Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/yiotGYdyXDELDqyxrH54QsvATsU.roa
File: yiotGYdyXDELDqyxrH54QsvATsU.roa (raw, json)
Hash identifier: aSIvukKDdnK1VbJH4eev6Fy51ICMpy33BmaMBN9oyEY=
Subject key identifier: CA:2A:2D:19:87:72:5C:31:0B:0E:AC:B1:AC:7E:78:42:CB:C0:4E:C5
Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial: 018BB8D129214CAAB195195EAFF5D693ACDD
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/yiotGYdyXDELDqyxrH54QsvATsU.roa
Signing time: Fri 10 Nov 2023 10:39:57 +0000
ROA not before: Fri 10 Nov 2023 10:39:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39816
IP address blocks: 84.38.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:d1:29:21:4c:aa:b1:95:19:5e:af:f5:d6:93:ac:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Validity
Not Before: Nov 10 10:39:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca2a2d1987725c310b0eacb1ac7e7842cbc04ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c4:d8:ff:3a:f2:bd:01:86:50:e6:c7:2c:92:
c0:5a:db:f4:55:dc:44:16:95:57:c1:9b:7e:58:ce:
00:81:29:e4:d0:2f:6d:c7:35:1f:c4:56:90:d0:f6:
57:74:12:3a:99:7b:51:da:44:14:7a:2a:1e:ea:0d:
09:75:1d:d0:8c:34:34:c4:d8:ad:ea:f0:c0:e8:c1:
3a:d8:3c:70:4c:8d:b5:fb:0f:92:ee:be:ce:46:bd:
cd:69:75:93:9d:b4:23:82:48:44:d9:3d:c5:09:f6:
88:ae:49:38:eb:28:1d:7c:34:88:b2:a7:d6:c4:95:
6c:5f:50:e2:d3:9e:1c:ff:70:ea:42:69:4a:20:ea:
9a:a8:ed:22:ae:31:85:a7:db:72:81:1f:07:02:0e:
98:cd:87:2c:7d:19:ce:fb:7e:bd:59:07:fa:13:29:
e5:43:b1:12:04:56:82:e3:92:e2:db:95:1a:66:7c:
f2:ef:52:38:8b:8c:87:36:cf:53:73:81:be:89:0c:
c0:2c:3a:da:38:8e:36:03:aa:3b:40:7a:43:d2:77:
5d:a4:7b:9b:60:01:b5:88:bb:b7:93:32:e6:d5:07:
ee:61:03:67:0d:ca:11:b9:b5:8c:b4:07:a3:7a:ca:
21:32:7c:5e:4f:a7:f9:5e:f4:13:70:04:e4:9d:a3:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2A:2D:19:87:72:5C:31:0B:0E:AC:B1:AC:7E:78:42:CB:C0:4E:C5
X509v3 Authority Key Identifier:
keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/yiotGYdyXDELDqyxrH54QsvATsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.16.0/20
Signature Algorithm: sha256WithRSAEncryption
79:6f:d2:1a:43:1e:5b:e6:e8:c6:e3:6c:bc:aa:b5:dd:d8:16:
5c:60:40:80:be:26:70:94:17:3c:11:02:63:65:d4:22:0e:87:
7d:59:37:70:c2:79:94:80:dd:b5:4e:71:9c:0c:5d:b8:bc:ad:
34:68:66:68:96:86:66:dc:cb:18:94:e4:e5:aa:7e:ef:b6:8c:
f9:ce:12:be:72:89:94:cb:9e:25:2a:ae:df:81:08:0b:a8:f1:
84:28:3b:71:dc:8e:42:d5:6b:dd:a8:3e:a7:7d:9f:5c:b8:ac:
bb:71:e3:76:9b:60:97:4f:af:7f:f0:7a:80:6a:41:a7:59:87:
91:da:9f:eb:61:76:58:b7:e9:02:5f:0c:ac:e2:15:23:6d:e6:
a2:2d:92:e8:64:97:60:b4:e8:27:af:db:99:0d:58:9b:3e:9e:
70:c6:0d:ee:6a:ec:b9:7f:87:41:f0:7d:0e:8c:4c:aa:8f:4a:
42:bb:6c:6d:e8:3b:53:c4:25:e7:1e:c1:64:03:eb:ff:46:60:
d4:b7:81:8d:2e:3b:28:97:c2:b8:08:29:53:23:9c:05:20:25:
53:b1:2a:3a:50:21:15:6c:5f:01:f7:70:8c:4d:96:a3:be:7b:
83:15:30:8c:4c:8d:42:a0:7e:f5:d3:78:67:83:f9:c7:25:0f:
f0:66:b8:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYu40SkhTKqxlRler/XWk6zdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ODI0MzA4YmM4M2I0ZWU1NmYxYzBjMWI5ZmJmYzMxMWIw
Y2Q0NGEwHhcNMjMxMTEwMTAzOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTJhMmQxOTg3NzI1YzMxMGIwZWFjYjFhYzdlNzg0MmNiYzA0ZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisTY/zryvQGGUObHLJLAWtv0VdxE
FpVXwZt+WM4AgSnk0C9txzUfxFaQ0PZXdBI6mXtR2kQUeioe6g0JdR3QjDQ0xNit
6vDA6ME62DxwTI21+w+S7r7ORr3NaXWTnbQjgkhE2T3FCfaIrkk46ygdfDSIsqfW
xJVsX1Di054c/3DqQmlKIOqaqO0irjGFp9tygR8HAg6YzYcsfRnO+369WQf6Eynl
Q7ESBFaC45Li25UaZnzy71I4i4yHNs9Tc4G+iQzALDraOI42A6o7QHpD0nddpHub
YAG1iLu3kzLm1QfuYQNnDcoRubWMtAejesohMnxeT6f5XvQTcATknaPb7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMoqLRmHclwxCw6ssax+eELLwE7FMB8GA1UdIwQY
MBaAFKSCQwi8g7TuVvHAwbn7/DEbDNRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1Yzkt
MTk2ZTZmMzc1ZmQ2LzEveWlvdEdZZHlYREVMRHF5eHJINTRRc3ZBVHNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1YzktMTk2ZTZmMzc1ZmQ2
LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEVCYQMA0G
CSqGSIb3DQEBCwUAA4IBAQB5b9IaQx5b5ujG42y8qrXd2BZcYECAviZwlBc8EQJj
ZdQiDod9WTdwwnmUgN21TnGcDF24vK00aGZoloZm3MsYlOTlqn7vtoz5zhK+comU
y54lKq7fgQgLqPGEKDtx3I5C1WvdqD6nfZ9cuKy7ceN2m2CXT69/8HqAakGnWYeR
2p/rYXZYt+kCXwys4hUjbeaiLZLoZJdgtOgnr9uZDVibPp5wxg3uauy5f4dB8H0O
jEyqj0pCu2xt6DtTxCXnHsFkA+v/RmDUt4GNLjsol8K4CClTI5wFICVTsSo6UCEV
bF8B93CMTZajvnuDFTCMTI1CoH7103hng/nHJQ/wZrjN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:21 2024 by rpki-client on console-ams.rpki-client.org