Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Y-PXOpH60PdYnIw9jUxMGW1SyEM.roa
File: Y-PXOpH60PdYnIw9jUxMGW1SyEM.roa (raw, json)
Hash identifier: 02ZlILL9uUiuJayDLSPTMgN2ivjACp9UqwbqI8vr1fQ=
Subject key identifier: 63:E3:D7:3A:91:FA:D0:F7:58:9C:8C:3D:8D:4C:4C:19:6D:52:C8:43
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01856CAF1216744429B7124094C4A97F6CA0
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Y-PXOpH60PdYnIw9jUxMGW1SyEM.roa
Signing time: Sun 01 Jan 2023 09:34:50 +0000
ROA not before: Sun 01 Jan 2023 09:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44094
IP address blocks: 185.250.149.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
2a09:7c47::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:12:16:74:44:29:b7:12:40:94:c4:a9:7f:6c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 1 09:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63e3d73a91fad0f7589c8c3d8d4c4c196d52c843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:60:d8:05:0f:12:ed:f8:3f:50:ad:9f:68:
1e:f0:11:63:82:f4:f1:45:1d:90:0c:48:20:34:c2:
b1:8e:a0:34:8e:8a:c4:24:56:25:d2:11:d4:93:fe:
19:1d:b5:f0:47:8b:8d:ab:0b:f8:c8:a6:66:02:0d:
08:4f:fa:0b:c4:4f:11:10:f5:38:d1:7d:c5:81:6c:
f9:29:bd:08:8c:d8:47:4d:03:0c:03:0e:0c:91:53:
53:c6:2a:8e:78:c2:1a:74:ab:eb:39:b1:8d:6b:db:
a5:e1:12:95:63:dc:67:fa:e0:23:05:ae:44:2e:13:
ae:cf:de:64:f5:6a:00:6d:47:56:95:62:37:0b:d5:
1e:71:50:e5:82:a9:70:1e:ce:24:c1:19:fb:c7:8f:
b6:ec:b3:ad:92:a1:61:43:86:8d:d7:dc:26:38:3a:
53:21:b4:df:89:07:43:ec:a9:8c:52:f4:fd:d4:48:
27:f4:da:88:a9:1c:eb:53:4a:23:70:99:68:3c:28:
79:bd:4a:6d:7d:bd:e1:f1:75:f2:6c:60:30:b0:fa:
d1:fd:d8:41:6e:d1:28:f9:14:53:bd:fd:65:3b:fe:
04:d2:4b:80:de:a7:65:36:db:6e:47:b2:25:c2:61:
5b:52:7e:56:00:36:5c:ae:fa:be:26:d6:f2:e4:ae:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E3:D7:3A:91:FA:D0:F7:58:9C:8C:3D:8D:4C:4C:19:6D:52:C8:43
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Y-PXOpH60PdYnIw9jUxMGW1SyEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.230.0/24
185.250.149.0/24
IPv6:
2a09:7c47::/32
Signature Algorithm: sha256WithRSAEncryption
94:41:3f:58:b0:2e:33:6a:b1:72:54:44:27:bf:42:86:d2:5c:
13:46:d0:76:ca:9a:02:bc:e1:39:f6:7a:9f:84:93:89:44:0f:
77:df:bf:79:70:b8:71:db:f0:ac:b0:0a:2f:a9:48:67:6d:74:
f8:09:94:46:bf:65:a2:a2:65:ad:73:46:5e:e8:0c:d1:d7:12:
b0:d2:3e:80:3f:84:fa:8e:14:73:77:d3:21:42:5f:4a:a8:6c:
fa:f1:92:52:c6:55:9b:9c:22:97:27:e4:33:48:cb:93:cc:b8:
32:fa:88:e5:95:0e:05:e2:bc:9a:8e:51:a0:40:36:c6:5a:21:
db:2f:8f:6a:de:e3:05:c5:d2:34:52:83:c1:55:bb:ba:e0:a9:
36:d7:f4:16:a6:ff:1f:ee:43:cc:a2:fa:d6:c5:7a:78:44:16:
e6:5e:cf:32:a0:af:46:42:d2:47:c2:3a:9d:f8:0e:b7:85:66:
42:dd:a9:f2:69:17:08:3d:56:4b:75:66:7a:3d:6e:be:47:7b:
33:c4:e1:6b:2e:7e:36:9b:de:b8:c9:86:6b:4b:12:d2:20:36:
d2:94:27:e6:46:47:6d:58:12:de:10:37:1f:e6:af:27:e2:e2:
e9:fb:b3:8e:67:33:79:94:42:f7:1b:31:ec:13:28:dc:81:81:
ee:cc:80:96
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVsrxIWdEQptxJAlMSpf2ygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl
YWNkNDAwHhcNMjMwMTAxMDkzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2UzZDczYTkxZmFkMGY3NTg5YzhjM2Q4ZDRjNGMxOTZkNTJjODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTJg2AUPEu34P1Ctn2ge8BFjgvTx
RR2QDEggNMKxjqA0jorEJFYl0hHUk/4ZHbXwR4uNqwv4yKZmAg0IT/oLxE8REPU4
0X3FgWz5Kb0IjNhHTQMMAw4MkVNTxiqOeMIadKvrObGNa9ul4RKVY9xn+uAjBa5E
LhOuz95k9WoAbUdWlWI3C9UecVDlgqlwHs4kwRn7x4+27LOtkqFhQ4aN19wmODpT
IbTfiQdD7KmMUvT91Egn9NqIqRzrU0ojcJloPCh5vUptfb3h8XXybGAwsPrR/dhB
btEo+RRTvf1lO/4E0kuA3qdlNttuR7IlwmFbUn5WADZcrvq+Jtby5K77HQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFGPj1zqR+tD3WJyMPY1MTBltUshDMB8GA1UdIwQY
MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt
MTE5ZWZjYmIyMDIzLzEvWS1QWE9wSDYwUGRZbkl3OWpVeE1HVzFTeUVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz
LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALUPmAwQA
ufqVMA0EAgACMAcDBQAqCXxHMA0GCSqGSIb3DQEBCwUAA4IBAQCUQT9YsC4zarFy
VEQnv0KG0lwTRtB2ypoCvOE59nqfhJOJRA933795cLhx2/CssAovqUhnbXT4CZRG
v2WiomWtc0Ze6AzR1xKw0j6AP4T6jhRzd9MhQl9KqGz68ZJSxlWbnCKXJ+QzSMuT
zLgy+ojllQ4F4ryajlGgQDbGWiHbL49q3uMFxdI0UoPBVbu64Kk21/QWpv8f7kPM
ovrWxXp4RBbmXs8yoK9GQtJHwjqd+A63hWZC3anyaRcIPVZLdWZ6PW6+R3szxOFr
Ln42m964yYZrSxLSIDbSlCfmRkdtWBLeEDcf5q8n4uLp+7OOZzN5lEL3GzHsEyjc
gYHuzICW
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:41 2024 by rpki-client on console-ams.rpki-client.org