Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/CYRlrywJktF66A-v1F3iklZBFPg.roa
File: CYRlrywJktF66A-v1F3iklZBFPg.roa (raw, json)
Hash identifier: 5lbrjJyohMpC6ETC8w5kOcYYgPZWbLjOJffab/+/Nlw=
Subject key identifier: 09:84:65:AF:2C:09:92:D1:7A:E8:0F:AF:D4:5D:E2:92:56:41:14:F8
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01864ED7CCAC06E9353799648ACF49DFE1C7
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/CYRlrywJktF66A-v1F3iklZBFPg.roa
Signing time: Tue 14 Feb 2023 07:33:30 +0000
ROA not before: Tue 14 Feb 2023 07:33:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.132.187.0/24 maxlen: 24
185.212.204.0/23 maxlen: 24
185.212.206.0/23 maxlen: 24
93.177.114.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4e:d7:cc:ac:06:e9:35:37:99:64:8a:cf:49:df:e1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Feb 14 07:33:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=098465af2c0992d17ae80fafd45de292564114f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ea:d9:5f:32:37:fa:82:b0:88:48:a6:74:79:
de:87:1c:e0:9c:7e:c2:07:7d:e6:d8:1d:0d:81:4c:
d0:38:ff:17:b1:d7:ad:bf:ea:00:10:50:a7:22:6b:
e9:67:87:02:42:42:eb:07:76:83:33:15:b7:9c:62:
d4:06:d4:db:7c:d6:ea:6d:3f:0d:87:94:69:6d:45:
59:a9:33:92:b2:4c:b9:ac:de:6b:22:87:8f:25:f0:
6d:89:46:07:e1:fb:d0:00:d1:89:28:6c:82:2e:41:
e6:f3:cc:b3:81:d3:63:ba:0f:03:3b:76:f9:f9:52:
ef:ce:19:a3:88:6a:9e:f7:70:b1:06:55:44:52:21:
53:66:a5:79:41:fb:cf:89:fe:fa:c5:a5:19:52:58:
a8:14:10:fa:b5:99:8d:b2:0a:19:8c:3c:48:bc:37:
ff:02:22:b0:01:c3:84:24:3e:3b:2f:b5:e0:e4:7c:
6f:8d:5a:f7:e0:4d:e7:6d:ac:46:6d:8a:99:af:b2:
9e:87:35:ee:6f:e8:8a:a3:fe:65:88:42:90:37:45:
cf:16:31:9a:a7:80:e8:c1:0b:f5:5b:85:46:4e:79:
0d:5b:4d:04:d2:76:74:42:95:7d:7b:4d:de:f4:1b:
59:77:54:a0:c9:41:5e:ee:56:e6:4c:a0:6a:16:fd:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:84:65:AF:2C:09:92:D1:7A:E8:0F:AF:D4:5D:E2:92:56:41:14:F8
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/CYRlrywJktF66A-v1F3iklZBFPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.114.0/23
185.132.187.0/24
185.212.204.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:4f:1b:f1:bc:6a:da:04:ce:c1:90:5d:63:6b:82:93:d7:87:
73:af:97:28:6d:fe:7c:d0:a2:d5:29:ed:89:c1:d9:45:7d:52:
41:5c:3b:2b:32:fa:ba:34:e8:d0:a2:e1:ed:ba:e1:67:89:7b:
6c:da:c6:4d:bf:a4:65:c9:1b:3d:99:2b:79:47:72:fa:64:4c:
b4:92:cf:fc:ca:fd:f6:0e:44:da:d5:49:90:d5:fc:4d:f2:24:
c7:c4:82:3e:89:70:74:ad:ec:b2:6b:35:12:60:83:dd:b5:42:
00:22:90:46:29:66:ce:f4:d0:37:48:df:98:08:23:2a:49:99:
a2:4d:97:da:ad:fb:d1:b7:63:aa:b5:d0:80:56:3f:e1:f1:af:
cf:89:15:71:99:5e:9d:ae:80:d9:9f:1a:92:59:a9:b6:a2:b5:
68:22:f3:5f:d1:63:46:f6:f8:de:9b:a6:e0:47:a0:ac:69:09:
28:55:62:50:96:8a:7a:c3:d8:36:54:7c:e6:d1:3b:ac:85:ac:
ec:d3:76:38:e3:da:76:75:e9:42:77:ec:68:55:c8:d1:26:67:
a1:54:75:19:2e:23:36:3d:c4:81:9e:d2:3d:e3:a0:2e:a9:45:
bd:10:50:e7:89:81:40:f0:a1:f1:be:b8:6b:7a:9a:1b:05:51:
55:47:8d:dd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYZO18ysBuk1N5lkis9J3+HHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj
ZjE2YmUwHhcNMjMwMjE0MDczMzMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTg0NjVhZjJjMDk5MmQxN2FlODBmYWZkNDVkZTI5MjU2NDExNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAherZXzI3+oKwiEimdHnehxzgnH7C
B33m2B0NgUzQOP8Xsdetv+oAEFCnImvpZ4cCQkLrB3aDMxW3nGLUBtTbfNbqbT8N
h5RpbUVZqTOSsky5rN5rIoePJfBtiUYH4fvQANGJKGyCLkHm88yzgdNjug8DO3b5
+VLvzhmjiGqe93CxBlVEUiFTZqV5QfvPif76xaUZUlioFBD6tZmNsgoZjDxIvDf/
AiKwAcOEJD47L7Xg5HxvjVr34E3nbaxGbYqZr7KehzXub+iKo/5liEKQN0XPFjGa
p4DowQv1W4VGTnkNW00E0nZ0QpV9e03e9BtZd1SgyUFe7lbmTKBqFv1kKwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAmEZa8sCZLReugPr9Rd4pJWQRT4MB8GA1UdIwQY
MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt
OTcyNDNlMzE2MjcyLzEvQ1lSbHJ5d0prdEY2NkEtdjFGM2lrbFpCRlBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy
LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXbFyAwQA
uYS7AwQCudTMMA0GCSqGSIb3DQEBCwUAA4IBAQB+TxvxvGraBM7BkF1ja4KT14dz
r5cobf580KLVKe2JwdlFfVJBXDsrMvq6NOjQouHtuuFniXts2sZNv6RlyRs9mSt5
R3L6ZEy0ks/8yv32DkTa1UmQ1fxN8iTHxII+iXB0reyyazUSYIPdtUIAIpBGKWbO
9NA3SN+YCCMqSZmiTZfarfvRt2OqtdCAVj/h8a/PiRVxmV6droDZnxqSWam2orVo
IvNf0WNG9vjem6bgR6CsaQkoVWJQlop6w9g2VHzm0Tushazs03Y449p2delCd+xo
VcjRJmehVHUZLiM2PcSBntI946AuqUW9EFDniYFA8KHxvrhrepobBVFVR43d
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:39 2023 by rpki-client on console-ams.rpki-client.org