Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/yubTkPdbwQHcP6_PnxT1plex458.roa
File: yubTkPdbwQHcP6_PnxT1plex458.roa (raw, json)
Hash identifier: a8i319+oUYCAu12jz2jpqNFEePylzmklalCSZxYb8mo=
Subject key identifier: CA:E6:D3:90:F7:5B:C1:01:DC:3F:AF:CF:9F:14:F5:A6:57:B1:E3:9F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0188C0DAC92153C6AB5526CCF9D1F08C1AF3
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/yubTkPdbwQHcP6_PnxT1plex458.roa
Signing time: Thu 15 Jun 2023 20:59:03 +0000
ROA not before: Thu 15 Jun 2023 20:59:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 89.251.8.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c0:da:c9:21:53:c6:ab:55:26:cc:f9:d1:f0:8c:1a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 15 20:59:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cae6d390f75bc101dc3fafcf9f14f5a657b1e39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:2b:5d:1d:62:17:e7:33:a3:04:61:fc:94:
06:b8:40:32:6d:45:c6:dd:a9:49:d7:41:5e:8f:56:
8c:d9:5d:8c:2f:a3:95:6e:24:00:99:a8:0f:a1:d9:
56:56:12:98:89:44:54:a3:93:6f:5a:80:37:a6:84:
73:41:a0:d4:49:a1:6a:11:d9:89:df:8f:78:5d:70:
cd:3b:a2:c0:ad:97:a3:57:a8:d3:4c:90:90:61:8c:
0e:8c:82:62:c5:6b:0d:8a:1f:b4:71:e2:56:d8:13:
64:ad:d0:a4:86:3e:97:50:20:e7:7b:9e:da:6d:ed:
f4:97:9f:b1:59:6b:ce:b9:c7:8c:51:a8:f2:4c:b4:
95:f3:1f:bc:46:d8:d2:66:71:69:3f:49:8b:4f:f1:
fd:af:fa:84:66:f7:8a:0f:b7:89:1d:6c:f8:c0:65:
47:69:8b:85:ff:5d:20:89:1e:26:cc:f7:28:c9:79:
4b:36:31:c8:ac:80:c1:a9:c0:58:48:1f:bb:cf:be:
e5:47:b2:57:79:df:14:b2:36:44:67:43:5f:fb:38:
8f:6a:cd:01:27:8f:40:e5:38:9e:5e:34:6c:b6:94:
3f:e6:6a:64:74:64:0b:60:06:6b:80:f2:b6:de:ca:
21:e5:0b:44:d1:18:30:82:be:82:05:28:d4:ad:3d:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E6:D3:90:F7:5B:C1:01:DC:3F:AF:CF:9F:14:F5:A6:57:B1:E3:9F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/yubTkPdbwQHcP6_PnxT1plex458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.8.0/22
Signature Algorithm: sha256WithRSAEncryption
62:8e:fe:2c:08:3d:be:84:fb:15:27:e5:36:ed:06:47:4d:8c:
34:33:5f:0d:72:d2:26:59:6a:7b:f8:3f:00:c0:45:4e:aa:f2:
0a:08:d7:86:01:a8:bf:05:59:71:e2:b0:07:c2:2c:bc:fa:bd:
4e:8a:61:20:0b:f9:01:7e:50:b2:23:9c:a8:11:66:77:6c:38:
3d:bc:b7:82:7c:fc:b9:2a:c1:36:e2:3e:1b:96:8a:aa:eb:03:
85:51:fa:8e:9a:5f:b3:6d:36:77:d5:0c:a6:eb:26:e1:63:0a:
b1:67:f2:c9:1a:d5:12:5b:ec:96:fe:80:86:8f:48:aa:36:97:
a7:78:4e:60:08:f7:a7:6b:72:1a:9b:9e:e3:ea:cc:05:44:ef:
9a:16:d6:7f:95:a5:9b:84:ac:ac:f6:56:6c:0c:33:ae:6d:15:
69:6b:68:4a:69:a0:66:94:d5:20:31:7e:a9:01:46:68:85:e6:
d4:03:82:a3:31:ef:5e:50:74:ad:92:ef:08:0e:c9:d5:28:1c:
67:89:e3:d4:cc:30:83:aa:a8:d2:70:4f:f8:dd:7b:35:b1:69:
73:2b:ae:b6:92:f3:e8:78:35:e9:d5:14:f4:0d:21:dd:b5:b4:
99:9d:55:e7:3e:0a:9b:a5:9c:25:d9:11:ab:1c:c7:a4:9a:ef:
36:70:d5:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjA2skhU8arVSbM+dHwjBrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMwNjE1MjA1OTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWU2ZDM5MGY3NWJjMTAxZGMzZmFmY2Y5ZjE0ZjVhNjU3YjFlMzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCwrXR1iF+czowRh/JQGuEAybUXG
3alJ10Fej1aM2V2ML6OVbiQAmagPodlWVhKYiURUo5NvWoA3poRzQaDUSaFqEdmJ
3494XXDNO6LArZejV6jTTJCQYYwOjIJixWsNih+0ceJW2BNkrdCkhj6XUCDne57a
be30l5+xWWvOuceMUajyTLSV8x+8RtjSZnFpP0mLT/H9r/qEZveKD7eJHWz4wGVH
aYuF/10giR4mzPcoyXlLNjHIrIDBqcBYSB+7z77lR7JXed8UsjZEZ0Nf+ziPas0B
J49A5TieXjRstpQ/5mpkdGQLYAZrgPK23soh5QtE0Rgwgr6CBSjUrT3SRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMrm05D3W8EB3D+vz58U9aZXseOfMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEveXViVGtQZGJ3UUhjUDZfUG54VDFwbGV4NDU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWfsIMA0G
CSqGSIb3DQEBCwUAA4IBAQBijv4sCD2+hPsVJ+U27QZHTYw0M18NctImWWp7+D8A
wEVOqvIKCNeGAai/BVlx4rAHwiy8+r1OimEgC/kBflCyI5yoEWZ3bDg9vLeCfPy5
KsE24j4bloqq6wOFUfqOml+zbTZ31Qym6ybhYwqxZ/LJGtUSW+yW/oCGj0iqNpen
eE5gCPena3Iam57j6swFRO+aFtZ/laWbhKys9lZsDDOubRVpa2hKaaBmlNUgMX6p
AUZohebUA4KjMe9eUHStku8IDsnVKBxniePUzDCDqqjScE/43Xs1sWlzK662kvPo
eDXp1RT0DSHdtbSZnVXnPgqbpZwl2RGrHMekmu82cNVd
-----END CERTIFICATE-----
Generated at Mon Aug 21 08:24:38 2023 by rpki-client on console-fra.rpki-client.org