Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/y2h_NR9EeL10yZ5MnD2RlXl7yGA.roa
File: y2h_NR9EeL10yZ5MnD2RlXl7yGA.roa (raw, json)
Hash identifier: kMHS7Otaf114l7h56cKW7gfN3oSO1HGmH/n0V49Tda8=
Subject key identifier: CB:68:7F:35:1F:44:78:BD:74:C9:9E:4C:9C:3D:91:95:79:7B:C8:60
Certificate issuer: /CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Certificate serial: 018CC9BC4B40915811B359B30504DE7AC9CC
Authority key identifier: CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/y2h_NR9EeL10yZ5MnD2RlXl7yGA.roa
Signing time: Tue 02 Jan 2024 10:33:29 +0000
ROA not before: Tue 02 Jan 2024 10:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58034
IP address blocks: 91.237.130.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:4b:40:91:58:11:b3:59:b3:05:04:de:7a:c9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Validity
Not Before: Jan 2 10:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb687f351f4478bd74c99e4c9c3d9195797bc860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:16:e9:ba:a2:62:e9:ad:30:15:3f:01:41:
fc:8c:19:d1:2b:c6:85:06:58:dc:68:5f:a8:b7:aa:
b0:e2:f6:80:a1:66:23:b4:28:0b:32:ca:90:c1:71:
21:78:ab:95:35:e1:e3:da:0c:f0:8e:42:cf:a7:f7:
a8:40:12:83:48:2b:cd:a2:27:99:f9:17:86:f9:31:
fc:1e:71:26:2f:08:72:aa:34:d8:da:fc:68:6a:58:
5e:bc:2d:ea:c0:98:cf:32:d0:b7:1e:2f:0f:ef:81:
07:27:64:2b:c9:84:28:01:41:ff:30:88:1c:59:4c:
69:33:13:b9:c3:1a:2c:e5:9b:9c:95:36:41:c5:ed:
64:79:fd:5f:8b:36:ad:86:bd:e8:f7:f8:42:00:1b:
f6:f9:39:3b:87:b7:66:64:b5:71:c9:c5:42:78:03:
ae:e3:30:1d:2b:21:ac:c2:cd:29:99:14:11:34:4b:
f5:5a:45:ef:1f:6c:82:71:98:3a:e4:94:83:99:ba:
fe:ae:ad:75:19:57:ae:e1:a9:47:13:56:8a:50:40:
7c:6f:96:a2:2f:02:97:ad:df:35:1c:f4:d8:b8:de:
84:37:15:97:ac:df:0d:22:be:a9:da:c4:8d:cd:22:
61:bd:ec:64:ee:74:00:25:75:f3:f7:d6:14:9f:a7:
f8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:68:7F:35:1F:44:78:BD:74:C9:9E:4C:9C:3D:91:95:79:7B:C8:60
X509v3 Authority Key Identifier:
keyid:CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/y2h_NR9EeL10yZ5MnD2RlXl7yGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.130.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:c6:58:90:c6:e2:20:f5:76:fd:d3:4b:8a:4c:3d:b5:e3:32:
d1:cf:15:17:da:73:94:c0:82:70:13:f2:3e:d8:63:67:36:44:
66:3d:e5:0a:6d:69:71:e2:5e:4d:10:83:f4:5f:4c:f2:68:23:
6c:98:37:43:62:8a:7c:e4:2b:eb:0a:29:c2:f4:ff:1a:3d:30:
7a:7c:fb:13:7d:dc:2d:d8:92:bf:ce:8c:90:23:75:b2:6b:bb:
0f:95:91:d1:76:3a:98:45:7b:bb:9a:2c:13:16:1e:c9:54:34:
8e:01:2e:64:37:7a:3b:30:16:a0:b7:bc:b4:58:20:31:35:5c:
58:8e:9a:11:c0:57:3a:43:46:14:a4:eb:04:88:1c:6b:71:88:
79:e0:81:ea:9f:c5:9d:76:1a:aa:56:53:aa:0c:4a:4a:d5:be:
2e:3f:5b:cc:08:84:db:d6:25:1c:d3:5c:78:07:24:c6:99:87:
e6:d3:c0:99:26:29:eb:44:1d:d3:a1:02:e0:77:65:7f:48:15:
ea:38:5f:bb:f4:8d:17:88:51:37:5c:b8:a3:56:28:85:3f:b1:
bf:7c:5b:5e:6c:c3:68:66:e6:1f:f0:a1:aa:e9:92:0e:e8:6f:
2a:58:02:70:02:aa:64:55:c4:4a:7c:13:b7:b5:20:cf:db:06:
41:e5:ed:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvEtAkVgRs1mzBQTeesnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTExNzAyZjQ5M2Q2ZWRlMWI2ZTg3MmJjYWNkY2I4NTQy
ODJiYWQwHhcNMjQwMTAyMTAzMzI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjY4N2YzNTFmNDQ3OGJkNzRjOTllNGM5YzNkOTE5NTc5N2JjODYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ScW6bqiYumtMBU/AUH8jBnRK8aF
BljcaF+ot6qw4vaAoWYjtCgLMsqQwXEheKuVNeHj2gzwjkLPp/eoQBKDSCvNoieZ
+ReG+TH8HnEmLwhyqjTY2vxoalhevC3qwJjPMtC3Hi8P74EHJ2QryYQoAUH/MIgc
WUxpMxO5wxos5ZuclTZBxe1kef1fizathr3o9/hCABv2+Tk7h7dmZLVxycVCeAOu
4zAdKyGsws0pmRQRNEv1WkXvH2yCcZg65JSDmbr+rq11GVeu4alHE1aKUEB8b5ai
LwKXrd81HPTYuN6ENxWXrN8NIr6p2sSNzSJhvexk7nQAJXXz99YUn6f42wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMtofzUfRHi9dMmeTJw9kZV5e8hgMB8GA1UdIwQY
MBaAFM2RFwL0k9bt4bbocrys3LhUKCutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpFWEF2U1QxdTNodHVoeXZLemN1RlFvSzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iNzQyMDctMzg1My00MzVkLWFiZGUt
MjJiNzc4MjE2MmNhLzEveTJoX05SOUVlTDEweVo1TW5EMlJsWGw3eUdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9iNzQyMDctMzg1My00MzVkLWFiZGUtMjJiNzc4MjE2MmNh
LzEvelpFWEF2U1QxdTNodHVoeXZLemN1RlFvSzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+2CMA0G
CSqGSIb3DQEBCwUAA4IBAQBKxliQxuIg9Xb900uKTD214zLRzxUX2nOUwIJwE/I+
2GNnNkRmPeUKbWlx4l5NEIP0X0zyaCNsmDdDYop85CvrCinC9P8aPTB6fPsTfdwt
2JK/zoyQI3Wya7sPlZHRdjqYRXu7miwTFh7JVDSOAS5kN3o7MBagt7y0WCAxNVxY
jpoRwFc6Q0YUpOsEiBxrcYh54IHqn8WddhqqVlOqDEpK1b4uP1vMCITb1iUc01x4
ByTGmYfm08CZJinrRB3ToQLgd2V/SBXqOF+79I0XiFE3XLijViiFP7G/fFtebMNo
ZuYf8KGq6ZIO6G8qWAJwAqpkVcRKfBO3tSDP2wZB5e3z
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:36 2025 by rpki-client