Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/YZkourOrlcspw59cJl1Dw4CkfS4.roa
File: YZkourOrlcspw59cJl1Dw4CkfS4.roa (raw, json)
Hash identifier: GUJAcFHDZXNGTeD9Wi5RBORrVOMqiVq3TImk/i863Zc=
Subject key identifier: 61:99:28:BA:B3:AB:95:CB:29:C3:9F:5C:26:5D:43:C3:80:A4:7D:2E
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 01857255808CAB6760BB82DD1743F3E92134
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/YZkourOrlcspw59cJl1Dw4CkfS4.roa
Signing time: Mon 02 Jan 2023 11:54:44 +0000
ROA not before: Mon 02 Jan 2023 11:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212338
IP address blocks: 185.213.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:80:8c:ab:67:60:bb:82:dd:17:43:f3:e9:21:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Jan 2 11:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=619928bab3ab95cb29c39f5c265d43c380a47d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bb:73:a0:3b:0d:f1:c0:a9:a3:9a:92:cd:f0:
e3:56:32:cc:dd:cf:d7:25:e8:32:4e:e3:c6:9e:64:
01:ee:3e:92:50:ca:b9:35:75:1e:78:45:d0:36:06:
d6:4d:76:58:7b:3a:8a:1b:13:ac:3c:04:5e:ad:85:
bb:52:8e:c9:55:e8:52:81:65:ad:84:07:b0:c0:5a:
a5:dd:42:8c:fa:02:8e:24:5f:c6:d8:ee:5d:84:90:
2b:bc:63:b8:cf:e0:5f:5d:0f:f8:87:fd:70:7f:cb:
ac:e7:b6:7f:88:9f:e8:06:90:9c:fa:81:75:25:74:
cc:5f:89:79:21:2f:3a:91:9a:5d:94:85:ac:64:0e:
6c:53:d4:f7:a7:0e:cb:22:c5:5f:15:c1:6d:a9:3e:
12:16:05:ce:8b:f3:7d:da:81:c0:c3:ad:f1:d7:3a:
e1:b7:c0:9c:fb:66:21:0f:f0:7a:d5:5c:5b:76:46:
69:d0:02:71:90:b6:e9:34:ef:10:9e:d8:65:db:c3:
3b:d2:27:1a:f5:75:4e:77:72:db:80:71:5a:bd:80:
3f:31:3e:10:75:55:d4:58:08:ec:a0:97:76:36:46:
f7:d1:7a:65:75:eb:6e:7c:1e:c2:93:1f:3d:fc:4f:
7e:86:58:a0:49:ef:65:f1:be:e6:e3:72:fa:a3:3f:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:99:28:BA:B3:AB:95:CB:29:C3:9F:5C:26:5D:43:C3:80:A4:7D:2E
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/YZkourOrlcspw59cJl1Dw4CkfS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:87:c8:89:e0:1a:7f:0e:10:08:52:bd:0a:f3:1c:4a:b4:68:
19:4d:17:cd:16:53:ba:46:75:17:d9:05:a6:39:0f:44:5a:1a:
6d:7d:da:4b:c0:a7:e9:eb:49:5e:96:03:0f:b7:16:a4:ea:3d:
a2:8e:d7:fa:8f:d0:13:59:c9:e4:b3:0f:43:21:d8:21:88:22:
98:ee:4f:c3:47:92:32:33:a7:4f:1e:86:e4:0b:f4:b5:3e:42:
cd:01:81:44:b8:bd:b0:33:ea:ed:48:58:ba:74:81:b5:7e:e7:
c6:9a:2b:a4:aa:29:be:95:77:b8:09:64:d3:41:a4:30:ce:4d:
52:d8:5d:31:05:f2:80:90:1d:b6:0d:d9:e0:80:ee:39:46:b1:
20:3d:7f:2c:dd:3f:e8:84:db:d9:c2:cb:5a:15:69:85:06:cf:
9f:06:ed:57:20:7f:b7:9d:0e:07:0d:88:b4:be:00:62:23:6c:
66:77:f2:86:98:86:5d:5e:ee:1b:de:38:82:dd:dd:32:00:01:
a8:04:12:3f:b7:7f:a3:9b:b1:72:3e:8e:5b:e6:bb:74:29:85:
9b:14:8b:7c:ae:53:5c:6b:ec:e9:b2:08:0f:3f:48:47:ed:05:
b9:aa:87:2a:3a:96:e6:62:27:ae:e4:d2:42:60:b5:31:77:c7:
5f:da:ca:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyVYCMq2dgu4LdF0Pz6SE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOGQwOGVkYzQzOTNhODY3MTI5NmY4ZWFjYmJlY2Y5NGQ3
NjU2MmEwHhcNMjMwMTAyMTE1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTk5MjhiYWIzYWI5NWNiMjljMzlmNWMyNjVkNDNjMzgwYTQ3ZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7tzoDsN8cCpo5qSzfDjVjLM3c/X
JegyTuPGnmQB7j6SUMq5NXUeeEXQNgbWTXZYezqKGxOsPARerYW7Uo7JVehSgWWt
hAewwFql3UKM+gKOJF/G2O5dhJArvGO4z+BfXQ/4h/1wf8us57Z/iJ/oBpCc+oF1
JXTMX4l5IS86kZpdlIWsZA5sU9T3pw7LIsVfFcFtqT4SFgXOi/N92oHAw63x1zrh
t8Cc+2YhD/B61VxbdkZp0AJxkLbpNO8Qnthl28M70ica9XVOd3LbgHFavYA/MT4Q
dVXUWAjsoJd2Nkb30XpldetufB7Ckx89/E9+hligSe9l8b7m43L6oz/KBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGGZKLqzq5XLKcOfXCZdQ8OApH0uMB8GA1UdIwQY
MBaAFNuNCO3EOTqGcSlvjqy77PlNdlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEt
YzYzNDlkYjk0OTliLzEvWVprb3VyT3JsY3NwdzU5Y0psMUR3NENrZlM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEtYzYzNDlkYjk0OTli
LzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudUvMA0G
CSqGSIb3DQEBCwUAA4IBAQAah8iJ4Bp/DhAIUr0K8xxKtGgZTRfNFlO6RnUX2QWm
OQ9EWhptfdpLwKfp60lelgMPtxak6j2ijtf6j9ATWcnksw9DIdghiCKY7k/DR5Iy
M6dPHobkC/S1PkLNAYFEuL2wM+rtSFi6dIG1fufGmiukqim+lXe4CWTTQaQwzk1S
2F0xBfKAkB22DdnggO45RrEgPX8s3T/ohNvZwstaFWmFBs+fBu1XIH+3nQ4HDYi0
vgBiI2xmd/KGmIZdXu4b3jiC3d0yAAGoBBI/t3+jm7FyPo5b5rt0KYWbFIt8rlNc
a+zpsggPP0hH7QW5qocqOpbmYieu5NJCYLUxd8df2sqy
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:04 2024 by rpki-client on console-ams.rpki-client.org