Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/yd1-_8dEEwi47j5ZF_YvL57YxcE.roa
File: yd1-_8dEEwi47j5ZF_YvL57YxcE.roa (raw, json)
Hash identifier: WM+0lIYjL2uj4+8U2x1oxi6+vuGai46rbjIirAdmd1w=
Subject key identifier: C9:DD:7E:FF:C7:44:13:08:B8:EE:3E:59:17:F6:2F:2F:9E:D8:C5:C1
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01866FDE7E9C69F8CD70B00524B13773DC64
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/yd1-_8dEEwi47j5ZF_YvL57YxcE.roa
Signing time: Mon 20 Feb 2023 17:28:17 +0000
ROA not before: Mon 20 Feb 2023 17:28:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 45.149.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:de:7e:9c:69:f8:cd:70:b0:05:24:b1:37:73:dc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Feb 20 17:28:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9dd7effc7441308b8ee3e5917f62f2f9ed8c5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:33:69:7c:9a:72:1e:d1:f7:2f:8e:de:d5:
c1:6c:11:2a:32:8b:bf:09:a1:d9:a0:9d:ec:90:87:
c1:d3:df:12:9f:60:20:15:ee:ed:54:87:a1:1d:95:
39:d1:e5:2c:e4:e0:4b:64:63:99:92:83:41:2b:d5:
cd:aa:58:4f:d2:ae:b1:7e:0c:dc:c3:2d:53:a0:99:
e2:68:65:06:2d:79:84:8e:7d:23:4c:1f:95:f5:11:
b2:02:18:ba:07:6b:bd:81:5d:45:5f:8c:39:6c:a8:
ab:6b:ca:10:92:94:6d:ce:46:09:19:8a:14:c7:93:
63:b3:d4:17:52:33:7f:ca:71:b5:84:9d:61:be:8d:
31:06:ea:60:c8:00:e5:25:e9:a4:42:c6:d7:b5:f3:
ee:ee:28:8f:02:56:26:7d:3c:38:ed:6c:b5:21:30:
43:c8:ac:40:f5:97:06:d9:34:33:58:4d:fb:46:5c:
c7:04:1a:cc:8c:e8:69:81:77:74:bb:8a:f1:25:d7:
82:0e:00:83:b2:d6:9e:67:49:4b:68:eb:ba:7b:60:
aa:32:a1:52:0a:1f:04:34:ce:21:28:cd:88:16:88:
b8:bb:06:4c:08:13:4e:f2:2d:b7:2c:55:d2:92:c3:
4c:1c:4a:48:76:d0:bf:8e:4a:19:83:12:d1:8d:7b:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DD:7E:FF:C7:44:13:08:B8:EE:3E:59:17:F6:2F:2F:9E:D8:C5:C1
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/yd1-_8dEEwi47j5ZF_YvL57YxcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.75.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1c:96:8a:53:71:57:8b:fc:6f:73:c1:c2:78:e9:02:95:a9:
92:af:08:b8:4a:f7:94:59:e2:cf:f2:f9:71:89:eb:02:33:9e:
e2:04:ef:6a:c1:82:bc:53:37:73:8d:58:cd:ce:f2:99:54:39:
f2:34:7c:53:97:fc:bc:a2:00:cf:e3:98:52:e9:39:c9:6a:c9:
20:91:40:3e:0b:94:09:3a:9b:4f:22:99:ab:01:5e:d1:29:86:
95:ed:c2:de:80:a4:a6:8b:81:1e:18:b7:e7:30:f5:f5:cc:2c:
7e:7a:67:01:a9:e0:32:13:06:aa:c8:ca:84:4d:22:61:00:c8:
a5:4a:db:b0:f8:e9:b4:a8:ed:c3:6f:70:fb:63:14:0a:a0:97:
95:54:ea:7c:f6:e9:88:9a:d4:39:e3:e7:3e:96:7f:ee:51:89:
a0:07:3d:4a:69:e2:1d:fd:b5:a9:ba:c0:c8:44:59:2d:a0:49:
f3:86:84:45:97:72:aa:52:a8:2b:ec:77:7d:30:79:ce:ff:b5:
54:5d:5c:d9:32:7f:6e:10:17:d9:0f:30:8b:ea:f8:1d:0b:5f:
8c:8c:b3:6c:91:bb:02:fb:e1:f5:03:e2:0f:c8:29:c5:e2:6c:
be:bc:f7:9e:f2:ef:8c:0c:e7:13:24:21:b2:56:ad:39:a4:e9:
39:cb:e2:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZv3n6cafjNcLAFJLE3c9xkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwMjIwMTcyODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWRkN2VmZmM3NDQxMzA4YjhlZTNlNTkxN2Y2MmYyZjllZDhjNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIEzaXyach7R9y+O3tXBbBEqMou/
CaHZoJ3skIfB098Sn2AgFe7tVIehHZU50eUs5OBLZGOZkoNBK9XNqlhP0q6xfgzc
wy1ToJniaGUGLXmEjn0jTB+V9RGyAhi6B2u9gV1FX4w5bKira8oQkpRtzkYJGYoU
x5Njs9QXUjN/ynG1hJ1hvo0xBupgyADlJemkQsbXtfPu7iiPAlYmfTw47Wy1ITBD
yKxA9ZcG2TQzWE37RlzHBBrMjOhpgXd0u4rxJdeCDgCDstaeZ0lLaOu6e2CqMqFS
Ch8ENM4hKM2IFoi4uwZMCBNO8i23LFXSksNMHEpIdtC/jkoZgxLRjXsh/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMndfv/HRBMIuO4+WRf2Ly+e2MXBMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEveWQxLV84ZEVFd2k0N2o1WkZfWXZMNTdZeGNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZVLMA0G
CSqGSIb3DQEBCwUAA4IBAQAEHJaKU3FXi/xvc8HCeOkClamSrwi4SveUWeLP8vlx
iesCM57iBO9qwYK8UzdzjVjNzvKZVDnyNHxTl/y8ogDP45hS6TnJaskgkUA+C5QJ
OptPIpmrAV7RKYaV7cLegKSmi4EeGLfnMPX1zCx+emcBqeAyEwaqyMqETSJhAMil
Stuw+Om0qO3Db3D7YxQKoJeVVOp89umImtQ54+c+ln/uUYmgBz1KaeId/bWpusDI
RFktoEnzhoRFl3KqUqgr7Hd9MHnO/7VUXVzZMn9uEBfZDzCL6vgdC1+MjLNskbsC
++H1A+IPyCnF4my+vPee8u+MDOcTJCGyVq05pOk5y+Ka
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:33 2023 by rpki-client on console-fra.rpki-client.org