Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yK2m0iOxrF76Zdw6My5j4ACs2fk.roa
File: yK2m0iOxrF76Zdw6My5j4ACs2fk.roa (raw, json)
Hash identifier: GC9S5SYKmd/8ENvmrYpjCqfUEZehgPKAwO6hmUVNj0s=
Subject key identifier: C8:AD:A6:D2:23:B1:AC:5E:FA:65:DC:3A:33:2E:63:E0:00:AC:D9:F9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188BB2FAB19F964A7483B7ED3B60D6076E2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yK2m0iOxrF76Zdw6My5j4ACs2fk.roa
Signing time: Wed 14 Jun 2023 18:34:03 +0000
ROA not before: Wed 14 Jun 2023 18:34:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49316
IP address blocks: 93.113.171.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 13:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bb:2f:ab:19:f9:64:a7:48:3b:7e:d3:b6:0d:60:76:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 14 18:34:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8ada6d223b1ac5efa65dc3a332e63e000acd9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:fb:c9:99:4b:1c:13:ea:33:8e:ac:f1:a1:
b6:69:b7:00:04:d8:92:25:9a:a3:39:08:4f:64:b5:
6c:8f:51:c1:c2:a9:2e:66:c1:7c:4d:ee:8b:46:2b:
8a:00:d9:ce:5b:6f:ce:ff:bc:cc:c4:f5:67:6d:d8:
a4:d4:fb:c6:e9:a8:ea:49:50:7a:b6:c7:ac:4e:0e:
27:47:92:a1:03:07:85:e7:60:f8:41:6e:cc:07:d6:
ab:6d:5f:a5:97:c7:a6:b7:91:88:aa:70:d7:a0:2f:
73:19:fb:79:c4:8b:3a:12:83:2f:51:bf:e7:08:a3:
a7:03:4e:c4:1b:db:aa:a5:cf:a1:28:02:a8:01:9c:
93:a5:d1:57:b4:cd:84:8b:6c:fa:05:6a:72:62:c0:
66:56:f6:b5:bb:c1:21:d1:1b:4a:5f:30:32:46:33:
27:48:e2:51:6d:40:af:88:30:00:11:72:60:d4:28:
46:8a:e8:0f:97:80:2b:af:25:f4:4a:02:bd:22:23:
54:93:23:3a:52:6a:ce:4a:0d:b9:ca:9a:94:ec:75:
e9:07:35:1d:33:04:66:8f:84:b7:30:90:8b:6f:9a:
07:81:5a:37:ef:68:58:84:ba:63:85:a7:57:2a:df:
05:bc:35:80:61:ab:17:a4:c6:74:f4:da:10:64:7c:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AD:A6:D2:23:B1:AC:5E:FA:65:DC:3A:33:2E:63:E0:00:AC:D9:F9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yK2m0iOxrF76Zdw6My5j4ACs2fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.171.0/24
93.114.183.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7d:a4:b8:db:c9:42:3b:c1:bb:9a:49:19:bf:04:95:24:aa:
e5:23:6b:a6:eb:60:ab:97:ee:73:3d:56:9d:39:4f:21:a6:3e:
4e:6a:86:8b:10:06:e4:a9:70:04:ba:e6:ee:6a:e4:bd:1b:f1:
5a:ff:45:2c:3f:0b:d0:ae:bc:b4:0c:1b:65:a3:2f:63:02:76:
f0:9f:19:a8:d9:09:de:dd:ed:ea:02:6a:c1:6f:88:3d:1a:c9:
ab:a5:ee:a9:20:84:c5:77:63:06:bf:db:af:5b:73:a7:2d:31:
1c:1c:32:4e:1b:58:3d:8c:cc:17:bd:ef:86:28:3a:c7:fe:24:
6b:72:4c:be:b7:1c:d4:92:12:7c:d7:dc:db:ad:53:7f:0e:0b:
55:7f:a6:58:c0:a3:8e:7a:a4:1c:a0:e7:84:fc:2e:d9:83:e7:
ec:5a:c5:0a:37:ad:a1:3f:f5:59:45:6e:a8:54:ee:87:7a:e6:
29:07:e6:a9:2b:1c:ba:61:c2:02:6e:a9:07:4d:f4:7e:3b:26:
54:a0:8b:99:a4:bb:15:37:b4:bd:06:5e:6c:a5:e1:53:78:30:
74:e5:76:cb:c8:70:56:ec:ab:9f:ce:32:fd:1a:b8:cd:1f:f8:
7a:6d:c4:d8:1a:ee:27:47:27:c0:2b:9e:e6:9f:d4:f0:56:82:
b9:b8:32:f2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYi7L6sZ+WSnSDt+07YNYHbiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNjE0MTgzNDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGFkYTZkMjIzYjFhYzVlZmE2NWRjM2EzMzJlNjNlMDAwYWNkOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksD7yZlLHBPqM46s8aG2abcABNiS
JZqjOQhPZLVsj1HBwqkuZsF8Te6LRiuKANnOW2/O/7zMxPVnbdik1PvG6ajqSVB6
tsesTg4nR5KhAweF52D4QW7MB9arbV+ll8emt5GIqnDXoC9zGft5xIs6EoMvUb/n
CKOnA07EG9uqpc+hKAKoAZyTpdFXtM2Ei2z6BWpyYsBmVva1u8Eh0RtKXzAyRjMn
SOJRbUCviDAAEXJg1ChGiugPl4ArryX0SgK9IiNUkyM6UmrOSg25ypqU7HXpBzUd
MwRmj4S3MJCLb5oHgVo372hYhLpjhadXKt8FvDWAYasXpMZ09NoQZHwJFwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMitptIjsaxe+mXcOjMuY+AArNn5MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEveUsybTBpT3hyRjc2WmR3Nk15NWo0QUNzMmZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXGrAwQA
XXK3MA0GCSqGSIb3DQEBCwUAA4IBAQB+faS428lCO8G7mkkZvwSVJKrlI2um62Cr
l+5zPVadOU8hpj5OaoaLEAbkqXAEuubuauS9G/Fa/0UsPwvQrry0DBtloy9jAnbw
nxmo2Qne3e3qAmrBb4g9Gsmrpe6pIITFd2MGv9uvW3OnLTEcHDJOG1g9jMwXve+G
KDrH/iRrcky+txzUkhJ819zbrVN/DgtVf6ZYwKOOeqQcoOeE/C7Zg+fsWsUKN62h
P/VZRW6oVO6HeuYpB+apKxy6YcICbqkHTfR+OyZUoIuZpLsVN7S9Bl5speFTeDB0
5XbLyHBW7KufzjL9GrjNH/h6bcTYGu4nRyfAK57mn9TwVoK5uDLy
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:15 2024 by rpki-client on console-ams.rpki-client.org