Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/y6wjnsUyqpkVA6bGKDFYXlbFexA.roa
File: y6wjnsUyqpkVA6bGKDFYXlbFexA.roa (raw, json)
Hash identifier: gm3cxzKHPYMe9mW4CHBzE66TjhfAs0gmm1O8k+mGMO0=
Subject key identifier: CB:AC:23:9E:C5:32:AA:99:15:03:A6:C6:28:31:58:5E:56:C5:7B:10
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01856DC1D6FEE6E31D565F1D37C62CB162C6
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/y6wjnsUyqpkVA6bGKDFYXlbFexA.roa
Signing time: Sun 01 Jan 2023 14:34:58 +0000
ROA not before: Sun 01 Jan 2023 14:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208099
IP address blocks: 194.124.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:d6:fe:e6:e3:1d:56:5f:1d:37:c6:2c:b1:62:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 14:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbac239ec532aa991503a6c62831585e56c57b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:52:65:a3:27:97:fd:b6:61:38:bd:1a:8f:
cf:f8:f4:4c:7a:9a:44:4a:b4:00:61:9e:6b:14:c1:
07:77:f0:c7:ea:9e:aa:61:92:f7:00:bc:b0:72:87:
c0:87:bb:cb:f7:24:cc:53:8e:46:ff:01:63:f7:dc:
0e:7a:4d:84:dd:47:fa:af:38:cc:4e:6a:05:e1:b9:
77:11:61:7a:e0:a5:75:e0:22:48:dc:80:10:41:d2:
b5:fb:a0:5c:0b:2f:cc:c9:81:36:cd:8f:61:70:9d:
04:63:55:5a:69:91:8c:d5:ca:3d:da:8c:1a:69:1e:
4e:e2:14:10:c5:a8:85:b4:3b:5a:87:d1:dc:53:57:
8a:d2:da:e8:91:a3:33:4b:04:3c:05:f4:c1:2a:c9:
47:8b:3b:81:1a:d2:49:dc:d7:53:28:5b:6d:60:87:
66:59:8d:31:a3:1d:11:04:9c:ea:13:06:21:18:fe:
48:16:96:83:ae:09:87:79:df:19:a4:ce:0e:cc:33:
4e:f9:21:37:f8:b4:0c:af:6f:2f:e2:af:a9:1a:86:
9e:34:0c:ea:6c:1c:28:4a:22:01:fa:20:68:5f:40:
b8:e1:37:8c:37:75:55:37:07:a9:bd:6f:3d:5a:23:
54:71:94:9d:ea:1d:a8:b9:08:cf:f2:68:33:58:04:
54:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AC:23:9E:C5:32:AA:99:15:03:A6:C6:28:31:58:5E:56:C5:7B:10
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/y6wjnsUyqpkVA6bGKDFYXlbFexA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:7c:92:fe:2c:ff:fa:9a:30:10:13:7b:6f:5d:b2:fc:6d:2e:
76:43:f6:ee:64:19:c7:bb:fb:a5:f0:bb:74:4f:73:52:1a:0e:
b8:e6:7a:58:90:a4:9a:51:1b:13:67:c3:66:52:28:6e:d5:4c:
77:57:79:72:7f:45:ab:93:33:f9:d5:85:d6:52:af:7f:83:e4:
fe:7a:da:5e:8f:3e:c8:00:c4:f9:2d:07:54:c3:18:76:83:d5:
a0:15:bb:d4:31:e6:f0:0b:fa:dc:50:27:fb:38:ca:f4:92:cb:
59:8b:e9:99:bb:07:7f:0d:ad:3f:23:00:6e:c7:ea:28:72:e7:
6f:6f:0d:de:fe:11:57:e8:db:1c:e8:13:f4:57:96:ce:a4:2b:
e6:5d:20:fa:29:f6:26:0f:1e:a9:37:f4:22:27:2a:2b:59:98:
7d:df:eb:ed:0c:3c:15:fc:2e:9d:7f:c6:dc:fd:db:2c:5c:81:
62:7e:e4:ba:18:86:3c:92:5c:1e:e5:da:c1:e7:70:a0:71:0d:
8a:de:2c:a4:7b:59:62:f0:2a:2a:07:49:22:72:19:52:cd:c8:
d7:bd:a1:71:98:a6:17:6d:b8:d5:3d:33:31:05:7c:08:9a:4f:
7f:25:7a:aa:d5:bd:e6:0f:ed:18:cc:70:26:05:28:4b:b9:8e:
e2:2d:8e:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtwdb+5uMdVl8dN8YssWLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjMwMTAxMTQzNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmFjMjM5ZWM1MzJhYTk5MTUwM2E2YzYyODMxNTg1ZTU2YzU3YjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmZSZaMnl/22YTi9Go/P+PRMeppE
SrQAYZ5rFMEHd/DH6p6qYZL3ALywcofAh7vL9yTMU45G/wFj99wOek2E3Uf6rzjM
TmoF4bl3EWF64KV14CJI3IAQQdK1+6BcCy/MyYE2zY9hcJ0EY1VaaZGM1co92owa
aR5O4hQQxaiFtDtah9HcU1eK0trokaMzSwQ8BfTBKslHizuBGtJJ3NdTKFttYIdm
WY0xox0RBJzqEwYhGP5IFpaDrgmHed8ZpM4OzDNO+SE3+LQMr28v4q+pGoaeNAzq
bBwoSiIB+iBoX0C44TeMN3VVNwepvW89WiNUcZSd6h2ouQjP8mgzWARUzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMusI57FMqqZFQOmxigxWF5WxXsQMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEveTZ3am5zVXlxcGtWQTZiR0tERllYbGJGZXhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnwnMA0G
CSqGSIb3DQEBCwUAA4IBAQBafJL+LP/6mjAQE3tvXbL8bS52Q/buZBnHu/ul8Lt0
T3NSGg645npYkKSaURsTZ8NmUihu1Ux3V3lyf0WrkzP51YXWUq9/g+T+etpejz7I
AMT5LQdUwxh2g9WgFbvUMebwC/rcUCf7OMr0kstZi+mZuwd/Da0/IwBux+oocudv
bw3e/hFX6Nsc6BP0V5bOpCvmXSD6KfYmDx6pN/QiJyorWZh93+vtDDwV/C6df8bc
/dssXIFifuS6GIY8klwe5drB53CgcQ2K3iyke1li8CoqB0kichlSzcjXvaFxmKYX
bbjVPTMxBXwImk9/JXqq1b3mD+0YzHAmBShLuY7iLY5o
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:22 2024 by rpki-client on console-ams.rpki-client.org