Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/y6yMd-mEJspVv-yg2wo2rKToZaw.roa
File: y6yMd-mEJspVv-yg2wo2rKToZaw.roa (raw, json)
Hash identifier: ShmxF27/sFkNd5Jis9fX69WXLhQT1E+D/E6ymQ9zqr4=
Subject key identifier: CB:AC:8C:77:E9:84:26:CA:55:BF:EC:A0:DB:0A:36:AC:A4:E8:65:AC
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018C8B8F86CF46FBC14917294A8F35B73C36
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/y6yMd-mEJspVv-yg2wo2rKToZaw.roa
Signing time: Thu 21 Dec 2023 08:48:08 +0000
ROA not before: Thu 21 Dec 2023 08:48:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 82.206.32.0/21 maxlen: 24
82.206.40.0/21 maxlen: 24
82.206.48.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:8f:86:cf:46:fb:c1:49:17:29:4a:8f:35:b7:3c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Dec 21 08:48:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbac8c77e98426ca55bfeca0db0a36aca4e865ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:34:13:37:36:c2:d8:61:b5:50:74:5e:fd:c7:
91:69:0e:d8:b6:27:4f:e6:6f:9e:c0:06:7b:e0:11:
23:50:8a:f8:ed:d9:80:8a:4c:4a:7a:13:b9:6a:52:
20:12:e3:39:83:84:25:7c:d2:08:c0:9b:85:b8:32:
7d:da:b8:aa:14:09:9c:c2:6b:66:de:ed:72:b7:1d:
a5:28:4a:be:92:7c:8d:0d:b2:e7:d8:68:5b:c9:12:
1a:2f:a0:33:87:eb:07:22:17:cb:a7:21:11:f2:06:
ea:0b:3b:b8:5f:9e:0b:23:a8:ca:cf:40:b3:72:79:
db:a6:46:87:0a:a8:d2:41:f4:7b:90:09:f9:92:e8:
29:7b:cc:af:d2:f6:67:20:4b:fa:ac:59:60:8b:99:
8f:b2:da:70:6f:1c:17:26:f4:d8:51:3b:17:86:38:
ad:bb:22:07:34:cd:fe:91:41:3e:69:2a:e0:db:40:
b7:9c:28:fd:0b:fc:d1:8a:3d:59:85:c4:eb:00:52:
3d:2e:c1:c2:51:61:08:ab:96:a0:2b:c5:15:b3:53:
d3:08:e3:2a:0f:11:af:3a:8b:aa:69:1a:5c:27:0c:
93:ef:ee:fb:ce:eb:c3:13:09:cc:32:ad:39:04:e2:
b7:ea:64:c5:9d:e1:56:03:ec:9e:11:95:30:5a:ad:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AC:8C:77:E9:84:26:CA:55:BF:EC:A0:DB:0A:36:AC:A4:E8:65:AC
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/y6yMd-mEJspVv-yg2wo2rKToZaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.32.0-82.206.55.255
Signature Algorithm: sha256WithRSAEncryption
35:25:bf:8b:77:38:25:05:34:c0:e9:c2:18:f9:bf:e5:41:a6:
24:ab:78:d3:cc:35:1a:ae:53:f6:44:cd:b1:40:80:67:34:25:
58:a7:ad:81:8f:18:35:d2:d0:ff:bf:56:25:79:6d:80:6f:04:
b0:00:dd:51:be:6c:d1:63:20:c7:9c:6a:6b:8c:38:1d:18:b7:
cb:d1:4f:a2:ad:5b:f4:c9:47:8c:c9:99:45:c2:01:20:0b:db:
98:5a:96:01:f2:79:30:a3:50:92:38:cb:7c:35:41:84:cd:6a:
c2:56:fc:07:d5:5a:50:72:f4:67:d5:c8:35:38:c5:62:5f:fe:
b5:85:81:f6:34:40:ec:4b:18:1c:06:68:43:6c:96:c6:df:af:
4b:ba:47:1a:bb:2b:5d:6b:8f:a6:47:b7:bc:c3:82:e7:76:c8:
f7:31:7c:f5:76:15:60:7a:d3:31:59:d6:fb:43:eb:37:fa:a7:
68:30:69:ef:15:2a:10:dd:08:8d:f7:14:6c:39:3a:2e:ff:27:
b8:a5:03:cb:5e:9a:e1:56:d0:b4:45:5d:53:2d:89:77:4d:50:
66:f0:bd:9e:11:36:6c:d9:b9:a4:c0:1b:5c:1a:b2:07:c7:4f:
36:48:7c:31:5f:31:ad:0f:1c:f6:b5:8d:4f:55:86:97:8e:97:
b6:51:3c:be
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYyLj4bPRvvBSRcpSo81tzw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjMxMjIxMDg0ODA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmFjOGM3N2U5ODQyNmNhNTViZmVjYTBkYjBhMzZhY2E0ZTg2NWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTQTNzbC2GG1UHRe/ceRaQ7YtidP
5m+ewAZ74BEjUIr47dmAikxKehO5alIgEuM5g4QlfNIIwJuFuDJ92riqFAmcwmtm
3u1ytx2lKEq+knyNDbLn2GhbyRIaL6Azh+sHIhfLpyER8gbqCzu4X54LI6jKz0Cz
cnnbpkaHCqjSQfR7kAn5kugpe8yv0vZnIEv6rFlgi5mPstpwbxwXJvTYUTsXhjit
uyIHNM3+kUE+aSrg20C3nCj9C/zRij1ZhcTrAFI9LsHCUWEIq5agK8UVs1PTCOMq
DxGvOouqaRpcJwyT7+77zuvDEwnMMq05BOK36mTFneFWA+yeEZUwWq3xZwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMusjHfphCbKVb/soNsKNqyk6GWsMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEveTZ5TWQtbUVKc3BWdi15ZzJ3bzJyS1RvWmF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVSziAD
BANSzjAwDQYJKoZIhvcNAQELBQADggEBADUlv4t3OCUFNMDpwhj5v+VBpiSreNPM
NRquU/ZEzbFAgGc0JVinrYGPGDXS0P+/ViV5bYBvBLAA3VG+bNFjIMecamuMOB0Y
t8vRT6KtW/TJR4zJmUXCASAL25halgHyeTCjUJI4y3w1QYTNasJW/AfVWlBy9GfV
yDU4xWJf/rWFgfY0QOxLGBwGaENslsbfr0u6Rxq7K11rj6ZHt7zDgud2yPcxfPV2
FWB60zFZ1vtD6zf6p2gwae8VKhDdCI33FGw5Oi7/J7ilA8temuFW0LRFXVMtiXdN
UGbwvZ4RNmzZuaTAG1wasgfHTzZIfDFfMa0PHPa1jU9VhpeOl7ZRPL4=
-----END CERTIFICATE-----
Generated at Tue Dec 26 18:44:02 2023 by rpki-client on console-fra.rpki-client.org