Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/yHarXfNonpqTXv0GKHNALQR1SGk.roa
File: yHarXfNonpqTXv0GKHNALQR1SGk.roa (raw, json)
Hash identifier: onuPLRz6R5+Hy60i+8w5MLavD5AUljBeb/4zaKc8awA=
Subject key identifier: C8:76:AB:5D:F3:68:9E:9A:93:5E:FD:06:28:73:40:2D:04:75:48:69
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 018659E740EF0A686E7D3A0CD739540062B0
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/yHarXfNonpqTXv0GKHNALQR1SGk.roa
Signing time: Thu 16 Feb 2023 11:06:12 +0000
ROA not before: Thu 16 Feb 2023 11:06:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 85.28.57.0/24 maxlen: 24
85.28.58.0/24 maxlen: 24
85.28.56.0/24 maxlen: 24
85.28.59.0/24 maxlen: 24
85.28.60.0/24 maxlen: 24
85.28.60.0/22 maxlen: 22
109.238.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:e7:40:ef:0a:68:6e:7d:3a:0c:d7:39:54:00:62:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Feb 16 11:06:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c876ab5df3689e9a935efd062873402d04754869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:8a:19:83:80:f5:24:fd:f6:09:54:ec:04:
a9:3b:44:81:ef:da:06:01:3a:8e:3f:fa:92:4e:8d:
d5:dd:4f:c8:bb:71:a1:94:56:0e:cb:47:ac:e0:39:
fe:89:87:67:ac:2f:95:19:41:ca:ce:33:d1:e6:10:
eb:ea:f5:7c:49:33:96:2d:70:4a:b9:05:53:f2:ca:
54:71:16:c3:d9:90:d2:aa:2a:25:f2:9b:fd:7e:af:
a4:c3:b0:12:63:55:22:a8:e1:78:ee:c1:51:4b:6e:
61:2e:53:d1:9f:98:7f:c7:12:03:ba:bd:b3:81:76:
4c:48:79:ef:29:40:c0:83:f0:9f:9b:6a:b7:1a:ee:
b2:ef:46:8b:d7:b5:2e:4f:3c:4c:97:2a:b5:f2:49:
4c:75:ab:ef:57:21:9b:92:34:39:ce:7f:0b:24:b9:
d7:05:27:5d:a4:33:00:e2:20:cf:38:0b:47:fa:fa:
68:6e:c3:27:39:2c:84:6e:18:77:9b:be:86:a7:5d:
4e:86:65:0e:a9:4f:91:78:26:43:b0:51:31:bd:f6:
20:2e:97:72:f1:8e:e4:5f:12:cd:b3:cb:ef:17:95:
04:19:d8:0c:91:d0:3a:e1:b7:94:2e:7e:16:52:a2:
c5:f4:4a:cf:fc:6e:f5:35:c7:31:d9:47:dc:33:b3:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:76:AB:5D:F3:68:9E:9A:93:5E:FD:06:28:73:40:2D:04:75:48:69
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/yHarXfNonpqTXv0GKHNALQR1SGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.56.0/21
109.238.205.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d0:f8:93:d3:2a:f0:8d:dd:26:a7:88:c2:e6:45:79:c8:77:
c1:82:97:84:62:a4:67:2c:b1:e8:3d:17:ba:44:fc:ee:db:db:
5e:f9:90:a0:57:ef:8c:39:b2:5d:58:7a:a7:4d:9e:6c:48:04:
4e:13:99:c0:cf:38:44:95:3f:38:e0:5d:eb:c0:cb:4b:3d:cc:
e2:96:34:76:50:b0:fb:2f:43:52:8b:01:b3:3c:99:95:f0:b7:
d8:12:f5:34:0a:f5:d6:4b:ee:8f:9a:41:65:94:aa:58:4e:6b:
cf:5a:51:94:52:b7:ab:42:ca:72:84:96:de:b4:d9:dd:6c:a3:
33:f0:54:bc:8a:61:a6:0f:16:15:1c:26:8c:2f:ea:7f:d5:c9:
55:ad:83:14:02:7b:c1:7f:59:3f:b0:eb:4d:3a:5d:78:44:89:
8c:f6:06:11:54:bb:b2:c1:7e:1d:0d:86:50:e2:bd:57:58:fd:
d2:3c:21:3c:12:88:b5:c3:63:17:4a:ad:9a:4c:2f:7d:77:eb:
4a:a8:68:e2:f7:21:ce:6b:c9:74:23:50:66:65:55:3c:2c:00:
c9:24:d2:9f:08:76:6c:2c:d2:c4:c6:90:5b:1e:60:16:02:5f:
79:99:0e:c7:d5:2a:34:74:48:4d:24:ea:3b:24:10:2b:ef:ce:
a8:88:a2:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZZ50DvCmhufToM1zlUAGKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2
NTg4MWEwHhcNMjMwMjE2MTEwNjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODc2YWI1ZGYzNjg5ZTlhOTM1ZWZkMDYyODczNDAyZDA0NzU0ODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/SKGYOA9ST99glU7ASpO0SB79oG
ATqOP/qSTo3V3U/Iu3GhlFYOy0es4Dn+iYdnrC+VGUHKzjPR5hDr6vV8STOWLXBK
uQVT8spUcRbD2ZDSqiol8pv9fq+kw7ASY1UiqOF47sFRS25hLlPRn5h/xxIDur2z
gXZMSHnvKUDAg/Cfm2q3Gu6y70aL17UuTzxMlyq18klMdavvVyGbkjQ5zn8LJLnX
BSddpDMA4iDPOAtH+vpobsMnOSyEbhh3m76Gp11OhmUOqU+ReCZDsFExvfYgLpdy
8Y7kXxLNs8vvF5UEGdgMkdA64beULn4WUqLF9ErP/G71Nccx2UfcM7P28QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMh2q13zaJ6ak179BihzQC0EdUhpMB8GA1UdIwQY
MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct
ZmViYjY0YjVlMTY0LzEveUhhclhmTm9ucHFUWHYwR0tITkFMUVIxU0drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0
LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVRw4AwQA
be7NMA0GCSqGSIb3DQEBCwUAA4IBAQCA0PiT0yrwjd0mp4jC5kV5yHfBgpeEYqRn
LLHoPRe6RPzu29te+ZCgV++MObJdWHqnTZ5sSAROE5nAzzhElT844F3rwMtLPczi
ljR2ULD7L0NSiwGzPJmV8LfYEvU0CvXWS+6PmkFllKpYTmvPWlGUUrerQspyhJbe
tNndbKMz8FS8imGmDxYVHCaML+p/1clVrYMUAnvBf1k/sOtNOl14RImM9gYRVLuy
wX4dDYZQ4r1XWP3SPCE8Eoi1w2MXSq2aTC99d+tKqGji9yHOa8l0I1BmZVU8LADJ
JNKfCHZsLNLExpBbHmAWAl95mQ7H1So0dEhNJOo7JBAr786oiKJi
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:32 2023 by rpki-client on console-ams.rpki-client.org