Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/2GYP-1AX_0oAv0KG7meXB2IaZR8.roa
File: 2GYP-1AX_0oAv0KG7meXB2IaZR8.roa (raw, json)
Hash identifier: fiq8ah8Z1cmguI1pDToxTeAe0C97CZUnHzREGrwVR04=
Subject key identifier: D8:66:0F:FB:50:17:FF:4A:00:BF:42:86:EE:67:97:07:62:1A:65:1F
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 01856E942D85F420894D2E824462C5425704
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/2GYP-1AX_0oAv0KG7meXB2IaZR8.roa
Signing time: Sun 01 Jan 2023 18:24:42 +0000
ROA not before: Sun 01 Jan 2023 18:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201931
IP address blocks: 185.217.232.0/23 maxlen: 23
2a07:6882::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:94:2d:85:f4:20:89:4d:2e:82:44:62:c5:42:57:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 1 18:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8660ffb5017ff4a00bf4286ee679707621a651f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:d4:df:5b:e4:40:24:20:6d:fb:c9:7f:d1:
59:fa:3c:4b:25:a9:ef:ca:f3:7a:b1:9f:08:e3:b7:
35:56:c0:df:33:97:5f:78:f4:a4:b5:b5:ce:0f:ed:
ce:35:3f:aa:24:ed:8f:d9:34:b1:bd:8c:7a:47:fd:
44:52:c7:d8:88:08:4c:00:6e:37:ba:46:5c:86:02:
0d:5e:7a:e4:e2:98:f2:12:00:d2:8b:26:fd:45:0c:
36:77:7f:35:e6:21:c8:05:2f:43:1a:d5:a7:cf:d3:
5f:64:6f:37:8c:be:a6:38:38:60:29:f7:7f:76:cc:
4a:cb:22:25:3a:82:c7:cb:91:94:db:32:44:cc:66:
e6:ad:8d:c2:57:3b:08:74:63:1b:37:a4:c8:38:78:
ee:3d:6a:ca:51:7c:c1:7f:d1:81:69:7a:fd:e5:bb:
dc:f2:cf:0c:6b:52:62:8f:8c:68:dc:2a:12:fa:ea:
4d:b7:4c:19:49:73:4b:5e:4c:f3:96:d4:29:29:26:
3f:fc:71:95:b7:c3:0a:21:72:83:95:b4:d2:d3:90:
e3:ce:89:66:a3:d3:36:d5:e7:76:f5:31:4e:05:d5:
53:db:34:00:ef:19:7d:a9:3a:73:86:ff:43:76:c8:
02:cc:a1:2d:8d:1d:ab:23:41:8e:75:b4:22:fe:7e:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:66:0F:FB:50:17:FF:4A:00:BF:42:86:EE:67:97:07:62:1A:65:1F
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/2GYP-1AX_0oAv0KG7meXB2IaZR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.232.0/23
IPv6:
2a07:6882::/32
Signature Algorithm: sha256WithRSAEncryption
91:33:2d:a1:f7:34:b0:7e:6e:46:b6:a4:f2:15:5b:0f:12:10:
a0:31:07:97:37:fe:5f:b6:9e:99:ea:03:cd:49:7d:33:7d:c5:
f5:31:52:cb:b7:95:0b:60:9a:53:ee:0c:07:70:19:3d:33:e8:
3e:e2:cc:6b:99:ce:87:40:aa:6b:ae:17:f2:89:2a:1f:90:2a:
d6:62:e3:95:e0:51:63:38:c6:7a:c7:ab:77:08:22:52:ea:0f:
6c:3e:45:c9:03:f4:d8:4b:02:82:ca:02:80:40:c0:bf:2c:b1:
57:08:bb:d6:9a:b4:ac:19:96:5d:0a:ab:4d:65:62:93:3b:0c:
a9:3a:d8:7e:e9:ec:85:89:66:54:a5:e7:63:50:48:f6:f2:7c:
2d:b7:5c:92:f4:f6:3b:3c:19:60:fe:b2:64:49:3c:de:9b:f5:
10:ce:09:ed:17:c2:fb:a9:80:d3:bc:86:b3:84:a7:96:4e:b0:
87:6f:ef:c6:98:fc:bb:a9:ba:b0:dd:d6:29:71:19:c1:f4:7f:
18:d9:98:b5:b4:eb:9d:28:29:f7:a8:75:cd:74:32:80:1e:95:
89:5b:77:75:69:62:36:ef:a1:b9:22:d6:5f:83:f8:e2:0d:4d:
0a:3f:40:c1:b4:28:9e:a1:ca:bf:5b:5c:4e:36:dc:78:a2:27:
82:3b:19:e2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVulC2F9CCJTS6CRGLFQlcEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm
ZGE1MjAwHhcNMjMwMTAxMTgyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODY2MGZmYjUwMTdmZjRhMDBiZjQyODZlZTY3OTcwNzYyMWE2NTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3TU31vkQCQgbfvJf9FZ+jxLJanv
yvN6sZ8I47c1VsDfM5dfePSktbXOD+3ONT+qJO2P2TSxvYx6R/1EUsfYiAhMAG43
ukZchgINXnrk4pjyEgDSiyb9RQw2d3815iHIBS9DGtWnz9NfZG83jL6mODhgKfd/
dsxKyyIlOoLHy5GU2zJEzGbmrY3CVzsIdGMbN6TIOHjuPWrKUXzBf9GBaXr95bvc
8s8Ma1Jij4xo3CoS+upNt0wZSXNLXkzzltQpKSY//HGVt8MKIXKDlbTS05Djzolm
o9M21ed29TFOBdVT2zQA7xl9qTpzhv9DdsgCzKEtjR2rI0GOdbQi/n5q0QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNhmD/tQF/9KAL9Chu5nlwdiGmUfMB8GA1UdIwQY
MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt
NDM4YWNiNzJmYzViLzEvMkdZUC0xQVhfMG9BdjBLRzdtZVhCMklhWlI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi
LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBudnoMA0E
AgACMAcDBQAqB2iCMA0GCSqGSIb3DQEBCwUAA4IBAQCRMy2h9zSwfm5GtqTyFVsP
EhCgMQeXN/5ftp6Z6gPNSX0zfcX1MVLLt5ULYJpT7gwHcBk9M+g+4sxrmc6HQKpr
rhfyiSofkCrWYuOV4FFjOMZ6x6t3CCJS6g9sPkXJA/TYSwKCygKAQMC/LLFXCLvW
mrSsGZZdCqtNZWKTOwypOth+6eyFiWZUpedjUEj28nwtt1yS9PY7PBlg/rJkSTze
m/UQzgntF8L7qYDTvIazhKeWTrCHb+/GmPy7qbqw3dYpcRnB9H8Y2Zi1tOudKCn3
qHXNdDKAHpWJW3d1aWI276G5ItZfg/jiDU0KP0DBtCieocq/W1xONtx4oieCOxni
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:34 2024 by rpki-client on console-ams.rpki-client.org