Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ybsUJY-xwpv5PN9JGxmAFV_U17Y.roa
File: ybsUJY-xwpv5PN9JGxmAFV_U17Y.roa (raw, json)
Hash identifier: bCcFhBJ/WR9ofA5vkZyP15QQOfGBXVZP39XDl+/CjIE=
Subject key identifier: C9:BB:14:25:8F:B1:C2:9B:F9:3C:DF:49:1B:19:80:15:5F:D4:D7:B6
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D6B6D66E1C783EE57929E747717FA
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ybsUJY-xwpv5PN9JGxmAFV_U17Y.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210229
IP address blocks: 62.73.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6b:6d:66:e1:c7:83:ee:57:92:9e:74:77:17:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9bb14258fb1c29bf93cdf491b1980155fd4d7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:19:18:7b:90:07:c3:4f:a7:95:7c:18:b7:
5b:4d:81:34:7c:de:61:c7:86:b3:61:25:a1:07:dc:
24:ba:4e:f6:2e:68:03:1b:8a:45:55:91:ce:21:40:
35:04:ad:17:44:44:f0:5b:99:fd:8d:c9:17:27:b2:
f4:05:2b:3e:4c:f5:53:4d:29:b1:bc:2b:c2:20:03:
4f:f7:66:7b:2c:b2:74:fe:e7:d2:3e:75:30:95:b0:
c7:cf:de:88:5d:ec:e7:c7:82:22:2f:4d:ec:10:6f:
3c:a2:12:42:d2:ba:62:63:6e:ee:a3:e0:53:92:d5:
70:74:00:40:46:62:25:5a:67:fd:5c:e8:02:6d:3f:
65:92:45:07:5a:f1:44:b0:94:1b:2c:39:d0:af:99:
ed:f9:8d:73:83:b6:32:a6:a7:1f:9f:e3:e1:c6:aa:
b8:df:ce:de:b5:7b:27:07:e6:f0:14:8a:8c:31:01:
83:b0:a5:d8:b3:5d:eb:7c:4e:f9:00:43:f7:63:70:
42:91:7e:91:16:43:e0:dc:11:aa:ef:05:b0:7c:b1:
63:85:75:76:5a:37:fc:31:24:9c:56:ca:ce:6d:4f:
66:f0:d2:fa:ad:13:56:4c:52:98:32:ee:b3:5f:1d:
12:a7:b4:c8:11:af:8e:c4:6f:74:97:43:a8:b0:1b:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BB:14:25:8F:B1:C2:9B:F9:3C:DF:49:1B:19:80:15:5F:D4:D7:B6
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ybsUJY-xwpv5PN9JGxmAFV_U17Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.73.119.0/24
Signature Algorithm: sha256WithRSAEncryption
97:7c:8d:33:b5:ab:2d:26:29:ac:1f:04:be:69:b2:d5:70:7a:
9e:de:81:3a:d0:63:0b:98:65:29:20:17:9b:c6:5f:d3:49:dc:
9f:a2:02:be:49:16:a2:d6:61:fa:ea:27:37:a1:9e:46:2e:64:
82:15:2f:6b:05:09:bf:5a:ae:96:3f:c0:8e:90:66:a8:da:10:
a9:25:75:7f:c1:8a:98:9e:24:07:66:36:8b:c3:60:2f:57:0d:
90:c4:7a:b0:6a:12:ba:9a:a6:df:e8:cc:e1:df:e3:ab:4b:f5:
5b:a1:a2:9c:a6:3c:d5:90:12:f1:1c:e6:b0:17:6f:ec:5d:20:
33:ad:ad:7c:78:53:dd:d8:91:48:58:7a:00:04:05:ac:47:36:
f1:c4:3c:94:b7:c7:7b:74:de:e0:d7:20:9f:0a:0c:2d:87:83:
b3:20:48:bc:ed:b4:42:fa:cd:b2:6e:d3:d9:20:2d:08:b0:ee:
12:18:76:1d:9c:1f:7a:e0:17:cb:31:2b:91:9b:45:95:57:de:
59:82:3a:c5:2c:38:9f:b6:53:64:fb:06:a1:fb:5d:fc:ee:4f:
b3:6f:7d:57:de:a5:b1:7e:7e:63:80:dd:07:7a:88:0a:f3:1b:
76:dc:38:c0:77:08:15:1f:e5:0a:df:23:9b:bc:81:a1:7f:43:
02:02:4e:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbWttZuHHg+5Xkp50dxf6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjQwMTAxMDAyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWJiMTQyNThmYjFjMjliZjkzY2RmNDkxYjE5ODAxNTVmZDRkN2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/4ZGHuQB8NPp5V8GLdbTYE0fN5h
x4azYSWhB9wkuk72LmgDG4pFVZHOIUA1BK0XRETwW5n9jckXJ7L0BSs+TPVTTSmx
vCvCIANP92Z7LLJ0/ufSPnUwlbDHz96IXeznx4IiL03sEG88ohJC0rpiY27uo+BT
ktVwdABARmIlWmf9XOgCbT9lkkUHWvFEsJQbLDnQr5nt+Y1zg7Yypqcfn+Phxqq4
387etXsnB+bwFIqMMQGDsKXYs13rfE75AEP3Y3BCkX6RFkPg3BGq7wWwfLFjhXV2
Wjf8MSScVsrObU9m8NL6rRNWTFKYMu6zXx0Sp7TIEa+OxG90l0OosBteOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMm7FCWPscKb+TzfSRsZgBVf1Ne2MB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEveWJzVUpZLXh3cHY1UE45Skd4bUFGVl9VMTdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkl3MA0G
CSqGSIb3DQEBCwUAA4IBAQCXfI0ztastJimsHwS+abLVcHqe3oE60GMLmGUpIBeb
xl/TSdyfogK+SRai1mH66ic3oZ5GLmSCFS9rBQm/Wq6WP8COkGao2hCpJXV/wYqY
niQHZjaLw2AvVw2QxHqwahK6mqbf6Mzh3+OrS/VboaKcpjzVkBLxHOawF2/sXSAz
ra18eFPd2JFIWHoABAWsRzbxxDyUt8d7dN7g1yCfCgwth4OzIEi87bRC+s2ybtPZ
IC0IsO4SGHYdnB964BfLMSuRm0WVV95ZgjrFLDiftlNk+wah+1387k+zb31X3qWx
fn5jgN0HeogK8xt23DjAdwgVH+UK3yObvIGhf0MCAk7L
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:30 2025 by rpki-client