Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/yHR0MG_XNklW6zX1Ktcplwe7PH0.roa
File: yHR0MG_XNklW6zX1Ktcplwe7PH0.roa (raw, json)
Hash identifier: Vm7SogoHqywhQ10ABbTr7pQJ9qEvtSJTlw7EyXt0NPA=
Subject key identifier: C8:74:74:30:6F:D7:36:49:56:EB:35:F5:2A:D7:29:97:07:BB:3C:7D
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 0185967DD2C58B04BED81F0518AF4FAE3FBC
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/yHR0MG_XNklW6zX1Ktcplwe7PH0.roa
Signing time: Mon 09 Jan 2023 12:25:06 +0000
ROA not before: Mon 09 Jan 2023 12:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1902
IP address blocks: 145.236.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:7d:d2:c5:8b:04:be:d8:1f:05:18:af:4f:ae:3f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 9 12:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c87474306fd7364956eb35f52ad7299707bb3c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:3d:3c:04:9c:85:d8:b1:b9:3e:9f:4b:90:
b3:55:66:ee:97:91:47:b1:0e:f2:fc:da:be:bb:38:
72:4c:8a:a3:ac:95:00:0f:45:6e:7b:70:0a:11:88:
99:15:98:08:49:c9:02:0d:f7:db:ac:a1:cf:67:15:
e7:cc:0d:75:3b:4c:fd:5f:ae:9c:73:8d:27:1f:cb:
87:01:49:58:b2:98:3d:a8:54:db:1c:e3:4a:1d:cc:
0f:8e:6c:a0:2d:10:64:70:a1:b9:cd:ff:25:02:69:
98:bd:90:9c:19:41:69:0b:64:e9:4f:1a:7f:f4:c3:
e6:0c:82:8a:42:20:f3:12:6a:86:4c:03:68:0b:85:
2d:c7:e8:f4:e7:00:13:5f:ba:f0:c7:3f:eb:23:11:
2a:0b:bb:2d:ed:1a:b8:b7:bf:f4:4a:41:19:94:30:
f2:f4:96:28:7b:1b:3c:dc:68:18:65:a4:77:9b:d4:
40:b4:7c:07:5d:92:f0:bf:d0:fe:c0:af:9e:06:59:
b4:51:a8:6a:50:32:8c:af:ab:2d:35:bb:d8:98:da:
32:b8:59:8f:c3:1c:c9:76:27:db:c9:52:87:69:19:
41:97:03:ab:04:70:8c:1e:50:88:91:0e:81:3d:21:
6a:c9:1a:cb:0a:49:08:0c:01:88:1d:3e:e3:f3:d4:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:74:74:30:6F:D7:36:49:56:EB:35:F5:2A:D7:29:97:07:BB:3C:7D
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/yHR0MG_XNklW6zX1Ktcplwe7PH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.236.24.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d9:65:29:3c:35:7b:e6:aa:6e:f4:64:dd:3b:f7:18:80:8a:
bb:cf:5e:13:ae:c1:c7:97:12:27:8e:7a:1d:51:72:3e:19:5a:
52:58:bf:23:9a:7e:a8:02:35:bf:ee:a0:05:85:c8:9f:0a:f7:
a3:bf:68:de:40:4d:cf:29:de:5a:c5:a2:f0:14:78:1d:d9:c5:
d1:12:fd:d1:89:ba:0b:94:4b:70:44:ce:3b:78:45:4b:e6:3c:
e7:39:13:e1:97:a5:46:0c:28:39:12:d4:34:27:3e:e2:f0:1a:
f2:24:8f:c8:76:3f:47:9f:81:44:8f:42:8b:c5:5e:a2:0c:01:
f5:39:a8:18:59:ea:98:0e:6d:aa:a7:e4:09:ee:1e:4f:6f:ae:
35:e8:9e:d0:6e:a5:e7:95:40:bc:91:4d:15:47:48:76:d2:12:
f6:b3:4c:0e:08:59:e5:7f:f1:66:a8:61:6e:0d:2b:5e:c5:44:
f9:8d:f6:52:37:a6:23:b6:ea:e5:1a:0d:2f:0e:11:2f:47:bf:
5d:c9:12:5f:ef:16:90:19:14:b0:f6:4f:52:dd:ab:39:20:85:
11:a5:c3:94:8f:6c:c3:59:e0:80:a1:34:81:59:04:a1:af:5b:
08:a5:8a:0f:d7:51:8f:01:5b:ca:d7:70:76:9a:ea:c9:50:78:
04:76:eb:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWWfdLFiwS+2B8FGK9Prj+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjMwMTA5MTIyNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODc0NzQzMDZmZDczNjQ5NTZlYjM1ZjUyYWQ3Mjk5NzA3YmIzYzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwc9PASchdixuT6fS5CzVWbul5FH
sQ7y/Nq+uzhyTIqjrJUAD0Vue3AKEYiZFZgISckCDffbrKHPZxXnzA11O0z9X66c
c40nH8uHAUlYspg9qFTbHONKHcwPjmygLRBkcKG5zf8lAmmYvZCcGUFpC2TpTxp/
9MPmDIKKQiDzEmqGTANoC4Utx+j05wATX7rwxz/rIxEqC7st7Rq4t7/0SkEZlDDy
9JYoexs83GgYZaR3m9RAtHwHXZLwv9D+wK+eBlm0UahqUDKMr6stNbvYmNoyuFmP
wxzJdifbyVKHaRlBlwOrBHCMHlCIkQ6BPSFqyRrLCkkIDAGIHT7j89Td5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMh0dDBv1zZJVus19SrXKZcHuzx9MB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEveUhSME1HX1hOa2xXNnpYMUt0Y3Bsd2U3UEgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkewYMA0G
CSqGSIb3DQEBCwUAA4IBAQB12WUpPDV75qpu9GTdO/cYgIq7z14TrsHHlxInjnod
UXI+GVpSWL8jmn6oAjW/7qAFhcifCvejv2jeQE3PKd5axaLwFHgd2cXREv3RiboL
lEtwRM47eEVL5jznORPhl6VGDCg5EtQ0Jz7i8BryJI/Idj9Hn4FEj0KLxV6iDAH1
OagYWeqYDm2qp+QJ7h5Pb6416J7QbqXnlUC8kU0VR0h20hL2s0wOCFnlf/FmqGFu
DStexUT5jfZSN6YjturlGg0vDhEvR79dyRJf7xaQGRSw9k9S3as5IIURpcOUj2zD
WeCAoTSBWQShr1sIpYoP11GPAVvK13B2murJUHgEdusK
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:51 2024 by rpki-client on console-ams.rpki-client.org