Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/RU8y6LScUK174JdUK_pygf-YUHA.roa
File: RU8y6LScUK174JdUK_pygf-YUHA.roa (raw, json)
Hash identifier: 8J8T5DEwIKcoo11ahDyhKT66pbnKYbGN2CilNelHbLk=
Subject key identifier: 45:4F:32:E8:B4:9C:50:AD:7B:E0:97:54:2B:FA:72:81:FF:98:50:70
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 01856C5CBC539771C85EFAA66C6B482D2E15
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/RU8y6LScUK174JdUK_pygf-YUHA.roa
Signing time: Sun 01 Jan 2023 08:04:54 +0000
ROA not before: Sun 01 Jan 2023 08:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397234
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:bc:53:97:71:c8:5e:fa:a6:6c:6b:48:2d:2e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 08:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=454f32e8b49c50ad7be097542bfa7281ff985070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:ed:64:f9:fa:61:d6:0b:d1:6f:1a:85:fa:
10:9d:5d:6d:a9:3d:14:3d:1c:7d:65:65:0a:96:3e:
29:ae:96:63:58:06:94:d3:14:af:e0:a4:5a:cb:4b:
34:72:29:48:c1:3d:2b:60:b0:0e:eb:71:dd:71:25:
f5:e5:c6:bb:76:d2:29:91:e5:b8:23:ff:2d:25:9a:
4f:bd:85:d5:74:26:c7:ef:6a:3f:6f:aa:63:dd:47:
0e:78:bb:04:aa:8e:0c:42:d6:01:46:59:96:bf:60:
5c:aa:23:74:39:4c:fa:bd:80:13:d7:a7:66:1e:c7:
bb:95:51:b2:85:0a:23:59:3c:18:e3:d3:e6:b2:0f:
36:00:dd:0a:62:7f:3e:5f:ac:c4:64:e1:25:23:dc:
00:5f:90:e4:64:ab:30:30:29:d7:45:6d:ef:77:53:
0a:e1:c4:b9:f4:4b:80:06:49:1c:12:6f:d6:89:bd:
8a:9a:bb:64:8f:7d:ff:be:cb:e6:3c:85:50:d7:f7:
d4:b0:96:c3:c8:54:88:84:b4:40:82:0d:1d:ee:bb:
b9:3f:96:5a:82:be:c1:60:ff:4e:4c:9e:90:da:69:
0b:ae:91:53:8f:fb:96:0b:13:bb:cd:b8:4a:f2:07:
fc:95:ad:4e:26:dc:fa:85:1c:b9:60:98:13:68:0e:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:32:E8:B4:9C:50:AD:7B:E0:97:54:2B:FA:72:81:FF:98:50:70
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/RU8y6LScUK174JdUK_pygf-YUHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
51:04:76:5e:52:91:d7:00:48:88:c7:6c:80:63:9c:6d:57:99:
9a:0b:e8:13:f4:61:22:f7:7f:d2:95:ea:d8:d0:bf:01:1e:75:
40:72:f7:1a:0f:cc:6b:7c:51:9b:76:46:11:5e:29:fa:43:45:
23:a1:68:c7:34:cd:cd:6f:15:21:1e:ca:1a:4e:13:b9:6b:34:
a3:83:45:c8:40:91:8b:d0:da:6e:82:d7:f0:54:ff:ab:8e:f2:
81:eb:c8:58:e5:50:6a:d0:48:00:7b:12:2b:0c:57:f1:cc:b2:
00:e5:99:f1:d3:cb:ac:78:5b:0f:4c:ac:7b:96:62:8b:84:50:
b1:f3:b2:19:98:79:f9:65:75:41:82:dc:d4:08:07:d3:66:0e:
a1:52:c8:de:3e:09:73:ff:83:3b:ca:0a:2d:e2:91:b6:f3:5f:
dc:33:5b:46:08:eb:47:56:86:c3:69:ef:7b:a4:3f:64:04:fd:
e8:b4:aa:cb:cf:2a:2b:3a:81:77:79:2e:7e:14:b9:ee:fd:78:
54:23:b1:2c:a9:bc:93:e3:c9:36:f0:1e:bb:f3:b5:0c:75:c3:
44:8e:21:ef:b9:49:e4:dc:c5:d6:de:13:12:72:ef:3f:02:2a:
4c:db:19:7d:a2:cf:1d:60:b3:b9:b9:9a:8b:82:18:7b:c4:4e:
ec:e8:c9:f0
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVsXLxTl3HIXvqmbGtILS4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj
OGJmMmMwHhcNMjMwMTAxMDgwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTRmMzJlOGI0OWM1MGFkN2JlMDk3NTQyYmZhNzI4MWZmOTg1MDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/PtZPn6YdYL0W8ahfoQnV1tqT0U
PRx9ZWUKlj4prpZjWAaU0xSv4KRay0s0cilIwT0rYLAO63HdcSX15ca7dtIpkeW4
I/8tJZpPvYXVdCbH72o/b6pj3UcOeLsEqo4MQtYBRlmWv2BcqiN0OUz6vYAT16dm
Hse7lVGyhQojWTwY49Pmsg82AN0KYn8+X6zEZOElI9wAX5DkZKswMCnXRW3vd1MK
4cS59EuABkkcEm/Wib2Kmrtkj33/vsvmPIVQ1/fUsJbDyFSIhLRAgg0d7ru5P5Za
gr7BYP9OTJ6Q2mkLrpFTj/uWCxO7zbhK8gf8la1OJtz6hRy5YJgTaA6knQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEVPMui0nFCte+CXVCv6coH/mFBwMB8GA1UdIwQY
MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt
NDE2Zjg1ZWUyMzdiLzEvUlU4eTZMU2NVSzE3NEpkVUtfcHlnZi1ZVUhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi
LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA
JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQBRBHZeUpHXAEiIx2yA
Y5xtV5maC+gT9GEi93/SlerY0L8BHnVAcvcaD8xrfFGbdkYRXin6Q0UjoWjHNM3N
bxUhHsoaThO5azSjg0XIQJGL0NpugtfwVP+rjvKB68hY5VBq0EgAexIrDFfxzLIA
5Znx08useFsPTKx7lmKLhFCx87IZmHn5ZXVBgtzUCAfTZg6hUsjePglz/4M7ygot
4pG281/cM1tGCOtHVobDae97pD9kBP3otKrLzyorOoF3eS5+FLnu/XhUI7EsqbyT
48k28B6787UMdcNEjiHvuUnk3MXW3hMScu8/AipM2xl9os8dYLO5uZqLghh7xE7s
6Mnw
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:06 2024 by rpki-client on console-fra.rpki-client.org