Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/yOcOrWZEE72ho_ro-svMDrn-AIo.roa
File: yOcOrWZEE72ho_ro-svMDrn-AIo.roa (raw, json)
Hash identifier: KlxndaRsI7yH/zsVaVeJr9DYU/13806E0PI1GcdEdNM=
Subject key identifier: C8:E7:0E:AD:66:44:13:BD:A1:A3:FA:E8:FA:CB:CC:0E:B9:FE:00:8A
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 01856EF4374F19D388630D800134369E5FC1
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/yOcOrWZEE72ho_ro-svMDrn-AIo.roa
Signing time: Sun 01 Jan 2023 20:09:36 +0000
ROA not before: Sun 01 Jan 2023 20:09:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 188.124.25.0/24 maxlen: 24
185.93.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 May 2023 15:42:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:37:4f:19:d3:88:63:0d:80:01:34:36:9e:5f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Jan 1 20:09:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8e70ead664413bda1a3fae8facbcc0eb9fe008a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:e9:68:99:c3:12:df:30:25:e9:6d:12:58:
0d:23:fb:ef:9f:0b:9a:85:e8:1c:3f:a0:65:37:e8:
12:6a:12:cd:28:bc:50:29:1f:f3:db:1e:f5:f5:18:
20:6b:1d:1c:8e:f8:14:49:8f:62:1e:7a:a9:74:dc:
b1:77:e8:0f:b5:9c:a0:92:65:5d:aa:89:45:a9:23:
96:3a:ed:82:0a:4c:86:03:2d:7d:e2:82:96:e0:43:
f2:6b:16:6b:d3:81:49:64:de:4f:a0:d1:eb:18:72:
2b:f2:5e:0e:07:bb:80:8f:2f:1e:f3:54:39:ce:e7:
98:54:87:af:21:29:01:20:3f:ac:ee:c8:07:d3:72:
be:1a:c3:50:e4:ad:6c:e0:a4:f5:b8:e0:1d:c2:41:
46:18:9d:ee:0f:1d:82:ac:d1:46:0e:58:f9:79:02:
9a:c0:34:c1:cf:67:87:e4:bd:0c:6f:75:78:4c:4d:
bc:60:3a:d8:88:ff:2a:c5:fd:36:41:39:a7:92:15:
d0:de:1e:7e:f1:61:e3:25:33:75:4f:7f:a5:ad:f6:
e2:33:66:00:18:4c:ca:77:6d:2e:b7:04:cf:ea:47:
f6:b1:c3:6d:90:c8:7c:de:58:3f:b7:1e:38:58:20:
bf:46:82:f6:a7:f5:14:c2:ff:3f:81:f1:56:de:fa:
28:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E7:0E:AD:66:44:13:BD:A1:A3:FA:E8:FA:CB:CC:0E:B9:FE:00:8A
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/yOcOrWZEE72ho_ro-svMDrn-AIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.248.0/24
188.124.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:78:78:0a:3d:2e:bb:58:01:93:6d:55:bd:f3:3e:c6:e4:f7:
4a:8d:d0:07:0d:bb:3c:40:d7:e3:51:11:0f:74:97:e6:a3:2f:
53:fd:81:5c:9b:ca:04:ac:8c:c4:a4:c1:40:f5:10:3f:6a:b2:
47:48:5c:a7:3b:60:68:0a:6f:6d:c7:58:d3:fc:65:61:84:9c:
eb:86:3d:32:94:6f:36:33:db:4e:fe:87:5f:6f:08:2b:16:74:
50:e0:a1:17:1e:0e:e7:97:77:cb:68:81:d0:51:45:21:03:de:
36:bf:6d:30:6e:42:9f:fb:7d:67:d8:12:f4:3e:37:d1:66:6d:
93:77:e6:cc:dc:19:1c:73:10:2c:a2:34:3e:a5:e2:7b:16:55:
48:9b:4e:29:59:5a:9c:f1:86:d6:06:13:e7:dc:ab:d5:f7:65:
2e:dc:67:b8:04:b1:94:a8:e0:40:93:90:18:ec:c0:8e:9e:e5:
c5:2e:87:37:5d:a3:56:f3:f1:26:d6:9d:b4:88:b4:21:a2:38:
ed:81:29:9c:a3:1d:38:d6:0b:ab:96:1a:4e:6f:a2:07:71:6c:
b4:a0:0c:f9:8e:ad:10:52:d3:6c:84:09:a3:ff:cb:08:da:19:
05:e5:0b:74:44:25:6b:7f:4e:33:d4:3c:95:4b:2e:41:ea:e0:
cf:4d:8f:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVu9DdPGdOIYw2AATQ2nl/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNGFiYThiNjA3NDkzOTM0NzhlODNjMzYwZTZjYmQ3NWQx
NTZmODkwHhcNMjMwMTAxMjAwOTM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGU3MGVhZDY2NDQxM2JkYTFhM2ZhZThmYWNiY2MwZWI5ZmUwMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdDpaJnDEt8wJeltElgNI/vvnwua
hegcP6BlN+gSahLNKLxQKR/z2x719Rggax0cjvgUSY9iHnqpdNyxd+gPtZygkmVd
qolFqSOWOu2CCkyGAy194oKW4EPyaxZr04FJZN5PoNHrGHIr8l4OB7uAjy8e81Q5
zueYVIevISkBID+s7sgH03K+GsNQ5K1s4KT1uOAdwkFGGJ3uDx2CrNFGDlj5eQKa
wDTBz2eH5L0Mb3V4TE28YDrYiP8qxf02QTmnkhXQ3h5+8WHjJTN1T3+lrfbiM2YA
GEzKd20utwTP6kf2scNtkMh83lg/tx44WCC/RoL2p/UUwv8/gfFW3vooCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMjnDq1mRBO9oaP66PrLzA65/gCKMB8GA1UdIwQY
MBaAFLFKuotgdJOTR46Dw2Dmy9ddFW+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYt
Y2Y2YzMwNTIxMmViLzEveU9jT3JXWkVFNzJob19yby1zdk1Ecm4tQUlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYtY2Y2YzMwNTIxMmVi
LzEvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuV34AwQA
vHwZMA0GCSqGSIb3DQEBCwUAA4IBAQA/eHgKPS67WAGTbVW98z7G5PdKjdAHDbs8
QNfjUREPdJfmoy9T/YFcm8oErIzEpMFA9RA/arJHSFynO2BoCm9tx1jT/GVhhJzr
hj0ylG82M9tO/odfbwgrFnRQ4KEXHg7nl3fLaIHQUUUhA942v20wbkKf+31n2BL0
PjfRZm2Td+bM3BkccxAsojQ+peJ7FlVIm04pWVqc8YbWBhPn3KvV92Uu3Ge4BLGU
qOBAk5AY7MCOnuXFLoc3XaNW8/Em1p20iLQhojjtgSmcox041gurlhpOb6IHcWy0
oAz5jq0QUtNshAmj/8sI2hkF5Qt0RCVrf04z1DyVSy5B6uDPTY9T
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:07 2024 by rpki-client on console-fra.rpki-client.org