Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/cYRjYBQbGzmJXwQmrE0-V_IpI8o.roa
File: cYRjYBQbGzmJXwQmrE0-V_IpI8o.roa (raw, json)
Hash identifier: GdElmCkNkbVPAL4yvCaxIwz3FxrnpsoV1wr66PCA/9k=
Subject key identifier: 71:84:63:60:14:1B:1B:39:89:5F:04:26:AC:4D:3E:57:F2:29:23:CA
Certificate issuer: /CN=6eef0dc51dfff0103419599906365572b7fe48fe
Certificate serial: 018BCC7BA5BF527D4260421776C03DEB8AB4
Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/cYRjYBQbGzmJXwQmrE0-V_IpI8o.roa
Signing time: Tue 14 Nov 2023 06:18:57 +0000
ROA not before: Tue 14 Nov 2023 06:18:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61055
IP address blocks: 185.10.73.0/24 maxlen: 24
185.10.72.0/24 maxlen: 24
185.10.75.0/24 maxlen: 24
185.10.74.0/24 maxlen: 24
2a02:dfc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:7b:a5:bf:52:7d:42:60:42:17:76:c0:3d:eb:8a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe
Validity
Not Before: Nov 14 06:18:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71846360141b1b39895f0426ac4d3e57f22923ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:be:68:b1:1d:1b:59:66:89:7d:7f:3b:2c:
6b:75:0b:23:d2:86:20:75:bc:4e:36:bc:cd:f1:d5:
0d:e7:ca:09:92:c8:ad:e3:3f:a8:41:47:8e:5f:e9:
3d:65:87:3d:d1:a3:89:fe:d9:96:94:3c:03:a2:7a:
17:02:12:1f:2d:50:fd:31:98:e4:0f:4d:15:ed:81:
50:4b:c4:7e:b2:72:52:3c:1d:2c:23:73:1f:f3:fe:
6c:27:67:89:9a:13:9d:90:0b:5e:fe:3d:ac:74:ca:
9f:d2:50:fe:0f:f0:bb:4e:31:35:7c:b9:ed:eb:88:
37:87:b3:8c:16:8e:2c:0e:dc:6e:18:d1:b7:6f:1a:
f1:ef:3b:d5:fb:05:40:5c:f9:5e:dc:e3:cf:db:9e:
01:f4:e7:a3:11:e6:1f:79:ab:6b:a5:9d:19:f1:53:
23:f7:e3:d1:ca:15:71:6a:a6:b4:71:4f:9c:1c:71:
21:36:92:a0:2f:fb:77:e6:c1:7d:56:60:8e:a6:37:
27:97:6b:bd:96:0b:e5:d9:0e:93:7d:28:ca:ee:0e:
73:1f:b7:89:21:0b:32:77:aa:71:bb:dd:21:03:79:
53:72:a8:c8:37:0d:07:47:80:63:c8:3c:9f:6f:d6:
fe:87:5d:83:6a:52:a7:ca:f5:0f:9c:21:7f:32:1b:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:84:63:60:14:1B:1B:39:89:5F:04:26:AC:4D:3E:57:F2:29:23:CA
X509v3 Authority Key Identifier:
keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/cYRjYBQbGzmJXwQmrE0-V_IpI8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.72.0/22
IPv6:
2a02:dfc0:1::/48
Signature Algorithm: sha256WithRSAEncryption
74:0b:1d:97:42:f7:0a:7a:de:10:a8:b6:c7:33:3b:a8:bc:68:
ed:c0:fc:73:41:64:8d:72:bc:04:d9:20:5e:4e:90:84:df:45:
