Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/YDUJ1TTqjF3XwJKAsLQsPtZwmHg.roa
File: YDUJ1TTqjF3XwJKAsLQsPtZwmHg.roa (raw, json)
Hash identifier: 5vzx0qY9b9fPhdlugS6DBMOvCrqCd4l6tMFJscrf2OU=
Subject key identifier: 60:35:09:D5:34:EA:8C:5D:D7:C0:92:80:B0:B4:2C:3E:D6:70:98:78
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 01856C6F1636413BFBF7E2489F921CFEC07C
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/YDUJ1TTqjF3XwJKAsLQsPtZwmHg.roa
Signing time: Sun 01 Jan 2023 08:24:57 +0000
ROA not before: Sun 01 Jan 2023 08:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199248
IP address blocks: 5.56.44.0/24 maxlen: 24
5.56.40.0/24 maxlen: 24
5.56.43.0/24 maxlen: 24
5.56.41.0/24 maxlen: 24
5.56.47.0/24 maxlen: 24
5.56.46.0/24 maxlen: 24
5.56.45.0/24 maxlen: 24
2a01:46c0::/33 maxlen: 33
2a01:46c0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:16:36:41:3b:fb:f7:e2:48:9f:92:1c:fe:c0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: Jan 1 08:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=603509d534ea8c5dd7c09280b0b42c3ed6709878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7e:69:dc:7c:db:db:1c:5b:fe:6a:f4:f0:29:
bf:05:28:4e:96:18:1e:61:e9:34:d4:5f:ac:cb:4b:
a4:d2:fe:21:a3:17:b1:9c:47:58:31:fc:1d:8b:50:
bf:02:d7:d5:23:ad:0f:6f:f3:bf:95:4c:25:38:b4:
e9:c9:27:bd:19:fe:dd:89:c2:b1:7c:fe:c4:0e:86:
3c:f9:9e:28:1a:93:40:79:13:cf:e6:ce:50:f1:4e:
16:a8:d5:86:58:49:cf:4c:c0:b6:14:2e:bc:8d:cd:
da:5f:e5:03:ca:ec:d2:c6:b6:0e:20:bc:da:d6:75:
4f:a4:78:a3:b0:ea:5d:c5:9d:9f:38:91:35:95:6b:
b5:17:4d:90:3c:65:cd:ef:a7:39:d4:ec:9e:ab:88:
85:e7:51:5a:8e:4b:37:ed:d6:10:55:8b:97:88:87:
78:bc:33:f8:74:59:4f:3d:0d:31:2f:ec:db:2a:ba:
49:fe:43:07:65:ae:65:62:33:f5:3b:5a:55:49:8c:
a3:a3:df:67:83:29:9c:61:36:83:d4:3b:7d:e7:0e:
51:6a:d0:68:95:a2:33:15:64:39:82:00:10:d2:8f:
45:ec:ef:60:8e:e9:81:16:c1:c4:a8:d5:c8:52:30:
58:c2:79:1a:3e:db:8c:c6:bd:12:31:43:d0:ba:e1:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:35:09:D5:34:EA:8C:5D:D7:C0:92:80:B0:B4:2C:3E:D6:70:98:78
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/YDUJ1TTqjF3XwJKAsLQsPtZwmHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.40.0/23
5.56.43.0-5.56.47.255
IPv6:
2a01:46c0::/33
Signature Algorithm: sha256WithRSAEncryption
5b:c5:a3:b0:1a:7d:29:06:71:35:84:55:4a:38:03:b4:71:db:
22:de:62:80:c9:d0:7a:2c:1e:73:24:a2:53:c7:9d:fd:dd:3a:
