Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/yFL3HOKNal6Ys4gorh-oPNs29Sw.roa
File: yFL3HOKNal6Ys4gorh-oPNs29Sw.roa (raw, json)
Hash identifier: cd+uPzsUBr0aKiz2i82IcUXVmA/kQR7Xhpxlh3QSi4Y=
Subject key identifier: C8:52:F7:1C:E2:8D:6A:5E:98:B3:88:28:AE:1F:A8:3C:DB:36:F5:2C
Certificate issuer: /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial: 01856FC2912A2749C161104642B1E7A98CC5
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/yFL3HOKNal6Ys4gorh-oPNs29Sw.roa
Signing time: Sun 01 Jan 2023 23:55:00 +0000
ROA not before: Sun 01 Jan 2023 23:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61094
IP address blocks: 194.56.72.0/23 maxlen: 24
194.56.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 07:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:91:2a:27:49:c1:61:10:46:42:b1:e7:a9:8c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
Validity
Not Before: Jan 1 23:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c852f71ce28d6a5e98b38828ae1fa83cdb36f52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:af:16:f2:ae:97:46:c0:0a:98:82:0e:21:
46:09:15:0c:6f:d1:55:2e:af:55:3e:75:2c:08:94:
f9:ad:1a:2a:14:c9:53:7f:35:80:c1:c0:af:3e:a4:
2d:0c:58:46:f6:f7:0a:46:a5:64:56:f3:4d:21:22:
8e:4a:74:c6:3e:05:27:26:a2:50:9e:b5:93:55:b7:
f2:15:ac:0b:9e:53:64:62:e8:dc:79:6a:aa:29:d2:
13:c5:8a:42:f4:d8:53:cd:78:24:6f:a6:6e:ae:e0:
b5:ed:fd:6d:02:49:d9:d4:62:e1:e1:ae:b5:ce:b1:
e0:ff:ce:e9:f2:8a:da:ee:21:df:5b:de:d5:fd:44:
6d:e5:dd:40:a9:9d:44:c2:ba:c1:b4:1d:1b:e7:dc:
35:84:3b:cd:13:6f:9c:38:ca:ad:38:30:15:f6:01:
01:11:9d:c1:a1:38:5f:14:42:3a:b0:87:e6:09:86:
80:43:f3:cd:83:af:cd:f9:5a:a8:af:27:41:46:75:
dc:4e:1d:bf:c4:10:e8:24:9c:32:8e:57:7a:f6:a9:
00:49:d3:c3:9c:59:43:9f:3f:b6:f3:52:ad:d5:0f:
f3:5f:4e:ef:22:64:e2:74:dc:75:d8:9f:8e:c2:fe:
ff:25:eb:f9:81:05:fc:4d:64:3f:e8:8b:e7:a1:d9:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:52:F7:1C:E2:8D:6A:5E:98:B3:88:28:AE:1F:A8:3C:DB:36:F5:2C
X509v3 Authority Key Identifier:
keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/yFL3HOKNal6Ys4gorh-oPNs29Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.72.0-194.56.74.255
Signature Algorithm: sha256WithRSAEncryption
c1:57:5a:ef:b4:14:10:a9:b4:15:ce:c5:07:fd:23:76:aa:f7:
3b:66:0d:f9:c3:74:b1:bb:a8:23:2f:97:4b:a6:79:b1:68:c0:
97:35:03:c0:1f:b6:bd:b8:1f:90:f0:0a:d6:34:d2:4b:02:a4:
b3:3f:32:45:43:6a:b1:de:7b:bf:45:b1:f0:96:81:4a:46:f5:
ab:64:7b:a9:a9:09:b1:a7:8e:7e:1f:89:7b:71:74:4a:0b:31:
a3:cd:cc:4d:39:6c:18:1e:8f:de:5a:cf:3c:b4:64:ef:e5:3e:
3f:5e:8f:57:e3:70:f7:b5:ea:8c:1a:fe:ec:74:3b:1b:0b:62:
e9:30:da:41:86:0e:53:1a:74:4a:cb:43:08:a1:12:ac:3d:59:
7c:3e:49:d2:1e:27:b7:ca:4a:c5:00:88:28:6b:7a:f8:4a:fd:
27:15:ee:36:ca:0f:4d:46:7c:c3:bd:d5:46:12:60:59:71:20:
56:9e:2c:eb:71:6c:dc:6c:8d:77:a8:ac:c6:b7:2a:34:32:bf:
98:82:e2:88:ce:a6:8c:54:bc:9d:34:dc:14:14:61:e9:4d:7d:
41:0b:7b:ad:a0:da:f7:db:65:48:af:04:c5:a7:79:3e:e5:a9:
68:0a:5c:c6:96:a4:99:af:cb:90:82:ef:3d:e3:4e:29:fd:6d:
91:a5:b6:1a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVvwpEqJ0nBYRBGQrHnqYzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzUyOGM1NDBhNmQ1NzdjMmQxY2MxYTZlZWExNzEyNGIz
OTIzODYwHhcNMjMwMTAxMjM1NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODUyZjcxY2UyOGQ2YTVlOThiMzg4MjhhZTFmYTgzY2RiMzZmNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDavFvKul0bACpiCDiFGCRUMb9FV
Lq9VPnUsCJT5rRoqFMlTfzWAwcCvPqQtDFhG9vcKRqVkVvNNISKOSnTGPgUnJqJQ
nrWTVbfyFawLnlNkYujceWqqKdITxYpC9NhTzXgkb6ZuruC17f1tAknZ1GLh4a61
zrHg/87p8ora7iHfW97V/URt5d1AqZ1EwrrBtB0b59w1hDvNE2+cOMqtODAV9gEB
EZ3BoThfFEI6sIfmCYaAQ/PNg6/N+VqorydBRnXcTh2/xBDoJJwyjld69qkASdPD
nFlDnz+281Kt1Q/zX07vImTidNx12J+Owv7/Jev5gQX8TWQ/6IvnodlhWwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMhS9xzijWpemLOIKK4fqDzbNvUsMB8GA1UdIwQY
MBaAFEY1KMVAptV3wtHMGm7qFxJLOSOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpVb3hVQ20xWGZDMGN3YWJ1b1hFa3M1STRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jOTYyOTEtNWVmYi00MWIzLWJjZmIt
OTJiMGZkNWQ3NjQ0LzEveUZMM0hPS05hbDZZczRnb3JoLW9QTnMyOVN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jOTYyOTEtNWVmYi00MWIzLWJjZmItOTJiMGZkNWQ3NjQ0
LzEvUmpVb3hVQ20xWGZDMGN3YWJ1b1hFa3M1STRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPCOEgD
BADCOEowDQYJKoZIhvcNAQELBQADggEBAMFXWu+0FBCptBXOxQf9I3aq9ztmDfnD
dLG7qCMvl0umebFowJc1A8Aftr24H5DwCtY00ksCpLM/MkVDarHee79FsfCWgUpG
9atke6mpCbGnjn4fiXtxdEoLMaPNzE05bBgej95azzy0ZO/lPj9ej1fjcPe16owa
/ux0OxsLYukw2kGGDlMadErLQwihEqw9WXw+SdIeJ7fKSsUAiChrevhK/ScV7jbK
D01GfMO91UYSYFlxIFaeLOtxbNxsjXeorMa3KjQyv5iC4ojOpoxUvJ003BQUYelN
fUELe62g2vfbZUivBMWneT7lqWgKXMaWpJmvy5CC7z3jTin9bZGltho=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-fra.rpki-client.org