90:2d:ce:b9:cd:c8:f1:2a:40:b2:d0:40:d9:c7:ec:2f:06:0b:
2e:da:29:08:75:45:c4:03:61:d6:7c:81:1e:7c:51:eb:e7:aa:
86:17:15:89:3e:ea:fd:7a:63:91:05:6c:d7:a5:b0:ef:5d:d5:
2d:ef:20:df:76:d1:e5:6f:df:9d:ae:06:d0:e8:e9:53:ca:26:
cd:d5:65:41:19:0c:df:04:cf:f3:c9:d0:13:21:ed:81:cf:9b:
f4:a8:eb:00:86:c9:b6:9b:36:ad:e5:0c:04:5b:9a:10:1a:41:
2a:65:f3:d2:a9:58:18:aa:89:74:de:f7:c5:cb:00:b7:d8:e2:
b2:78:e3:7d:08:cf:0d:79:46:d4:32:88:0c:9d:26:ec:31:6a:
39:12:ff:fd:ad:6f:9a:53:16:02:9c:30:ce:45:dd:ea:73:ba:
8c:7f:72:28:3e:03:dd:30:47:15:57:38:35:e6:d2:9e:9d:12:
49:2a:df:49:a4:06:5c:2e:d1:1f:15:5e:c5:15:f4:0b:5f:03:
77:36:66:6d:78:56:ca:e1:48:7a:91:b4:61:b2:b3:f3:69:57:
b8:3b:55:3f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvMe6W/Un1CYEIXdsA964q0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZWYwZGM1MWRmZmYwMTAzNDE5NTk5OTA2MzY1NTcyYjdm
ZTQ4ZmUwHhcNMjMxMTE0MDYxODU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTg0NjM2MDE0MWIxYjM5ODk1ZjA0MjZhYzRkM2U1N2YyMjkyM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYq+aLEdG1lmiX1/OyxrdQsj0oYg
dbxONrzN8dUN58oJksit4z+oQUeOX+k9ZYc90aOJ/tmWlDwDonoXAhIfLVD9MZjk
D00V7YFQS8R+snJSPB0sI3Mf8/5sJ2eJmhOdkAte/j2sdMqf0lD+D/C7TjE1fLnt
64g3h7OMFo4sDtxuGNG3bxrx7zvV+wVAXPle3OPP254B9OejEeYfeatrpZ0Z8VMj
9+PRyhVxaqa0cU+cHHEhNpKgL/t35sF9VmCOpjcnl2u9lgvl2Q6TfSjK7g5zH7eJ
IQsyd6pxu90hA3lTcqjINw0HR4BjyDyfb9b+h12DalKnyvUPnCF/MhsdUQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHGEY2AUGxs5iV8EJqxNPlfyKSPKMB8GA1UdIwQY
MBaAFG7vDcUd//AQNBlZmQY2VXK3/kj+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZjIxN2EtZGUyNi00YmYwLWFjMjAt
NGZkYWUwOWE2NzdkLzEvY1lSallCUWJHem1KWHdRbXJFMC1WX0lwSThvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS81ZjIxN2EtZGUyNi00YmYwLWFjMjAtNGZkYWUwOWE2Nzdk
LzEvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuQpIMA8E
AgACMAkDBwAqAt/AAAEwDQYJKoZIhvcNAQELBQADggEBAHQLHZdC9wp63hCotscz
O6i8aO3A/HNBZI1yvATZIF5OkITfRZAtzrnNyPEqQLLQQNnH7C8GCy7aKQh1RcQD
YdZ8gR58UevnqoYXFYk+6v16Y5EFbNelsO9d1S3vIN920eVv352uBtDo6VPKJs3V
ZUEZDN8Ez/PJ0BMh7YHPm/So6wCGybabNq3lDARbmhAaQSpl89KpWBiqiXTe98XL
ALfY4rJ4430Izw15RtQyiAydJuwxajkS//2tb5pTFgKcMM5F3epzuox/cig+A90w
RxVXODXm0p6dEkkq30mkBlwu0R8VXsUV9AtfA3c2Zm14VsrhSHqRtGGys/NpV7g7
VT8=
-----END CERTIFICATE-----
Generated at Sun Nov 19 08:43:22 2023 by rpki-client on console-fra.rpki-client.org