Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/y261m4Rx4UDucyTBzWaPr57fzDI.roa
File: y261m4Rx4UDucyTBzWaPr57fzDI.roa (raw, json)
Hash identifier: 2TLlbetFkWedUTo1DeuDoi+/rF3UPhX7A8K2qxi21Sw=
Subject key identifier: CB:6E:B5:9B:84:71:E1:40:EE:73:24:C1:CD:66:8F:AF:9E:DF:CC:32
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018B28263A5DD4571738A559CF9F3100938D
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/y261m4Rx4UDucyTBzWaPr57fzDI.roa
Signing time: Fri 13 Oct 2023 08:27:55 +0000
ROA not before: Fri 13 Oct 2023 08:27:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 89.46.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:26:3a:5d:d4:57:17:38:a5:59:cf:9f:31:00:93:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 13 08:27:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb6eb59b8471e140ee7324c1cd668faf9edfcc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1c:62:4d:ba:de:f5:ea:d1:eb:e7:21:fc:ce:
8a:0e:7c:e2:2b:aa:54:a6:3e:b6:ec:45:89:b9:49:
aa:8d:f1:1f:e9:d2:db:24:56:18:f4:77:74:bb:b0:
cb:a4:15:96:7c:72:c2:56:89:fb:92:ee:05:c9:3e:
fc:ce:cc:69:c7:e3:8a:91:2b:00:59:6e:ef:80:ef:
cc:1a:b6:02:8e:f2:66:40:fa:70:35:64:7b:85:d3:
98:bf:ad:9c:88:c9:0a:46:1c:72:b3:3c:f5:0f:b5:
e4:2b:90:82:f3:6c:ca:be:90:b5:68:96:99:8a:8f:
29:8f:5d:92:73:86:f6:5a:39:dd:c5:39:fa:a8:fb:
4c:bb:20:a1:f2:c9:db:21:43:cf:90:17:82:7e:b5:
1f:c9:30:18:ad:11:3a:95:2d:0b:cb:6d:3d:23:8f:
05:3a:56:67:bb:91:c1:73:63:ef:c6:d9:5d:7f:c6:
58:03:9a:5a:f8:57:9f:78:64:1f:81:cf:28:82:ff:
c9:38:ce:c5:a0:df:57:eb:2a:5f:9e:22:ab:57:3e:
0a:0e:d8:ad:3b:96:a2:34:82:b3:53:19:50:7e:4c:
9e:5d:22:5a:a3:62:e3:f3:f1:ad:7c:90:ec:9d:ab:
ae:26:ef:4f:7d:23:73:5c:2e:51:d6:6c:d2:44:38:
53:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6E:B5:9B:84:71:E1:40:EE:73:24:C1:CD:66:8F:AF:9E:DF:CC:32
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/y261m4Rx4UDucyTBzWaPr57fzDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.9.0/24
Signature Algorithm: sha256WithRSAEncryption
19:74:3a:f4:0e:ab:fa:bf:bb:cc:be:1a:59:6f:b7:01:c0:a9:
d3:66:bb:f1:8b:8a:5f:01:fb:03:a8:8e:bc:a8:f0:48:77:ab:
e2:6d:b6:14:fe:4f:5b:35:82:26:a2:f4:70:c6:b2:40:40:1b:
08:37:12:1c:a7:06:18:04:8a:6f:57:be:a5:46:ad:10:ad:28:
b2:bc:bd:fa:60:40:ad:e8:a3:c6:c5:e3:c4:e3:2d:7e:88:c9:
9c:5b:ae:e7:cb:30:b8:24:61:21:cc:18:37:04:7e:1f:7e:20:
e4:cc:72:cd:33:39:ef:3b:1e:b5:5e:cd:f3:df:ec:49:ae:34:
0a:f3:3a:e7:21:01:b8:90:dd:12:b3:1c:4b:b2:d8:a2:eb:57:
73:c7:26:eb:74:e9:aa:20:94:a7:90:b8:8c:ef:8c:5c:d5:e1:
89:a0:87:df:c2:14:3b:eb:37:68:36:dc:5b:eb:c4:83:5a:82:
f0:73:69:18:1f:39:ff:7b:81:e0:db:27:12:b6:b6:8c:86:b3:
70:49:3d:5d:62:23:8b:27:c3:26:0e:86:8a:27:33:65:11:fd:
60:8a:ad:8e:6d:1b:1b:47:24:1b:4e:e8:87:23:d9:51:e3:dd:
4f:d7:59:a7:bb:ba:6c:e6:f9:6e:c8:59:eb:2b:26:e0:0e:81:
69:98:8f:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsoJjpd1FcXOKVZz58xAJONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjMxMDEzMDgyNzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjZlYjU5Yjg0NzFlMTQwZWU3MzI0YzFjZDY2OGZhZjllZGZjYzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRxiTbre9erR6+ch/M6KDnziK6pU
pj627EWJuUmqjfEf6dLbJFYY9Hd0u7DLpBWWfHLCVon7ku4FyT78zsxpx+OKkSsA
WW7vgO/MGrYCjvJmQPpwNWR7hdOYv62ciMkKRhxyszz1D7XkK5CC82zKvpC1aJaZ
io8pj12Sc4b2WjndxTn6qPtMuyCh8snbIUPPkBeCfrUfyTAYrRE6lS0Ly209I48F
OlZnu5HBc2Pvxtldf8ZYA5pa+FefeGQfgc8ogv/JOM7FoN9X6ypfniKrVz4KDtit
O5aiNIKzUxlQfkyeXSJao2Lj8/GtfJDsnauuJu9PfSNzXC5R1mzSRDhTCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMtutZuEceFA7nMkwc1mj6+e38wyMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEveTI2MW00Ung0VUR1Y3lUQnpXYVByNTdmekRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS4JMA0G
CSqGSIb3DQEBCwUAA4IBAQAZdDr0Dqv6v7vMvhpZb7cBwKnTZrvxi4pfAfsDqI68
qPBId6vibbYU/k9bNYImovRwxrJAQBsINxIcpwYYBIpvV76lRq0QrSiyvL36YECt
6KPGxePE4y1+iMmcW67nyzC4JGEhzBg3BH4ffiDkzHLNMznvOx61Xs3z3+xJrjQK
8zrnIQG4kN0SsxxLstii61dzxybrdOmqIJSnkLiM74xc1eGJoIffwhQ76zdoNtxb
68SDWoLwc2kYHzn/e4Hg2ycStraMhrNwST1dYiOLJ8MmDoaKJzNlEf1giq2ObRsb
RyQbTuiHI9lR491P11mnu7ps5vluyFnrKybgDoFpmI90
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:55 2024 by rpki-client on console-ams.rpki-client.org