTT/p1nnirvcfjPGGOOmmPfAWypVr8V+YcOxFnvZUgYLElySEQgqc3bk8
y5jCVEwrYkK0g5aWEvth8+Bal71msL9QUUDY5ItyFbjuQnbyXQst5CYCBYJpWTpI
QZWHvFi5ARBYatZ4DrNqrMrw62hpO4KNFcAzdnvIgHbms+scOs/KMuKlU/Yg4ngJ
L04kZVEkiFaa547iw9FNyrCJyuceU7qXsar9sddjSREmDp6NRlvHX9HhqQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGKUc3CDyDHNct8CeJc60xkeQzCfMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvWXBSemNJUElNYzF5M3dKNGx6clRHUjVETUo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWS4IAwQA
W/OzAwQAXXI8AwQAw/LwMA0GCSqGSIb3DQEBCwUAA4IBAQChDUYzvhkuKNKX2izt
MZTOZMS89aWe8VcjG5FpaPFT8YXWZ15GoZF62IsFzf0wSXo6YMiC6EsCDL8sVaFG
GDWuSLydkRZgS4KCwBdNc3PTPO/E6Tg+2HhzzEEcSq9eojr7gdC5Euj0vrq2LbGj
oDxOX09Z2dom43tRT2fr32OGTcFqzqKfnwDRHeqrSXIMPwpuyj2MFSE5oFu/Md3L
JDPPg5Iswwr9mnS8nRuTdqt1pMUspnbTWpMPBVAcKTHwP5Bk4x22/BjQBgHsu+9G
ZfKB34esTMnw8kEveG4KOeQQqLIXA+7pBtzmKxHoDTN3+bSTbnCZFmn/eSQrbM56
40q9
-----END CERTIFICATE-----
Generated at Mon Nov 6 10:03:14 2023 by rpki-client on console-fra.rpki-client.org