Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/y2BQ4k6kpWmdUpRxR7K2wBdwxpM.roa
File: y2BQ4k6kpWmdUpRxR7K2wBdwxpM.roa (raw, json)
Hash identifier: MbjSs9bc0+hVvZx+neIWML+due82n64e23EF0ZrlH1Y=
Subject key identifier: CB:60:50:E2:4E:A4:A5:69:9D:52:94:71:47:B2:B6:C0:17:70:C6:93
Certificate issuer: /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial: 018571D78AADBDF6607A83FDAFA24B29ADD6
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/y2BQ4k6kpWmdUpRxR7K2wBdwxpM.roa
Signing time: Mon 02 Jan 2023 09:37:08 +0000
ROA not before: Mon 02 Jan 2023 09:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205206
IP address blocks: 91.207.214.0/23 maxlen: 24
193.29.201.0/24 maxlen: 24
185.224.16.0/22 maxlen: 24
2a0c:cc00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:8a:ad:bd:f6:60:7a:83:fd:af:a2:4b:29:ad:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Validity
Not Before: Jan 2 09:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb6050e24ea4a5699d52947147b2b6c01770c693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:67:eb:92:1e:52:0c:9b:fd:a7:3c:9e:87:
99:40:09:f8:85:b9:66:c9:2e:a5:52:9f:bd:b8:60:
48:f6:08:f2:ed:14:58:d1:9b:c9:65:4b:6e:b7:6d:
25:db:34:ed:a0:f3:99:a4:a8:ec:59:c0:a9:8f:55:
b0:7e:16:f8:a8:51:9a:ca:73:42:fc:62:a7:47:3b:
86:ac:fc:e2:ff:ef:99:2b:12:93:7e:c7:d2:a3:8c:
16:de:12:d3:7b:92:ab:c1:d2:08:12:85:82:96:6b:
89:fb:c7:cf:9e:54:a3:a3:02:53:dc:8a:5a:1c:a6:
f9:05:36:8b:61:38:9f:5c:f4:a1:5f:a5:98:26:64:
76:93:27:e5:62:c3:c6:3b:da:fc:ea:88:8b:f7:ec:
5d:26:db:57:d9:29:79:f1:f0:e9:17:bb:13:8d:5e:
07:21:96:0f:dc:5c:f6:06:e6:e8:00:71:49:25:c3:
ae:cb:ce:a0:3f:0c:57:27:13:bd:28:e7:e0:d4:c6:
00:5f:87:f5:31:a6:c9:c2:88:c3:56:04:82:33:95:
f5:31:ec:1a:51:d2:a7:34:b5:cc:77:69:f8:56:d3:
32:71:fa:06:6d:1f:fc:0f:4c:8c:9f:87:80:5f:9f:
77:bd:4f:e0:75:56:97:0a:dc:58:87:16:cd:b6:4e:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:60:50:E2:4E:A4:A5:69:9D:52:94:71:47:B2:B6:C0:17:70:C6:93
X509v3 Authority Key Identifier:
keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/y2BQ4k6kpWmdUpRxR7K2wBdwxpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.214.0/23
185.224.16.0/22
193.29.201.0/24
IPv6:
2a0c:cc00::/32
Signature Algorithm: sha256WithRSAEncryption
53:c1:a1:99:32:bb:60:1e:bd:4a:9c:df:09:45:a6:df:5a:c3:
40:f1:57:a7:f5:37:c6:40:b0:9f:e2:86:33:47:d0:4f:cc:1b:
16:0f:99:41:f9:d6:3a:91:36:0e:79:44:1d:6d:79:c4:01:93:
