Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/yd8DzZ7w6ArCMjVcCSaFYAlvuKQ.roa
File: yd8DzZ7w6ArCMjVcCSaFYAlvuKQ.roa (raw, json)
Hash identifier: qCAWXoYq1PB8KMqBaCagHSDnwjSWPbCEIuyj5ej1Jao=
Subject key identifier: C9:DF:03:CD:9E:F0:E8:0A:C2:32:35:5C:09:26:85:60:09:6F:B8:A4
Certificate issuer: /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial: 018848665056E10561F2766B7A0AD412F808
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/yd8DzZ7w6ArCMjVcCSaFYAlvuKQ.roa
Signing time: Tue 23 May 2023 11:37:24 +0000
ROA not before: Tue 23 May 2023 11:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200736
IP address blocks: 185.235.240.0/24 maxlen: 24
185.235.240.0/23 maxlen: 23
185.235.241.0/24 maxlen: 24
185.235.243.0/24 maxlen: 24
185.235.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:66:50:56:e1:05:61:f2:76:6b:7a:0a:d4:12:f8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Validity
Not Before: May 23 11:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9df03cd9ef0e80ac232355c09268560096fb8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:00:e8:e1:33:ce:dc:13:7c:26:1a:d1:7b:99:
32:8a:44:44:fb:ee:62:7d:a3:0a:80:94:0b:6c:c8:
3d:ac:db:f6:b7:97:64:d3:ec:68:52:43:73:fb:58:
24:50:45:9b:29:69:17:47:67:b5:d5:c2:3b:9d:01:
17:05:e3:cd:d9:56:b1:e7:5c:08:49:f8:18:b7:3b:
64:30:d9:f6:ce:22:9b:2b:b3:7e:8b:7d:0f:29:18:
10:44:14:5b:b6:89:d3:a4:28:87:03:17:a6:aa:fd:
9b:b5:eb:47:34:8e:7f:bf:25:dc:a3:7a:1b:34:55:
d1:ec:5f:83:4a:c2:02:f8:36:2e:6d:22:7f:0f:e1:
2c:47:f7:d0:8a:2a:b1:ea:e0:16:2f:b1:69:eb:a8:
44:ac:17:4d:b4:8f:d8:8c:33:b0:bf:2e:a1:9f:79:
d0:42:66:db:05:87:e3:b7:f5:9c:f3:56:c7:da:d6:
31:90:55:6e:b7:ed:ba:5f:c7:9e:23:76:ac:5e:86:
96:40:34:b1:1c:c9:d6:54:19:0c:9a:35:a0:0a:61:
99:53:df:7c:4b:31:73:09:49:30:18:6c:18:29:c9:
98:a9:b1:d7:d6:e7:e1:e7:74:88:25:3c:fd:61:96:
1d:aa:ee:69:c1:59:c2:c3:4c:bf:8f:38:0e:02:0c:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DF:03:CD:9E:F0:E8:0A:C2:32:35:5C:09:26:85:60:09:6F:B8:A4
X509v3 Authority Key Identifier:
keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/yd8DzZ7w6ArCMjVcCSaFYAlvuKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.240.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:0b:6c:ef:c8:8a:72:08:34:7b:c4:c1:63:9d:1d:6f:83:1e:
47:83:52:9b:0e:ed:14:4d:ff:1c:bf:5a:df:59:7c:a8:35:d7:
1f:26:c4:2c:46:47:77:d2:1b:5c:ea:36:c3:f9:b5:06:a6:98:
03:c5:f8:4c:86:8d:c3:a6:b8:02:60:60:58:6e:e5:7a:ef:09:
28:98:eb:33:76:ce:5c:7d:14:81:47:16:48:3f:75:64:e3:48:
23:2d:36:76:1b:d6:86:aa:f0:5b:dc:8f:d4:d3:5d:eb:d2:74:
fd:f0:f3:e0:59:24:47:2b:6e:6e:05:ef:75:9b:a8:78:30:4d:
d8:d3:05:ed:3a:19:88:d0:78:bd:a1:00:73:e4:b2:83:5f:26:
2b:ba:fc:c1:2e:02:be:27:2a:14:6c:b1:e3:6a:af:f3:a4:14:
cb:e9:71:fb:f7:8b:44:98:18:d0:73:55:93:cb:57:f9:c3:6d:
c2:c9:5a:62:9f:71:b9:c2:70:74:91:ed:34:f1:03:ab:af:b3:
2d:f5:df:fa:0e:fe:98:ff:87:b0:c7:63:2b:d1:75:9d:59:65:
31:50:36:78:37:4f:79:8f:a4:a3:fc:20:52:86:55:33:9b:96:
63:74:3b:09:c4:5d:72:4e:76:ca:32:d9:58:75:08:57:8f:09:
c1:f7:79:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhIZlBW4QVh8nZregrUEvgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzNkZGE2ZGVmYzkzY2Y4MjUxNjQ5NGQ5ZjM0ODhkNmM0
YWQ5ZGMwHhcNMjMwNTIzMTEzNzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWRmMDNjZDllZjBlODBhYzIzMjM1NWMwOTI2ODU2MDA5NmZiOGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggDo4TPO3BN8JhrRe5kyikRE++5i
faMKgJQLbMg9rNv2t5dk0+xoUkNz+1gkUEWbKWkXR2e11cI7nQEXBePN2Vax51wI
SfgYtztkMNn2ziKbK7N+i30PKRgQRBRbtonTpCiHAxemqv2btetHNI5/vyXco3ob
NFXR7F+DSsIC+DYubSJ/D+EsR/fQiiqx6uAWL7Fp66hErBdNtI/YjDOwvy6hn3nQ
QmbbBYfjt/Wc81bH2tYxkFVut+26X8eeI3asXoaWQDSxHMnWVBkMmjWgCmGZU998
SzFzCUkwGGwYKcmYqbHX1ufh53SIJTz9YZYdqu5pwVnCw0y/jzgOAgx2jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMnfA82e8OgKwjI1XAkmhWAJb7ikMB8GA1UdIwQY
MBaAFF4z3abe/JPPglFklNnzSI1sStncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zMDNhNDMtMTAwMy00MmQ2LTk2YjAt
NjZiODZmYzc4MWEyLzEveWQ4RHpaN3c2QXJDTWpWY0NTYUZZQWx2dUtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zMDNhNDMtMTAwMy00MmQ2LTk2YjAtNjZiODZmYzc4MWEy
LzEvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuevwMA0G
CSqGSIb3DQEBCwUAA4IBAQCMC2zvyIpyCDR7xMFjnR1vgx5Hg1KbDu0UTf8cv1rf
WXyoNdcfJsQsRkd30htc6jbD+bUGppgDxfhMho3DprgCYGBYbuV67wkomOszds5c
fRSBRxZIP3Vk40gjLTZ2G9aGqvBb3I/U013r0nT98PPgWSRHK25uBe91m6h4ME3Y
0wXtOhmI0Hi9oQBz5LKDXyYruvzBLgK+JyoUbLHjaq/zpBTL6XH794tEmBjQc1WT
y1f5w23CyVpin3G5wnB0ke008QOrr7Mt9d/6Dv6Y/4ewx2Mr0XWdWWUxUDZ4N095
j6Sj/CBShlUzm5ZjdDsJxF1yTnbKMtlYdQhXjwnB93lp
-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:15 2024 by rpki-client on console-fra.rpki-client.org