Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/SJYUzyad4piG-x9IMiksHNIpfGc.roa
File: SJYUzyad4piG-x9IMiksHNIpfGc.roa (raw, json)
Hash identifier: qnYy4YYgfH3ql58OUN+3bZ5CbQxHRvXC13OdE3yBBgQ=
Subject key identifier: 48:96:14:CF:26:9D:E2:98:86:FB:1F:48:32:29:2C:1C:D2:29:7C:67
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 018C25793A325D7BF1489469C00FA2E4E380
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/SJYUzyad4piG-x9IMiksHNIpfGc.roa
Signing time: Fri 01 Dec 2023 13:02:30 +0000
ROA not before: Fri 01 Dec 2023 13:02:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197766
IP address blocks: 185.226.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:79:3a:32:5d:7b:f1:48:94:69:c0:0f:a2:e4:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Dec 1 13:02:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=489614cf269de29886fb1f4832292c1cd2297c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:67:89:21:69:60:f1:17:6e:ed:21:df:be:
6e:c5:8b:2e:68:9d:0f:d7:04:5e:cc:e0:62:bc:27:
f0:bb:6e:53:83:87:fe:cb:df:3e:f7:8c:aa:43:75:
ad:88:15:52:4f:e3:1a:ca:fe:06:f5:be:99:df:f2:
f1:7a:a3:9a:bd:b4:19:fd:b4:41:db:f7:8d:0b:b9:
4e:09:92:cd:cb:b6:d2:91:4a:72:97:81:00:81:70:
60:99:8b:73:a4:36:7e:99:e8:af:7c:85:63:6b:4b:
70:7b:b0:81:f0:fc:3a:74:d5:e0:62:1c:87:ca:3d:
60:c4:37:b9:1c:c5:56:eb:62:fe:b0:63:a9:40:d3:
f8:d3:60:e0:f1:d9:17:ef:6c:b7:c5:67:3a:60:72:
d0:5f:76:4b:fb:7e:d7:1f:f5:af:5f:40:a5:c3:dd:
69:e4:04:0c:9c:0f:32:6a:be:5c:8c:de:99:63:c5:
c3:ac:37:e4:0f:d6:f0:cb:c6:05:9b:7e:e2:32:f8:
e5:e5:49:96:2a:b9:4f:2a:d1:07:04:01:87:2d:73:
18:2b:38:e8:27:cf:52:91:11:a0:33:f9:3a:00:49:
57:13:9b:b9:ec:f6:47:2f:56:41:21:be:27:e2:89:
05:15:05:20:75:0f:a5:17:a6:21:fb:78:3e:bd:51:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:96:14:CF:26:9D:E2:98:86:FB:1F:48:32:29:2C:1C:D2:29:7C:67
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/SJYUzyad4piG-x9IMiksHNIpfGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.98.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:90:12:4a:a3:95:54:58:42:3b:ac:bf:d3:96:19:02:8d:46:
25:f6:ff:d1:2a:4d:e8:0f:aa:ab:0b:a7:63:1c:0f:2f:7b:dc:
9a:74:89:60:4b:b4:fe:de:4d:60:13:a8:88:84:2f:00:e5:ba:
fc:8f:c4:e5:c2:aa:50:46:4c:97:f5:72:03:da:5b:82:49:a8:
f6:b3:fe:c8:b3:be:47:0b:30:3a:f6:0a:00:13:e7:86:b1:34:
3c:ea:5a:a4:c5:90:d8:0f:fc:22:a7:9d:74:56:77:10:94:9b:
2b:d2:36:cd:37:22:bb:a1:40:bc:ba:fa:b0:3e:17:4f:37:67:
1f:5b:7e:d7:b5:0d:ee:45:2e:8f:22:f6:38:31:45:4f:35:55:
e0:5f:88:fa:30:a3:d6:dc:f5:f4:67:fd:85:6d:29:f7:32:77:
83:d7:56:4b:16:75:97:7b:0f:f6:56:dc:ac:af:a9:af:26:00:
42:a9:7e:b0:a0:20:6d:9e:90:9d:52:f9:ef:cb:38:f4:5f:44:
f0:d8:79:6c:b0:ac:38:84:3b:c8:d8:00:34:75:bd:7a:ab:71:
7f:00:3d:02:dd:22:6d:67:0e:63:f7:dd:59:15:79:09:6a:31:
51:77:23:eb:fc:72:16:3e:79:34:8c:8f:e0:6a:e9:13:ce:02:
79:e5:b7:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwleToyXXvxSJRpwA+i5OOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjYzODEwN2FiYjg0YWU2ZmIwM2NjMWRiMmNmZDFiYzQ0
ODdmOGQwHhcNMjMxMjAxMTMwMjMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODk2MTRjZjI2OWRlMjk4ODZmYjFmNDgzMjI5MmMxY2QyMjk3YzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjZniSFpYPEXbu0h375uxYsuaJ0P
1wRezOBivCfwu25Tg4f+y98+94yqQ3WtiBVST+Mayv4G9b6Z3/LxeqOavbQZ/bRB
2/eNC7lOCZLNy7bSkUpyl4EAgXBgmYtzpDZ+meivfIVja0twe7CB8Pw6dNXgYhyH
yj1gxDe5HMVW62L+sGOpQNP402Dg8dkX72y3xWc6YHLQX3ZL+37XH/WvX0Clw91p
5AQMnA8yar5cjN6ZY8XDrDfkD9bwy8YFm37iMvjl5UmWKrlPKtEHBAGHLXMYKzjo
J89SkRGgM/k6AElXE5u57PZHL1ZBIb4n4okFFQUgdQ+lF6Yh+3g+vVHFKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEiWFM8mneKYhvsfSDIpLBzSKXxnMB8GA1UdIwQY
MBaAFCD2OBB6u4Sub7A8wdss/RvESH+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQt
YTgyODM2ZGUwNWZjLzEvU0pZVXp5YWQ0cGlHLXg5SU1pa3NITklwZkdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQtYTgyODM2ZGUwNWZj
LzEvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueJiMA0G
CSqGSIb3DQEBCwUAA4IBAQBKkBJKo5VUWEI7rL/TlhkCjUYl9v/RKk3oD6qrC6dj
HA8ve9yadIlgS7T+3k1gE6iIhC8A5br8j8TlwqpQRkyX9XID2luCSaj2s/7Is75H
CzA69goAE+eGsTQ86lqkxZDYD/wip510VncQlJsr0jbNNyK7oUC8uvqwPhdPN2cf
W37XtQ3uRS6PIvY4MUVPNVXgX4j6MKPW3PX0Z/2FbSn3MneD11ZLFnWXew/2Vtys
r6mvJgBCqX6woCBtnpCdUvnvyzj0X0Tw2HlssKw4hDvI2AA0db16q3F/AD0C3SJt
Zw5j991ZFXkJajFRdyPr/HIWPnk0jI/gaukTzgJ55bcO
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:25 2024 by rpki-client on console-ams.rpki-client.org