Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/YMRjwcZY28z5WkENQ4uYS9_P48I.roa
File: YMRjwcZY28z5WkENQ4uYS9_P48I.roa (raw, json)
Hash identifier: uROBnLx2vw/TJ1E2XPm0/f/sbYMg+BwQJ8r+xL8WM38=
Subject key identifier: 60:C4:63:C1:C6:58:DB:CC:F9:5A:41:0D:43:8B:98:4B:DF:CF:E3:C2
Certificate issuer: /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial: 018570E7433EF0094F1975BFA10788AE26C6
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/YMRjwcZY28z5WkENQ4uYS9_P48I.roa
Signing time: Mon 02 Jan 2023 05:14:42 +0000
ROA not before: Mon 02 Jan 2023 05:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60405
IP address blocks: 37.156.69.0/24 maxlen: 24
37.156.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:43:3e:f0:09:4f:19:75:bf:a1:07:88:ae:26:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Validity
Not Before: Jan 2 05:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60c463c1c658dbccf95a410d438b984bdfcfe3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c3:14:11:68:b8:bf:14:f9:07:1b:f8:5e:61:
ce:d2:48:28:67:a7:bd:8d:b4:b5:59:68:a7:77:00:
02:e0:31:19:ae:c5:5f:22:34:cb:db:5c:20:0e:aa:
89:c3:9e:3e:e2:41:9e:f3:28:a4:eb:4c:90:c4:5a:
e5:bb:fb:80:e0:34:13:55:cf:7d:ca:92:98:ff:57:
0d:d1:85:ad:df:56:a6:ce:c4:1b:64:ed:d9:34:44:
e7:8e:f1:d0:61:d3:2a:09:8a:f8:83:7b:73:89:af:
23:1f:27:06:45:84:4b:6e:b4:cd:71:fc:6a:cf:de:
97:dc:d0:ed:e5:4e:0e:85:46:1c:da:e0:b8:c5:61:
b4:d8:8b:87:a6:a0:cc:27:a1:fc:ca:d6:f5:a0:71:
04:e1:0f:ca:18:be:a6:72:5c:ff:3a:3a:1a:fd:33:
96:6b:c8:ac:54:5a:da:b4:37:d2:70:85:b8:3a:cd:
51:ee:f4:93:1a:04:e7:c8:45:3d:fe:b2:91:a9:15:
8b:35:c5:ca:2e:8e:e7:f3:7d:82:03:15:82:9b:9c:
6b:f8:34:37:19:55:0b:30:f8:bc:f1:47:33:22:73:
8f:0c:e5:8a:e8:fd:c5:ba:4d:6f:b8:5d:4a:25:81:
59:b0:b2:3e:7e:25:94:94:40:f9:66:ea:f6:19:0b:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C4:63:C1:C6:58:DB:CC:F9:5A:41:0D:43:8B:98:4B:DF:CF:E3:C2
X509v3 Authority Key Identifier:
keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/YMRjwcZY28z5WkENQ4uYS9_P48I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.69.0-37.156.70.255
Signature Algorithm: sha256WithRSAEncryption
53:eb:8a:0d:73:ad:fc:f7:9b:cf:1d:34:41:70:ab:a3:d5:04:
9d:ad:a6:5c:1b:11:5c:b9:f3:d7:48:b4:ef:2a:07:dc:a4:e7:
c3:7d:38:0a:ab:4f:a4:7b:37:8d:b7:be:19:2a:4b:e3:f8:76:
0c:9d:03:38:b2:ba:2f:79:c9:5a:d2:4a:16:76:f9:7d:92:c4:
f3:36:86:bb:f7:c2:82:9d:79:47:9a:73:f0:42:ad:e5:d6:16:
4f:7f:04:9f:8d:3e:b7:47:91:81:a2:31:90:ad:58:b1:c3:f4:
d9:d3:65:fa:53:ff:f1:37:ab:5f:c7:ec:b1:de:34:9b:24:45:
5f:f6:f8:5e:60:7f:31:12:5f:32:a1:8c:8b:16:72:05:5c:03:
45:01:76:85:6b:26:cf:d1:ad:19:60:30:0a:9e:38:48:fc:46:
12:e9:ea:54:14:0d:5c:24:f8:6b:72:b7:b2:35:f0:a7:b0:65:
5a:41:c7:0a:90:0b:5b:6b:b4:f0:3b:be:22:2a:b9:ca:ce:bf:
86:21:79:3a:b0:c9:e3:5a:5b:fa:7e:8b:8c:7d:e7:69:de:b7:
d0:c9:67:fa:a8:a1:b5:2b:83:91:f3:fc:f3:e7:50:fb:c0:46:
6d:73:06:98:12:1d:89:fe:b6:53:87:69:52:0d:40:01:f9:9d:
fb:d5:1f:6d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVw50M+8AlPGXW/oQeIribGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YmZjNDUxZmM0ZjI0MTFhZGRkMDBhOWZiYjE3MzQ2YWQ2
ZTg5OTYwHhcNMjMwMTAyMDUxNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGM0NjNjMWM2NThkYmNjZjk1YTQxMGQ0MzhiOTg0YmRmY2ZlM2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8MUEWi4vxT5Bxv4XmHO0kgoZ6e9
jbS1WWindwAC4DEZrsVfIjTL21wgDqqJw54+4kGe8yik60yQxFrlu/uA4DQTVc99
ypKY/1cN0YWt31amzsQbZO3ZNETnjvHQYdMqCYr4g3tzia8jHycGRYRLbrTNcfxq
z96X3NDt5U4OhUYc2uC4xWG02IuHpqDMJ6H8ytb1oHEE4Q/KGL6mclz/Ojoa/TOW
a8isVFratDfScIW4Os1R7vSTGgTnyEU9/rKRqRWLNcXKLo7n832CAxWCm5xr+DQ3
GVULMPi88UczInOPDOWK6P3Fuk1vuF1KJYFZsLI+fiWUlED5Zur2GQsNdwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGDEY8HGWNvM+VpBDUOLmEvfz+PCMB8GA1UdIwQY
MBaAFIS/xFH8TyQRrd0Aqfuxc0atbomWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYt
ZjY2MzE3OTc3OTY4LzEvWU1SandjWlkyOHo1V2tFTlE0dVlTOV9QNDhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYtZjY2MzE3OTc3OTY4
LzEvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAlnEUD
BAAlnEYwDQYJKoZIhvcNAQELBQADggEBAFPrig1zrfz3m88dNEFwq6PVBJ2tplwb
EVy589dItO8qB9yk58N9OAqrT6R7N423vhkqS+P4dgydAziyui95yVrSShZ2+X2S
xPM2hrv3woKdeUeac/BCreXWFk9/BJ+NPrdHkYGiMZCtWLHD9NnTZfpT//E3q1/H
7LHeNJskRV/2+F5gfzESXzKhjIsWcgVcA0UBdoVrJs/RrRlgMAqeOEj8RhLp6lQU
DVwk+Gtyt7I18KewZVpBxwqQC1trtPA7viIqucrOv4YheTqwyeNaW/p+i4x952ne
t9DJZ/qoobUrg5Hz/PPnUPvARm1zBpgSHYn+tlOHaVINQAH5nfvVH20=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-fra.rpki-client.org