Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/YisxgL0_G8zPa3ChvcwRFeSpPcA.roa
File: YisxgL0_G8zPa3ChvcwRFeSpPcA.roa (raw, json)
Hash identifier: 0Uj4/LJJgdWe0ovtIpCFItqLRxGlKDtGwEDs6/X/nIk=
Subject key identifier: 62:2B:31:80:BD:3F:1B:CC:CF:6B:70:A1:BD:CC:11:15:E4:A9:3D:C0
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DE435038598DF138E0D5152AA03FB
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/YisxgL0_G8zPa3ChvcwRFeSpPcA.roa
Signing time: Sun 01 Jan 2023 22:05:02 +0000
ROA not before: Sun 01 Jan 2023 22:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206198
IP address blocks: 84.245.88.0/23 maxlen: 23
85.248.24.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:e4:35:03:85:98:df:13:8e:0d:51:52:aa:03:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=622b3180bd3f1bcccf6b70a1bdcc1115e4a93dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:7c:92:5a:6e:5d:ed:46:e9:b6:5f:58:18:
e8:ac:40:45:6e:37:d9:ed:c2:67:7d:65:29:21:af:
2d:0f:ef:c6:01:cc:68:91:94:dc:f8:35:46:da:ce:
46:98:15:19:fa:ab:ef:24:ed:5c:54:53:3e:ce:fc:
36:54:f6:5a:2a:a4:2d:c5:95:57:f9:45:bc:5b:a3:
06:f2:58:94:82:bc:97:56:ea:e5:8a:61:4f:e0:2d:
a3:30:b9:b8:a3:46:61:b0:71:68:ff:08:a1:78:55:
cc:59:dc:ac:1b:66:67:c6:6a:48:91:d3:a6:8d:ce:
39:98:73:aa:c6:87:5b:b7:ca:7b:dd:d8:0e:db:b4:
73:12:07:b2:38:7f:2d:23:70:ea:2f:33:40:6b:4d:
c9:8f:60:14:fe:4a:62:56:7e:e3:28:86:e5:a7:96:
7d:24:e8:86:96:76:6b:9a:53:0e:28:6b:60:d8:71:
23:15:52:05:ce:63:64:90:7b:74:a4:1f:5c:0c:2d:
98:59:7c:9d:c7:2b:e7:4e:87:df:1b:5a:a4:f0:fa:
47:da:bd:00:f7:ca:11:17:a9:d8:96:c5:1d:8e:34:
86:9c:25:22:ff:97:5d:87:84:a1:38:66:82:5c:04:
3c:67:fe:9e:56:9c:20:a1:1c:78:65:64:83:2d:71:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2B:31:80:BD:3F:1B:CC:CF:6B:70:A1:BD:CC:11:15:E4:A9:3D:C0
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/YisxgL0_G8zPa3ChvcwRFeSpPcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.88.0/23
85.248.24.0/22
Signature Algorithm: sha256WithRSAEncryption
89:6b:9a:47:cc:2c:47:5f:83:f0:46:d4:a5:9e:6b:bb:1f:da:
51:6f:2b:19:36:1a:a0:71:23:13:3d:b3:73:09:ba:b6:48:78:
68:e8:73:d3:fd:df:3a:a5:9d:58:66:74:1a:8d:f8:fb:e1:9a:
cb:91:90:65:1d:47:b7:e8:d2:53:10:00:89:d5:d3:52:51:15:
d9:dd:d5:90:a7:0e:f6:b6:03:a4:b6:4a:07:3c:cf:57:bb:27:
55:1d:bc:14:3c:fd:7c:3e:c3:55:ae:6a:98:5d:ce:b3:07:a1:
6d:1b:7a:9f:4a:ba:39:ce:ea:f7:d1:02:0a:ad:27:75:84:a7:
51:3a:0c:b0:f9:33:72:9a:ab:ca:e7:10:ac:73:e8:26:d8:9b:
82:c7:34:83:c2:07:b5:85:1e:3d:54:39:9a:ea:c9:7a:e9:5d:
4d:6d:06:d9:db:f0:64:22:fd:29:83:90:ac:0f:b8:f5:30:4a:
93:bc:59:34:81:9f:ec:d0:fe:00:c2:6b:a1:b9:1e:e9:67:4b:
60:0b:b3:74:a5:f7:bf:16:07:52:03:d7:82:42:72:85:a9:4d:
56:dc:73:b1:01:f4:25:49:62:cf:ea:04:41:68:3a:07:e4:e6:
a9:9a:61:be:bb:cc:6c:04:89:19:79:01:b9:c3:fb:e9:af:e5:
90:a7:16:bd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvXeQ1A4WY3xOODVFSqgP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm
MDVkYmEwHhcNMjMwMTAxMjIwNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjJiMzE4MGJkM2YxYmNjY2Y2YjcwYTFiZGNjMTExNWU0YTkzZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8h8klpuXe1G6bZfWBjorEBFbjfZ
7cJnfWUpIa8tD+/GAcxokZTc+DVG2s5GmBUZ+qvvJO1cVFM+zvw2VPZaKqQtxZVX
+UW8W6MG8liUgryXVurlimFP4C2jMLm4o0ZhsHFo/wiheFXMWdysG2ZnxmpIkdOm
jc45mHOqxodbt8p73dgO27RzEgeyOH8tI3DqLzNAa03Jj2AU/kpiVn7jKIblp5Z9
JOiGlnZrmlMOKGtg2HEjFVIFzmNkkHt0pB9cDC2YWXydxyvnToffG1qk8PpH2r0A
98oRF6nYlsUdjjSGnCUi/5ddh4ShOGaCXAQ8Z/6eVpwgoRx4ZWSDLXG5IwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGIrMYC9PxvMz2twob3MERXkqT3AMB8GA1UdIwQY
MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt
ZTJmYmMzYTY4ODAwLzEvWWlzeGdMMF9HOHpQYTNDaHZjd1JGZVNwUGNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw
LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVPVYAwQC
VfgYMA0GCSqGSIb3DQEBCwUAA4IBAQCJa5pHzCxHX4PwRtSlnmu7H9pRbysZNhqg
cSMTPbNzCbq2SHho6HPT/d86pZ1YZnQajfj74ZrLkZBlHUe36NJTEACJ1dNSURXZ
3dWQpw72tgOktkoHPM9XuydVHbwUPP18PsNVrmqYXc6zB6FtG3qfSro5zur30QIK
rSd1hKdROgyw+TNymqvK5xCsc+gm2JuCxzSDwge1hR49VDma6sl66V1NbQbZ2/Bk
Iv0pg5CsD7j1MEqTvFk0gZ/s0P4AwmuhuR7pZ0tgC7N0pfe/FgdSA9eCQnKFqU1W
3HOxAfQlSWLP6gRBaDoH5OapmmG+u8xsBIkZeQG5w/vpr+WQpxa9
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:18 2024 by rpki-client on console-ams.rpki-client.org