Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Ykw24_aL3g_E83Z6aJ2HsycTWJ8.roa
File: Ykw24_aL3g_E83Z6aJ2HsycTWJ8.roa (raw, json)
Hash identifier: Oh/jLF+LCcXkOZqWnhJaOb37uhPRzQaYtP77HKYFuYI=
Subject key identifier: 62:4C:36:E3:F6:8B:DE:0F:C4:F3:76:7A:68:9D:87:B3:27:13:58:9F
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01856CC178323C4393574449027D55D3AABD
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Ykw24_aL3g_E83Z6aJ2HsycTWJ8.roa
Signing time: Sun 01 Jan 2023 09:54:56 +0000
ROA not before: Sun 01 Jan 2023 09:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 95.101.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:78:32:3c:43:93:57:44:49:02:7d:55:d3:aa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 09:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=624c36e3f68bde0fc4f3767a689d87b32713589f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:b2:30:09:4c:fe:dd:df:00:e9:19:92:2e:
5c:b9:0f:06:62:12:f9:b4:e1:1a:f0:41:2b:fb:45:
8b:49:55:d5:1b:5a:a8:14:dc:93:87:8e:d6:08:bc:
4c:7e:9d:5d:6a:02:b8:5c:f5:f5:df:d9:aa:2c:b0:
e1:c3:1a:a6:b8:5f:bf:cb:01:e1:1c:d9:3b:56:74:
f5:04:18:b3:db:eb:1e:6b:5f:8c:fb:db:6e:ae:48:
0c:f9:0a:b0:4b:60:9d:2e:23:9f:9f:6f:f7:d0:8a:
ad:65:3f:e6:a5:c2:ac:17:5e:13:49:e8:41:31:35:
32:cc:0f:cb:53:cf:e3:68:08:c0:df:30:1a:3d:b2:
c0:b0:08:a3:a8:9e:32:8f:2a:ee:b3:c1:91:24:f7:
31:e0:4a:3f:48:55:b4:f2:1b:5e:59:31:31:38:60:
ef:67:b9:cf:4e:b7:6c:8e:59:90:e5:74:8c:0d:58:
b4:1e:91:1a:e4:0b:87:b2:50:7a:e5:9b:60:1b:4c:
85:00:e2:ca:fd:b3:d8:71:7b:2b:1a:1e:d5:47:c5:
16:b6:52:37:37:7e:63:21:e7:fa:e8:40:6d:1c:dd:
f5:89:d7:37:bd:12:2c:09:0d:e7:81:c0:a6:b2:e4:
18:4a:4d:63:ec:2c:6e:1a:7f:3f:e4:42:0b:04:b8:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4C:36:E3:F6:8B:DE:0F:C4:F3:76:7A:68:9D:87:B3:27:13:58:9F
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Ykw24_aL3g_E83Z6aJ2HsycTWJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.101.235.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4b:fc:77:99:10:e3:74:83:8b:80:b8:52:74:a6:3f:a0:aa:
df:a1:e1:d2:f0:91:33:37:7c:1e:04:4f:64:29:bb:8e:73:79:
e9:48:9a:9c:a3:12:41:66:62:a6:04:e4:c8:df:e9:7b:eb:94:
f3:c5:85:18:e9:84:75:ab:b7:93:7a:89:4c:bf:c7:4f:79:46:
41:d7:e1:7c:b3:2b:55:02:80:b1:62:fb:50:43:e6:5d:43:8f:
d6:b2:80:5b:c5:62:3d:7c:a5:d6:d8:88:08:fd:2d:0c:c1:d5:
9c:f0:8f:9e:d9:f6:a7:c8:39:52:b3:cd:b7:b7:e0:b2:7a:96:
b1:dd:c0:5c:b1:31:b4:0f:53:11:75:63:a7:53:fa:1d:07:96:
0e:0f:64:c5:17:e2:c6:ce:bf:8a:e2:5f:b8:bb:05:47:19:f2:
4a:6d:9c:92:97:ef:b4:67:5a:a1:06:64:c0:5f:65:0c:1f:44:
2b:3c:cf:06:21:78:14:06:f4:c9:63:6c:a5:f4:d4:25:e6:d7:
a7:9e:8a:82:35:f3:96:49:30:7e:80:44:0c:e0:ee:bd:4a:49:
1a:21:91:9d:11:0d:23:5c:b6:f7:5d:66:9f:77:24:2d:3b:02:
8a:65:2b:13:fd:f2:4e:e4:62:ae:ef:bc:16:08:9b:12:c2:72:
60:3d:dc:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVswXgyPEOTV0RJAn1V06q9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjMwMTAxMDk1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjRjMzZlM2Y2OGJkZTBmYzRmMzc2N2E2ODlkODdiMzI3MTM1ODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIeyMAlM/t3fAOkZki5cuQ8GYhL5
tOEa8EEr+0WLSVXVG1qoFNyTh47WCLxMfp1dagK4XPX139mqLLDhwxqmuF+/ywHh
HNk7VnT1BBiz2+sea1+M+9turkgM+QqwS2CdLiOfn2/30IqtZT/mpcKsF14TSehB
MTUyzA/LU8/jaAjA3zAaPbLAsAijqJ4yjyrus8GRJPcx4Eo/SFW08hteWTExOGDv
Z7nPTrdsjlmQ5XSMDVi0HpEa5AuHslB65ZtgG0yFAOLK/bPYcXsrGh7VR8UWtlI3
N35jIef66EBtHN31idc3vRIsCQ3ngcCmsuQYSk1j7CxuGn8/5EILBLgX2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGJMNuP2i94PxPN2emidh7MnE1ifMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvWWt3MjRfYUwzZ19FODNaNmFKMkhzeWNUV0o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX2XrMA0G
CSqGSIb3DQEBCwUAA4IBAQCAS/x3mRDjdIOLgLhSdKY/oKrfoeHS8JEzN3weBE9k
KbuOc3npSJqcoxJBZmKmBOTI3+l765TzxYUY6YR1q7eTeolMv8dPeUZB1+F8sytV
AoCxYvtQQ+ZdQ4/WsoBbxWI9fKXW2IgI/S0MwdWc8I+e2fanyDlSs823t+Cyepax
3cBcsTG0D1MRdWOnU/odB5YOD2TFF+LGzr+K4l+4uwVHGfJKbZySl++0Z1qhBmTA
X2UMH0QrPM8GIXgUBvTJY2yl9NQl5tennoqCNfOWSTB+gEQM4O69SkkaIZGdEQ0j
XLb3XWafdyQtOwKKZSsT/fJO5GKu77wWCJsSwnJgPdyC
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:22 2024 by rpki-client on console-ams.rpki-client.org