Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/YGy2VYDtjG07Yq29nFluc9cLODw.roa
File: YGy2VYDtjG07Yq29nFluc9cLODw.roa (raw, json)
Hash identifier: wYoz2aK+C8IKMV4F7WvevaardFRoddSIjk6Ob668srI=
Subject key identifier: 60:6C:B6:55:80:ED:8C:6D:3B:62:AD:BD:9C:59:6E:73:D7:0B:38:3C
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 018CC3489522529BC984ED6C2859CB1C4C92
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/YGy2VYDtjG07Yq29nFluc9cLODw.roa
Signing time: Mon 01 Jan 2024 04:29:23 +0000
ROA not before: Mon 01 Jan 2024 04:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 185.33.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 16:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:95:22:52:9b:c9:84:ed:6c:28:59:cb:1c:4c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Jan 1 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=606cb65580ed8c6d3b62adbd9c596e73d70b383c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:47:eb:18:49:89:23:f4:63:70:46:7b:3e:
62:2c:df:86:6b:ff:6f:7c:01:f8:f8:58:f6:ff:ad:
6f:e7:2e:67:9c:0d:a4:cc:92:ad:e7:4e:92:3f:77:
c0:89:92:37:cd:9d:7e:ce:33:14:81:2f:fd:2e:8c:
8d:d9:ba:27:92:28:b1:25:ee:2d:d0:ec:90:71:cd:
e0:09:36:30:ec:aa:c0:45:a9:6e:3f:4b:b0:1d:f8:
e1:21:00:04:f9:4e:5a:ca:0b:c7:00:24:57:a8:c0:
d3:f7:7c:5e:21:d4:1c:ba:e4:98:d5:52:87:19:b9:
8a:d7:ab:87:54:a2:72:9b:c1:1c:21:8e:d5:5a:0c:
1b:4c:94:45:83:e7:d8:98:40:dd:cd:6d:9f:c0:8e:
19:d7:76:46:04:a3:03:ed:93:bc:d9:9f:18:7c:0c:
3c:9c:62:8d:80:b4:c0:28:3e:ce:19:77:b8:7a:2b:
87:99:5a:5f:85:6a:ec:a8:0f:92:a9:75:8f:c5:21:
1a:45:9b:cd:14:aa:a9:ae:8c:50:6a:77:c8:b3:c0:
be:74:a4:c7:04:9a:2a:29:e0:ca:07:d6:c0:75:56:
c1:ec:de:c5:1d:a9:c7:46:aa:77:ec:98:92:bf:65:
d9:6d:c9:d2:f6:64:17:e4:08:47:bd:ff:57:ea:43:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6C:B6:55:80:ED:8C:6D:3B:62:AD:BD:9C:59:6E:73:D7:0B:38:3C
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/YGy2VYDtjG07Yq29nFluc9cLODw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.26.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e4:9c:82:73:0c:09:52:3c:47:67:a0:99:84:91:61:01:25:
8d:34:19:01:b0:c2:4b:e8:04:7f:a0:32:44:18:de:43:30:ae:
db:4f:59:ec:cf:15:ea:08:69:4e:82:2f:78:f1:7e:6f:ca:16:
9e:36:b9:b2:13:02:c2:b7:ec:ad:df:3b:26:64:f9:af:62:ec:
8e:c5:43:cf:c9:bd:d5:f1:97:99:ca:27:81:d9:58:59:0c:14:
b0:21:4a:32:56:40:6b:93:bc:3b:a0:fa:b5:5e:88:50:db:60:
ae:d4:08:5c:0a:c6:af:b9:2a:f2:70:de:75:e8:4e:80:d4:33:
c5:54:f2:40:f1:c8:63:1a:37:4e:fd:bc:0c:46:84:0b:25:f4:
b1:99:30:72:54:d2:6b:d1:06:2d:51:05:32:70:c7:9f:0e:79:
96:cb:85:cb:e1:bc:53:62:cf:70:c6:ae:e9:6b:da:83:fe:88:
78:13:12:e9:fe:fd:9d:68:8a:fb:b5:20:7d:e9:7f:61:a8:18:
27:74:1f:e4:b1:71:4b:03:68:3c:42:8e:5f:42:72:14:2b:ea:
bf:31:ad:3c:ae:73:27:1e:bb:57:7c:03:aa:88:0e:86:47:42:
f6:40:0c:b4:3d:52:6f:f3:cd:ac:ec:e0:a9:f9:68:58:10:d0:
11:81:ed:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSJUiUpvJhO1sKFnLHEySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWY4Yzk0NDdkNjE0Yjg2MTgyNzYzZDkzMzMyNTBlMmQ5
NDEyZTIwHhcNMjQwMTAxMDQyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDZjYjY1NTgwZWQ4YzZkM2I2MmFkYmQ5YzU5NmU3M2Q3MGIzODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1NH6xhJiSP0Y3BGez5iLN+Ga/9v
fAH4+Fj2/61v5y5nnA2kzJKt506SP3fAiZI3zZ1+zjMUgS/9LoyN2bonkiixJe4t
0OyQcc3gCTYw7KrARaluP0uwHfjhIQAE+U5aygvHACRXqMDT93xeIdQcuuSY1VKH
GbmK16uHVKJym8EcIY7VWgwbTJRFg+fYmEDdzW2fwI4Z13ZGBKMD7ZO82Z8YfAw8
nGKNgLTAKD7OGXe4eiuHmVpfhWrsqA+SqXWPxSEaRZvNFKqproxQanfIs8C+dKTH
BJoqKeDKB9bAdVbB7N7FHanHRqp37JiSv2XZbcnS9mQX5AhHvf9X6kODaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGBstlWA7YxtO2KtvZxZbnPXCzg8MB8GA1UdIwQY
MBaAFAtfjJRH1hS4YYJ2PZMzJQ4tlBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYt
OGE5NWU2Mzc3MzMyLzEvWUd5MlZZRHRqRzA3WXEyOW5GbHVjOWNMT0R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYtOGE5NWU2Mzc3MzMy
LzEvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSEaMA0G
CSqGSIb3DQEBCwUAA4IBAQBc5JyCcwwJUjxHZ6CZhJFhASWNNBkBsMJL6AR/oDJE
GN5DMK7bT1nszxXqCGlOgi948X5vyhaeNrmyEwLCt+yt3zsmZPmvYuyOxUPPyb3V
8ZeZyieB2VhZDBSwIUoyVkBrk7w7oPq1XohQ22Cu1AhcCsavuSrycN516E6A1DPF
VPJA8chjGjdO/bwMRoQLJfSxmTByVNJr0QYtUQUycMefDnmWy4XL4bxTYs9wxq7p
a9qD/oh4ExLp/v2daIr7tSB96X9hqBgndB/ksXFLA2g8Qo5fQnIUK+q/Ma08rnMn
HrtXfAOqiA6GR0L2QAy0PVJv882s7OCp+WhYENARge1D
-----END CERTIFICATE-----
Generated at Fri Feb 2 20:33:32 2024 by rpki-client on console-fra.rpki-client.org