f0:56:57:55:0b:08:48:e0:af:fc:89:44:8c:16:82:43:d8:2f:
97:fa:04:7b:d1:74:71:8a:41:48:be:91:d3:d6:3d:5f:dd:b5:
d4:bf:df:ec:69:f5:aa:d5:5c:dc:02:02:6a:e9:7c:15:f0:76:
34:48:5e:59:bd:ff:c0:61:98:86:33:96:a7:8a:95:11:d5:44:
23:41:14:73:42:00:3d:7a:d1:14:dc:9e:2b:ca:07:69:95:22:
70:be:d2:c6:12:a2:2f:ba:63:24:30:7a:9b:80:43:d2:bd:d1:
fe:30:2a:0e:04:8c:38:2d:09:d7:23:ff:66:80:e7:75:49:7c:
17:d7:32:df:8b:2c:95:0b:38:d8:6a:75:76:18:09:33:48:54:
80:3a:4d:5f:45:ea:e6:17:97:8e:3d:4a:d1:20:f3:52:6d:0f:
28:ce:0b:13:cc:dd:68:88:50:56:f3:e2:1a:ed:35:d4:82:9e:
55:ec:21:47:e4:5a:98:34:2b:81:66:ce:88:ef:2e:24:3b:51:
a3:7c:df:ea
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVx14qtvfZgeoP9r6JLKa3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODY0NzAwNWZhOGIwNmU0N2VlMmVmYmZkZWRjOTdhMGM3
NzU1ZjgwHhcNMjMwMTAyMDkzNzA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjYwNTBlMjRlYTRhNTY5OWQ1Mjk0NzE0N2IyYjZjMDE3NzBjNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUFn65IeUgyb/ac8noeZQAn4hblm
yS6lUp+9uGBI9gjy7RRY0ZvJZUtut20l2zTtoPOZpKjsWcCpj1Wwfhb4qFGaynNC
/GKnRzuGrPzi/++ZKxKTfsfSo4wW3hLTe5KrwdIIEoWClmuJ+8fPnlSjowJT3Ipa
HKb5BTaLYTifXPShX6WYJmR2kyflYsPGO9r86oiL9+xdJttX2Sl58fDpF7sTjV4H
IZYP3Fz2BuboAHFJJcOuy86gPwxXJxO9KOfg1MYAX4f1MabJwojDVgSCM5X1Mewa
UdKnNLXMd2n4VtMycfoGbR/8D0yMn4eAX593vU/gdVaXCtxYhxbNtk693QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFMtgUOJOpKVpnVKUcUeytsAXcMaTMB8GA1UdIwQY
MBaAFNGGRwBfqLBuR+4u+/3tyXoMd1X4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlaSEFGLW9zRzVIN2k3N19lM0plZ3gzVmZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZmE3OTEtYjNjOS00OGFlLTgwMzQt
YzIxMDQ2NzNjMjBiLzEveTJCUTRrNmtwV21kVXBSeFI3SzJ3QmR3eHBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZmE3OTEtYjNjOS00OGFlLTgwMzQtYzIxMDQ2NzNjMjBi
LzEvMFlaSEFGLW9zRzVIN2k3N19lM0plZ3gzVmZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBW8/WAwQC
ueAQAwQAwR3JMA0EAgACMAcDBQAqDMwAMA0GCSqGSIb3DQEBCwUAA4IBAQBTwaGZ
MrtgHr1KnN8JRabfWsNA8Ven9TfGQLCf4oYzR9BPzBsWD5lB+dY6kTYOeUQdbXnE
AZPwVldVCwhI4K/8iUSMFoJD2C+X+gR70XRxikFIvpHT1j1f3bXUv9/safWq1Vzc
AgJq6XwV8HY0SF5Zvf/AYZiGM5anipUR1UQjQRRzQgA9etEU3J4rygdplSJwvtLG
EqIvumMkMHqbgEPSvdH+MCoOBIw4LQnXI/9mgOd1SXwX1zLfiyyVCzjYanV2GAkz
SFSAOk1fRermF5eOPUrRIPNSbQ8ozgsTzN1oiFBW8+Ia7TXUgp5V7CFH5FqYNCuB
Zs6I7y4kO1GjfN/q
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:40 2024 by rpki-client on console-ams.rpki-client.org