Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/y-Ks-XcZ1jeC4JmmQoWqJ9aNlUk.roa
File: y-Ks-XcZ1jeC4JmmQoWqJ9aNlUk.roa (raw, json)
Hash identifier: UXJGraJ6E5QDTnHX/M1Cj4MDn4O++xdQ/uTejo3uu6k=
Subject key identifier: CB:E2:AC:F9:77:19:D6:37:82:E0:99:A6:42:85:AA:27:D6:8D:95:49
Certificate issuer: /CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Certificate serial: 01856F7991EC4B3AAC7D5B5B0BADA907C8FC
Authority key identifier: 15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/y-Ks-XcZ1jeC4JmmQoWqJ9aNlUk.roa
Signing time: Sun 01 Jan 2023 22:35:16 +0000
ROA not before: Sun 01 Jan 2023 22:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 185.150.216.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:91:ec:4b:3a:ac:7d:5b:5b:0b:ad:a9:07:c8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Validity
Not Before: Jan 1 22:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbe2acf97719d63782e099a64285aa27d68d9549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:08:71:51:23:5b:ed:8a:3c:67:4b:2d:06:
6f:db:79:fd:15:5f:91:80:c3:68:d7:e8:2d:2a:8d:
9c:2a:04:b0:98:89:c8:ef:8d:0b:37:39:ce:04:33:
c0:53:d0:9a:ec:c1:a6:7b:5d:00:b9:19:2c:87:bd:
c0:38:71:d3:ae:36:f6:da:09:78:98:83:4c:79:94:
54:17:26:15:4e:4f:e9:f3:49:30:3e:4d:8b:8e:76:
98:6e:a2:52:ff:f2:30:66:6e:60:e4:2a:4d:b3:9a:
2c:f9:f5:e9:f6:97:f2:8a:ad:4d:54:41:d2:45:3a:
ee:3c:25:68:6d:2d:dd:3f:ae:18:6f:92:dc:56:48:
00:1c:96:f3:ea:fb:50:64:7d:2e:c3:10:83:c7:1f:
b5:a7:08:ea:36:3e:4a:42:0b:3b:e0:e9:2b:d0:7d:
91:c8:35:e4:7c:d8:53:1a:e1:7a:b1:cf:f9:9a:22:
ae:45:1f:66:7b:07:35:08:ea:4b:58:06:17:54:5e:
23:32:78:18:bd:eb:c0:8a:9b:8b:4d:ec:41:bb:d1:
3a:dd:f0:1b:b9:75:72:2e:fb:c1:d0:4f:eb:bc:f2:
dc:bc:bf:94:c4:59:28:05:0b:b7:58:61:6e:0e:b6:
a9:ba:6e:c5:9a:41:b3:ad:5e:93:82:a0:be:70:42:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E2:AC:F9:77:19:D6:37:82:E0:99:A6:42:85:AA:27:D6:8D:95:49
X509v3 Authority Key Identifier:
keyid:15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/y-Ks-XcZ1jeC4JmmQoWqJ9aNlUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.216.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:3f:79:9e:00:80:0a:31:95:40:52:9e:a0:96:be:09:9b:60:
c9:63:6d:7d:63:12:d5:ef:b8:6b:6b:6a:2d:aa:66:11:9f:9c:
17:7c:fb:d7:23:56:03:ef:5d:af:ee:d8:87:8b:38:6c:4c:60:
66:e7:23:d8:69:75:0c:78:c7:31:b0:0b:fd:2b:bb:cc:7e:ad:
7d:27:74:4d:cf:b1:56:8c:8f:f9:76:d1:7a:6b:8f:13:53:28:
d0:b4:c8:9c:06:0e:a2:02:c9:c5:34:fc:b2:51:be:f1:9f:41:
71:0e:a7:3f:cb:fe:3e:9b:10:15:04:4d:4d:65:c2:c4:2a:dd:
94:c4:71:af:ca:22:ca:3f:fa:78:d0:a8:52:3c:86:26:85:d2:
59:ad:2c:ec:8a:84:3f:83:7d:03:dc:3a:5b:a5:af:12:c5:40:
9e:14:64:8c:45:72:d5:af:28:e3:26:2f:ca:7f:0c:9a:4d:aa:
0d:b9:86:fe:fb:2a:c2:31:ba:58:10:f9:8d:85:4b:89:21:e2:
1a:d3:2e:d7:52:68:9d:7e:c0:9b:fc:08:ee:08:2b:09:45:16:
96:86:0d:68:2d:bc:1d:a7:c4:1f:22:8b:08:16:8f:63:57:f4:
2c:a8:29:5f:e8:4f:7e:1c:9c:99:a4:33:26:75:5d:c1:22:4b:
be:ce:0f:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVveZHsSzqsfVtbC62pB8j8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZDFmZjZiZWM5ZmJjYjg5ZTk1MGEzYTAxZWYyZDY4NmYw
ZTdhMzEwHhcNMjMwMTAxMjIzNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmUyYWNmOTc3MTlkNjM3ODJlMDk5YTY0Mjg1YWEyN2Q2OGQ5NTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxQIcVEjW+2KPGdLLQZv23n9FV+R
gMNo1+gtKo2cKgSwmInI740LNznOBDPAU9Ca7MGme10AuRksh73AOHHTrjb22gl4
mINMeZRUFyYVTk/p80kwPk2LjnaYbqJS//IwZm5g5CpNs5os+fXp9pfyiq1NVEHS
RTruPCVobS3dP64Yb5LcVkgAHJbz6vtQZH0uwxCDxx+1pwjqNj5KQgs74Okr0H2R
yDXkfNhTGuF6sc/5miKuRR9mewc1COpLWAYXVF4jMngYvevAipuLTexBu9E63fAb
uXVyLvvB0E/rvPLcvL+UxFkoBQu3WGFuDrapum7FmkGzrV6TgqC+cEL5CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMvirPl3GdY3guCZpkKFqifWjZVJMB8GA1UdIwQY
MBaAFBXR/2vsn7y4npUKOgHvLWhvDnoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmRIX2EteWZ2TGllbFFvNkFlOHRhRzhPZWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mNTAxZjYtMTcwMi00OGQzLTgwMjct
OTZiODY5MWY1MjYwLzEveS1Lcy1YY1oxamVDNEptbVFvV3FKOWFObFVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9mNTAxZjYtMTcwMi00OGQzLTgwMjctOTZiODY5MWY1MjYw
LzEvRmRIX2EteWZ2TGllbFFvNkFlOHRhRzhPZWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZbYMA0G
CSqGSIb3DQEBCwUAA4IBAQBtP3meAIAKMZVAUp6glr4Jm2DJY219YxLV77hra2ot
qmYRn5wXfPvXI1YD712v7tiHizhsTGBm5yPYaXUMeMcxsAv9K7vMfq19J3RNz7FW
jI/5dtF6a48TUyjQtMicBg6iAsnFNPyyUb7xn0FxDqc/y/4+mxAVBE1NZcLEKt2U
xHGvyiLKP/p40KhSPIYmhdJZrSzsioQ/g30D3Dpbpa8SxUCeFGSMRXLVryjjJi/K
fwyaTaoNuYb++yrCMbpYEPmNhUuJIeIa0y7XUmidfsCb/AjuCCsJRRaWhg1oLbwd
p8QfIosIFo9jV/QsqClf6E9+HJyZpDMmdV3BIku+zg/S
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:30 2024 by rpki-client on console-ams.rpki-client.org