Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/YIuT6Gr0quVa1UMSOvHZwuuSxLM.roa
File: YIuT6Gr0quVa1UMSOvHZwuuSxLM.roa (raw, json)
Hash identifier: LPMwoZnrFnPzvFTaCLuepo7zyfJFhsRm4W8l+v4Loj4=
Subject key identifier: 60:8B:93:E8:6A:F4:AA:E5:5A:D5:43:12:3A:F1:D9:C2:EB:92:C4:B3
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 0185737171ACE4D24A39A54AFE1E7131DD29
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/YIuT6Gr0quVa1UMSOvHZwuuSxLM.roa
Signing time: Mon 02 Jan 2023 17:04:52 +0000
ROA not before: Mon 02 Jan 2023 17:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 131.220.0.0/16 maxlen: 17
193.23.254.0/24 maxlen: 24
193.30.3.0/24 maxlen: 24
2a00:5ba0::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 31 May 2023 13:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:71:ac:e4:d2:4a:39:a5:4a:fe:1e:71:31:dd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Jan 2 17:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=608b93e86af4aae55ad543123af1d9c2eb92c4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:15:c0:ad:27:15:50:54:78:f6:46:7a:1d:cc:
a7:36:32:a3:a3:5b:70:a5:5e:8c:70:90:06:e7:5d:
a8:f1:b7:3d:0a:26:d4:f4:10:59:bb:d4:38:69:97:
9a:0e:bc:6f:ff:18:fc:74:82:ee:8e:db:66:1e:3e:
e8:a0:39:cb:99:42:22:bb:70:7e:d4:bd:3e:f2:04:
1b:be:84:20:46:2f:0f:0c:b8:dd:43:94:02:85:cb:
f7:8c:af:5d:c1:f0:6b:13:9d:03:47:5d:e7:1c:15:
86:70:8a:91:40:22:50:3d:09:ff:6b:47:c0:88:e3:
aa:ca:29:d3:9e:46:b8:c7:29:0a:1d:b0:f1:5c:36:
b7:40:65:ef:90:c4:c6:3a:a0:26:96:c1:92:41:5a:
bc:32:40:1f:5f:b1:45:c6:c4:09:3e:22:94:f7:97:
f5:70:54:68:c7:dd:65:5f:d5:7b:40:32:a6:77:4f:
dc:78:d1:46:65:c1:0d:3b:b6:5a:a2:68:93:b0:96:
f9:49:81:73:5c:d5:61:10:79:a3:f0:7c:32:02:b6:
d8:85:1f:22:fa:28:0c:25:02:20:f2:79:ec:f7:47:
33:67:ae:eb:e8:b7:ba:75:84:86:eb:82:32:f1:44:
d2:41:36:32:bd:36:79:7d:6e:5c:57:62:df:7d:97:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8B:93:E8:6A:F4:AA:E5:5A:D5:43:12:3A:F1:D9:C2:EB:92:C4:B3
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/YIuT6Gr0quVa1UMSOvHZwuuSxLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.220.0.0/16
193.23.254.0/24
193.30.3.0/24
IPv6:
2a00:5ba0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:67:8b:bc:14:14:db:39:60:c3:0e:4d:dc:2f:e7:b9:99:ad:
58:de:36:a6:dd:cf:00:d4:c9:ab:12:db:5e:d1:07:59:7c:94:
b4:8e:de:bc:e0:9c:5d:ca:40:c8:31:20:55:9c:e4:39:36:71:
54:78:97:f2:1f:23:bd:04:9f:5f:bf:53:b1:01:18:35:72:a3:
14:ca:53:73:4e:9a:30:84:28:6a:db:49:9f:06:e8:82:1a:02:
c3:10:3b:6e:e3:44:f3:e1:83:a1:24:19:92:6f:e4:f2:42:ae:
38:88:1f:64:2d:94:eb:79:bd:37:6b:3b:2d:8f:d9:98:79:2d:
2e:91:40:8f:59:68:d6:b2:88:6e:bc:c2:6f:d6:ba:c7:96:e2:
73:a9:15:55:3c:9b:69:ed:69:88:13:59:ec:df:29:e0:23:7f:
01:53:01:cd:e5:e2:b3:98:30:3e:31:46:68:7d:43:85:81:fb:
d5:8a:8a:f4:f3:27:21:a7:cb:0f:01:30:73:c7:80:35:7a:8c:
e4:4a:84:b9:fd:4a:8c:cb:00:bc:6b:18:80:31:d5:5b:10:f5:
aa:c8:e9:96:83:b4:1f:41:cc:52:bb:b3:81:a6:89:27:51:fe:
54:e0:ce:e1:4c:31:42:a8:b9:96:68:cc:c8:e6:9c:7d:65:e4:
7b:eb:16:e3
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYVzcXGs5NJKOaVK/h5xMd0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTYyZTJhZmE3NzQ4ZjQ1MjY1ZDg5ZmQxNTYyNGI1ODRl
NzI0NjYwHhcNMjMwMTAyMTcwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDhiOTNlODZhZjRhYWU1NWFkNTQzMTIzYWYxZDljMmViOTJjNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxXArScVUFR49kZ6HcynNjKjo1tw
pV6McJAG512o8bc9CibU9BBZu9Q4aZeaDrxv/xj8dILujttmHj7ooDnLmUIiu3B+
1L0+8gQbvoQgRi8PDLjdQ5QChcv3jK9dwfBrE50DR13nHBWGcIqRQCJQPQn/a0fA
iOOqyinTnka4xykKHbDxXDa3QGXvkMTGOqAmlsGSQVq8MkAfX7FFxsQJPiKU95f1
cFRox91lX9V7QDKmd0/ceNFGZcENO7ZaomiTsJb5SYFzXNVhEHmj8HwyArbYhR8i
+igMJQIg8nns90czZ67r6Le6dYSG64Iy8UTSQTYyvTZ5fW5cV2LffZfmjQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFGCLk+hq9KrlWtVDEjrx2cLrksSzMB8GA1UdIwQY
MBaAFJSWLir6d0j0UmXYn9FWJLWE5yRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2It
Y2Q0MDNiZGVlNGRmLzEvWUl1VDZHcjBxdVZhMVVNU092SFp3dXVTeExNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2ItY2Q0MDNiZGVlNGRm
LzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwMAg9wDBADB
F/4DBADBHgMwDQQCAAIwBwMFAyoAW6AwDQYJKoZIhvcNAQELBQADggEBAI9ni7wU
FNs5YMMOTdwv57mZrVjeNqbdzwDUyasS217RB1l8lLSO3rzgnF3KQMgxIFWc5Dk2
cVR4l/IfI70En1+/U7EBGDVyoxTKU3NOmjCEKGrbSZ8G6IIaAsMQO27jRPPhg6Ek
GZJv5PJCrjiIH2QtlOt5vTdrOy2P2Zh5LS6RQI9ZaNayiG68wm/WuseW4nOpFVU8
m2ntaYgTWezfKeAjfwFTAc3l4rOYMD4xRmh9Q4WB+9WKivTzJyGnyw8BMHPHgDV6
jORKhLn9SozLALxrGIAx1VsQ9arI6ZaDtB9BzFK7s4GmiSdR/lTgzuFMMUKouZZo
zMjmnH1l5HvrFuM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:16 2024 by rpki-client on console-fra.rpki-client.org