86:79:10:8b:4f:ac:e7:99:b9:14:59:b4:e5:5c:c3:3b:db:37:
ec:66:1d:0f:f9:70:93:d0:dd:77:a1:b7:ab:13:08:03:eb:7e:
82:38:7f:ef:34:8d:5d:3d:53:b3:0f:11:0e:ef:1c:ac:0a:7b:
8f:ec:3c:a9:4d:b1:f0:d5:06:e5:1f:ce:ea:4f:bf:f4:b4:ea:
9b:47:a5:37:94:9a:f3:b9:59:d4:ed:a5:9a:62:c1:27:60:52:
69:4b:c4:96:29:53:b5:2d:c1:1c:25:a6:de:6f:22:68:4d:85:
f3:02:2d:17:aa:92:08:38:a4:d5:66:c7:a2:47:8b:d1:fe:f9:
de:51:e1:e9:f9:61:4d:0e:9c:7b:09:53:ec:1b:f1:23:70:99:
78:c8:a7:53:92:d8:71:d6:2d:e8:4a:ca:4b:2e:94:e0:10:18:
20:50:09:8e:e7:39:be:9b:9d:1e:e1:d4:76:2e:ac:1b:af:14:
ca:a2:e1:70:13:5f:c2:31:cd:48:b8:d8:3b:0d:2f:94:6f:50:
3e:d0:88:ca:35:ab:e6:9d:3d:e5:98:a3:4d:3a:82:94:7c:43:
bc:c3:59:c7
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYVsbxY2QTv79+JIn5Ic/sB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYmJmOWJlZTUzMWYzZGVlMmQwM2JiZjRlNjllZjgyZWVk
Yjk5YWYwHhcNMjMwMTAxMDgyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDM1MDlkNTM0ZWE4YzVkZDdjMDkyODBiMGI0MmMzZWQ2NzA5ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX5p3Hzb2xxb/mr08Cm/BShOlhge
Yek01F+sy0uk0v4hoxexnEdYMfwdi1C/AtfVI60Pb/O/lUwlOLTpySe9Gf7dicKx
fP7EDoY8+Z4oGpNAeRPP5s5Q8U4WqNWGWEnPTMC2FC68jc3aX+UDyuzSxrYOILza
1nVPpHijsOpdxZ2fOJE1lWu1F02QPGXN76c51Oyeq4iF51Fajks37dYQVYuXiId4
vDP4dFlPPQ0xL+zbKrpJ/kMHZa5lYjP1O1pVSYyjo99ngymcYTaD1Dt95w5RatBo
laIzFWQ5ggAQ0o9F7O9gjumBFsHEqNXIUjBYwnkaPtuMxr0SMUPQuuGNFQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGA1CdU06oxd18CSgLC0LD7WcJh4MB8GA1UdIwQY
MBaAFPG7+b7lMfPe4tA7v05p74Lu25mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zZjExMGItZGVkYi00OTBmLTllNjYt
NmZhZDA4YWEyMGVlLzEvWURVSjFUVHFqRjNYd0pLQXNMUXNQdFp3bUhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zZjExMGItZGVkYi00OTBmLTllNjYtNmZhZDA4YWEyMGVl
LzEvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAaBAIAATAUAwQBBTgoMAwD
BAAFOCsDBAQFOCAwDgQCAAIwCAMGByoBRsAAMA0GCSqGSIb3DQEBCwUAA4IBAQBb
xaOwGn0pBnE1hFVKOAO0cdsi3mKAydB6LB5zJKJTx5393TqGeRCLT6znmbkUWbTl
XMM72zfsZh0P+XCT0N13oberEwgD636COH/vNI1dPVOzDxEO7xysCnuP7DypTbHw
1QblH87qT7/0tOqbR6U3lJrzuVnU7aWaYsEnYFJpS8SWKVO1LcEcJabebyJoTYXz
Ai0XqpIIOKTVZseiR4vR/vneUeHp+WFNDpx7CVPsG/EjcJl4yKdTkthx1i3oSspL
LpTgEBggUAmO5zm+m50e4dR2LqwbrxTKouFwE1/CMc1IuNg7DS+Ub1A+0IjKNavm
nT3lmKNNOoKUfEO8w1nH
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:55 2024 by rpki-client on console-fra.rpki-client.org