Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/ypuULkctagbwNKiKeQX2IzJLhvI.roa
File: ypuULkctagbwNKiKeQX2IzJLhvI.roa (raw, json)
Hash identifier: ChiMopLR/vsDkT3bqIiUCKK08tkV0Pzg+LVpCUgEuV4=
Subject key identifier: CA:9B:94:2E:47:2D:6A:06:F0:34:A8:8A:79:05:F6:23:32:4B:86:F2
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 018C6763D9C22F18045CE7F2B84DE5B7B809
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/ypuULkctagbwNKiKeQX2IzJLhvI.roa
Signing time: Thu 14 Dec 2023 08:14:06 +0000
ROA not before: Thu 14 Dec 2023 08:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.223.216.0/24 maxlen: 24
185.223.218.0/24 maxlen: 24
185.223.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:63:d9:c2:2f:18:04:5c:e7:f2:b8:4d:e5:b7:b8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Dec 14 08:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca9b942e472d6a06f034a88a7905f623324b86f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:8d:f3:94:63:3e:c6:33:4b:9c:e9:a4:63:
5b:17:e1:c4:31:63:25:5d:4e:d3:f6:7b:de:76:dd:
d0:0b:09:50:d8:dc:d5:b2:2f:f4:ba:47:d3:c0:75:
b8:55:31:72:73:64:c3:43:91:ce:be:66:9b:74:ba:
23:db:06:43:18:0c:6a:03:ab:b0:87:0b:1a:52:5f:
98:0b:fb:58:d8:f1:5a:91:af:40:55:75:95:d4:c6:
a9:30:d7:61:14:a8:81:1d:4f:13:5d:75:46:70:f6:
fe:3f:9e:ee:d0:c9:d3:fc:4c:1d:07:49:60:4c:97:
4a:9e:71:51:2a:e7:49:16:28:b6:3b:d5:2a:3a:e1:
2f:b2:38:b9:1c:04:aa:a1:58:d1:bf:cd:d6:24:16:
a0:62:41:5b:55:9e:53:d9:2e:36:bc:27:53:36:12:
95:86:5b:c2:13:92:72:f9:67:c8:87:28:e1:02:9e:
82:b0:38:c5:d0:8a:48:ae:0f:23:4d:cd:cc:33:3d:
6f:2c:29:07:b7:82:dc:02:1f:1f:76:a2:5c:08:dd:
e8:3a:ef:66:93:fc:1a:c9:15:38:d3:90:d0:fc:c8:
83:4e:d7:3b:9d:78:88:c8:64:18:7f:54:f3:f7:37:
c7:2e:f9:58:d8:37:87:bf:51:34:07:f2:ff:a3:3b:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9B:94:2E:47:2D:6A:06:F0:34:A8:8A:79:05:F6:23:32:4B:86:F2
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/ypuULkctagbwNKiKeQX2IzJLhvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.216.0-185.223.218.255
Signature Algorithm: sha256WithRSAEncryption
16:47:89:ed:4e:43:b9:52:fc:32:ee:9c:a6:0a:91:45:ef:a8:
8b:f8:9d:f1:0a:c4:c5:6f:94:d1:2d:26:9b:3e:27:0c:3e:be:
b0:1d:9a:b9:14:04:75:44:d1:9e:a6:eb:aa:e9:3e:2b:c4:a1:
9a:22:57:1e:2f:d1:76:31:d4:4b:63:f2:53:3e:f4:fa:3c:96:
96:68:db:76:36:e6:bd:4f:ec:93:25:49:74:7d:0e:d8:7d:4a:
f0:ee:65:17:65:0a:ef:c4:59:70:a8:a0:0e:75:cd:22:6c:4c:
fc:a7:84:c2:96:ef:a4:86:75:4f:b4:f4:64:93:03:55:80:96:
df:fe:0e:87:64:9e:73:c7:8e:e4:f8:15:42:80:26:e0:6a:3d:
85:29:8c:a7:72:ca:3f:81:58:4e:1e:48:b2:12:8f:a3:15:e1:
5b:ed:d2:43:a5:2d:a5:3c:1e:22:09:8a:33:85:2f:41:90:c6:
c1:8f:23:de:9b:27:1e:a8:bf:d5:a4:a6:eb:f1:ce:d4:e9:b4:
8b:49:ed:f6:13:9c:c1:1b:d6:4e:0b:7d:3b:a5:45:0c:01:82:
84:31:b6:3d:1f:4c:1a:c1:1b:4b:06:7b:b3:43:75:57:8f:c4:
f6:a9:4c:33:8e:49:98:f6:61:af:9a:50:73:1e:f5:14:0d:c5:
6d:8f:d9:27
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYxnY9nCLxgEXOfyuE3lt7gJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjMxMjE0MDgxNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTliOTQyZTQ3MmQ2YTA2ZjAzNGE4OGE3OTA1ZjYyMzMyNGI4NmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdON85RjPsYzS5zppGNbF+HEMWMl
XU7T9nvedt3QCwlQ2NzVsi/0ukfTwHW4VTFyc2TDQ5HOvmabdLoj2wZDGAxqA6uw
hwsaUl+YC/tY2PFaka9AVXWV1MapMNdhFKiBHU8TXXVGcPb+P57u0MnT/EwdB0lg
TJdKnnFRKudJFii2O9UqOuEvsji5HASqoVjRv83WJBagYkFbVZ5T2S42vCdTNhKV
hlvCE5Jy+WfIhyjhAp6CsDjF0IpIrg8jTc3MMz1vLCkHt4LcAh8fdqJcCN3oOu9m
k/wayRU405DQ/MiDTtc7nXiIyGQYf1Tz9zfHLvlY2DeHv1E0B/L/ozuFIwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMqblC5HLWoG8DSoinkF9iMyS4byMB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEveXB1VUxrY3RhZ2J3TktpS2VRWDJJekpMaHZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO539gD
BAC539owDQYJKoZIhvcNAQELBQADggEBABZHie1OQ7lS/DLunKYKkUXvqIv4nfEK
xMVvlNEtJps+Jww+vrAdmrkUBHVE0Z6m66rpPivEoZoiVx4v0XYx1Etj8lM+9Po8
lpZo23Y25r1P7JMlSXR9Dth9SvDuZRdlCu/EWXCooA51zSJsTPynhMKW76SGdU+0
9GSTA1WAlt/+DodknnPHjuT4FUKAJuBqPYUpjKdyyj+BWE4eSLISj6MV4Vvt0kOl
LaU8HiIJijOFL0GQxsGPI96bJx6ov9WkpuvxztTptItJ7fYTnMEb1k4LfTulRQwB
goQxtj0fTBrBG0sGe7NDdVePxPapTDOOSZj2Ya+aUHMe9RQNxW2P2Sc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:47 2024 by rpki-client on console-ams.rpki-client.org