Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/YZMIPraa2JMChRIojBivCO2TLpE.roa
File: YZMIPraa2JMChRIojBivCO2TLpE.roa (raw, json)
Hash identifier: 4H3lRO//ke2E74Y/ga6GrhG1LoLjhydLlAKjdZ/gSpA=
Subject key identifier: 61:93:08:3E:B6:9A:D8:93:02:85:12:28:8C:18:AF:08:ED:93:2E:91
Certificate issuer: /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial: 01856DEF675486E53C8F5E3850FDD72ABFA1
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/YZMIPraa2JMChRIojBivCO2TLpE.roa
Signing time: Sun 01 Jan 2023 15:24:44 +0000
ROA not before: Sun 01 Jan 2023 15:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59795
IP address blocks: 213.184.84.0/24 maxlen: 24
213.184.86.0/24 maxlen: 24
2a09:3a00:3a00::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:67:54:86:e5:3c:8f:5e:38:50:fd:d7:2a:bf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
Validity
Not Before: Jan 1 15:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6193083eb69ad893028512288c18af08ed932e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:0b:c7:b1:76:b2:0d:fb:de:81:cf:d2:80:
cc:66:85:52:2c:6a:21:9a:4a:e5:fc:19:ec:04:3a:
10:a9:fc:39:a2:15:40:db:a0:1e:fb:89:0a:2f:47:
41:fd:18:e0:f7:02:41:17:ee:3b:f7:6d:0d:c0:f4:
5e:8f:ac:26:4e:c5:b8:90:e6:4c:19:3c:78:59:20:
5e:60:59:cc:45:0c:e1:ad:76:5e:12:62:d9:fc:ca:
da:65:d2:c4:33:5e:73:06:e1:9f:a5:6f:a0:f2:08:
2b:e2:26:21:31:9b:7d:a4:51:92:72:96:ad:b1:ba:
4d:ab:31:af:2a:2c:45:99:f4:42:bd:a7:51:c4:53:
52:aa:61:d2:3a:40:2f:f7:ce:44:c6:fc:20:67:ef:
60:90:f8:c4:be:50:6c:11:37:a5:f4:b2:a4:9c:be:
aa:2a:1a:60:f6:eb:4f:16:d1:10:7e:c5:2b:9f:18:
e6:2c:b1:c9:3b:76:b2:17:f2:95:2f:b2:bf:d5:ba:
97:8e:28:41:a3:2c:e1:59:67:55:a3:9b:f2:a8:13:
94:3c:8d:3c:bf:4d:bc:59:6b:b4:65:dd:54:ed:9c:
ae:ce:db:e8:d5:a6:53:0b:24:67:60:87:b5:94:5f:
92:f6:ae:af:a9:6e:63:24:9c:42:e8:95:ea:e9:af:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:93:08:3E:B6:9A:D8:93:02:85:12:28:8C:18:AF:08:ED:93:2E:91
X509v3 Authority Key Identifier:
keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/YZMIPraa2JMChRIojBivCO2TLpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.184.84.0/24
213.184.86.0/24
IPv6:
2a09:3a00:3a00::/40
Signature Algorithm: sha256WithRSAEncryption
8f:aa:fe:6c:22:7a:54:a1:c1:ee:61:2f:06:81:b8:37:5f:ba:
92:52:25:4e:12:da:59:bb:b4:41:0f:90:54:cf:a9:8c:f3:e3:
fa:c5:c7:03:b5:c7:09:33:9d:dd:c6:b5:af:ee:cd:7d:af:d6:
66:62:c4:c1:25:28:0b:a8:26:44:1d:08:1f:90:3a:52:43:e3:
d4:21:65:6e:00:7c:0f:26:ac:2c:d1:62:33:45:50:29:4e:c8:
a2:1d:d9:c0:f1:fa:c7:7a:2e:76:2c:7d:b8:dc:9a:18:6c:52:
c1:c6:ab:e5:45:fb:68:49:a0:2d:48:0b:23:1d:af:31:99:e3:
4e:84:9d:fc:4b:64:7b:8e:21:ae:a7:67:7f:78:99:79:4b:bb:
20:78:84:fb:62:ea:63:31:83:24:be:7b:9c:28:a8:bf:97:70:
80:ab:c6:1d:93:c8:fb:c6:1d:72:b8:00:24:7c:c4:ee:f9:80:
28:64:44:0c:2b:d8:8e:6f:27:04:f0:ed:1c:46:20:08:95:c0:
55:4d:f5:d7:56:bc:34:30:3d:7b:77:ae:f7:e5:a8:4b:c3:cc:
bc:ec:7a:37:f8:1c:01:0e:e2:4e:27:85:b0:a5:d5:c7:3c:8d:
ed:01:70:8a:74:20:ea:fb:c7:c7:20:cb:9e:10:25:c9:4c:46:
7b:69:94:72
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYVt72dUhuU8j144UP3XKr+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MWJhZDk1Mjc2OTQ3YzdiZTUzNmFmNGM4NzBhMzcyMWYw
Yjc3NjEwHhcNMjMwMTAxMTUyNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTkzMDgzZWI2OWFkODkzMDI4NTEyMjg4YzE4YWYwOGVkOTMyZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6ELx7F2sg373oHP0oDMZoVSLGoh
mkrl/BnsBDoQqfw5ohVA26Ae+4kKL0dB/Rjg9wJBF+47920NwPRej6wmTsW4kOZM
GTx4WSBeYFnMRQzhrXZeEmLZ/MraZdLEM15zBuGfpW+g8ggr4iYhMZt9pFGScpat
sbpNqzGvKixFmfRCvadRxFNSqmHSOkAv985ExvwgZ+9gkPjEvlBsETel9LKknL6q
Khpg9utPFtEQfsUrnxjmLLHJO3ayF/KVL7K/1bqXjihBoyzhWWdVo5vyqBOUPI08
v028WWu0Zd1U7Zyuztvo1aZTCyRnYIe1lF+S9q6vqW5jJJxC6JXq6a/1KwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFGGTCD62mtiTAoUSKIwYrwjtky6RMB8GA1UdIwQY
MBaAFGUbrZUnaUfHvlNq9Mhwo3IfC3dhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZGJkNmItMzVjYy00ZjA5LWI5MmUt
MTk4YjZhNjFjZTg1LzEvWVpNSVByYWEySk1DaFJJb2pCaXZDTzJUTHBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xZGJkNmItMzVjYy00ZjA5LWI5MmUtMTk4YjZhNjFjZTg1
LzEvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQA1bhUAwQA
1bhWMA4EAgACMAgDBgAqCToAOjANBgkqhkiG9w0BAQsFAAOCAQEAj6r+bCJ6VKHB
7mEvBoG4N1+6klIlThLaWbu0QQ+QVM+pjPPj+sXHA7XHCTOd3ca1r+7Nfa/WZmLE
wSUoC6gmRB0IH5A6UkPj1CFlbgB8DyasLNFiM0VQKU7Ioh3ZwPH6x3oudix9uNya
GGxSwcar5UX7aEmgLUgLIx2vMZnjToSd/Etke44hrqdnf3iZeUu7IHiE+2LqYzGD
JL57nCiov5dwgKvGHZPI+8YdcrgAJHzE7vmAKGREDCvYjm8nBPDtHEYgCJXAVU31
11a8NDA9e3eu9+WoS8PMvOx6N/gcAQ7iTieFsKXVxzyN7QFwinQg6vvHxyDLnhAl
yUxGe2mUcg==
-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:35 2024 by rpki-client on console-fra.rpki-client.org