Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/YcCcwelSb05916Lce1j5g2K8MZY.roa
File: YcCcwelSb05916Lce1j5g2K8MZY.roa (raw, json)
Hash identifier: +YOa8bKbrEuFTgfJoYzno6WaVKZ/kDM82I5GvzLv5v0=
Subject key identifier: 61:C0:9C:C1:E9:52:6F:4E:7D:D7:A2:DC:7B:58:F9:83:62:BC:31:96
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 01856B00AC08CB679D8DF4C1302A040F15E1
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/YcCcwelSb05916Lce1j5g2K8MZY.roa
Signing time: Sun 01 Jan 2023 01:44:44 +0000
ROA not before: Sun 01 Jan 2023 01:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210083
IP address blocks: 199.231.235.0/24 maxlen: 24
185.130.44.0/24 maxlen: 24
185.130.47.0/24 maxlen: 24
185.130.45.0/24 maxlen: 24
185.130.46.0/24 maxlen: 24
2a07:e04::/36 maxlen: 36
2a07:e00:a::/48 maxlen: 48
2a07:e00::/48 maxlen: 48
2a07:e00:b::/48 maxlen: 48
2a07:e00:bb::/48 maxlen: 48
2a07:e03::/32 maxlen: 48
2a07:e02:41::/48 maxlen: 48
2a07:e00:ff::/48 maxlen: 48
2a07:e00:19f::/48 maxlen: 48
2a07:e02:1000::/36 maxlen: 40
2a07:e02:a00::/40 maxlen: 40
2a07:e02:b00::/40 maxlen: 56
2a07:e00:bc::/48 maxlen: 48
2a07:e00:ac::/48 maxlen: 48
2a07:e00:c::/48 maxlen: 48
2a07:e01::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:00:ac:08:cb:67:9d:8d:f4:c1:30:2a:04:0f:15:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Jan 1 01:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61c09cc1e9526f4e7dd7a2dc7b58f98362bc3196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5a:e4:6a:17:ad:47:de:80:0a:9e:58:8b:11:
7f:67:53:a2:35:a2:be:d0:3d:83:b2:43:49:6d:64:
fa:74:d9:37:cd:0b:79:ad:61:1b:3e:70:f8:ba:3f:
44:58:f9:79:d6:bd:ad:ba:b1:40:46:a0:f3:4a:70:
ca:51:25:e5:0c:13:ee:e0:74:15:1c:ff:37:d7:7a:
4d:80:6b:02:34:2c:7b:b9:59:b5:15:bb:70:80:f8:
eb:3c:3b:56:3a:32:68:82:44:4d:2d:01:e7:37:96:
b9:6c:c2:15:06:9c:63:6a:cf:14:8e:c2:62:ab:3e:
21:96:b1:e2:6f:18:10:8f:33:a9:9c:5e:7b:b7:0b:
3b:02:76:5d:60:20:eb:1f:ee:82:6e:18:c7:0f:b9:
5f:56:2c:aa:e6:66:b0:ec:97:9f:9d:d8:14:90:51:
f1:2d:97:36:64:3e:e2:9a:a6:8f:be:cd:6d:61:bf:
9b:74:dd:f2:16:3b:e7:84:b4:94:eb:08:dd:c3:14:
73:f5:2e:4e:0a:b1:69:c6:b1:67:cf:a0:f7:2f:f1:
9c:a5:c2:ac:ab:4a:4c:cf:ad:23:0a:8b:58:21:39:
15:73:97:56:ef:27:a2:bf:bd:d4:17:3f:3c:cf:7a:
eb:be:a5:be:66:0b:4e:74:95:3f:13:bf:46:64:76:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C0:9C:C1:E9:52:6F:4E:7D:D7:A2:DC:7B:58:F9:83:62:BC:31:96
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/YcCcwelSb05916Lce1j5g2K8MZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.44.0/22
199.231.235.0/24
IPv6:
2a07:e00::/48
2a07:e00:a::-2a07:e00:c:ffff:ffff:ffff:ffff:ffff
2a07:e00:ac::/48
2a07:e00:bb::-2a07:e00:bc:ffff:ffff:ffff:ffff:ffff
2a07:e00:ff::/48
2a07:e00:19f::/48
2a07:e01::/32
2a07:e02:41::/48
2a07:e02:a00::/39
2a07:e02:1000::/36
2a07:e03::-2a07:e04:fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0e:54:84:b4:c4:54:5c:74:8e:9a:2e:ee:10:72:fa:98:b4:c3:
5d:a5:b6:b5:aa:09:dc:1d:c7:82:4e:ce:1c:9f:1c:18:5d:b9:
01:00:85:ac:1c:6b:cc:59:fd:1e:72:3e:52:95:8a:62:6a:39:
75:33:11:a8:36:93:e4:e5:ae:7b:7b:b8:26:3b:ac:a0:df:dc:
fc:52:2f:44:2b:b5:e1:a4:0f:35:50:1d:1f:e9:1f:50:61:3d:
d6:ac:34:db:01:49:2e:7a:ff:dd:01:da:90:89:24:36:43:d4:
63:9b:41:06:ef:37:86:d7:1a:dd:74:95:31:47:7b:c5:80:db:
a3:35:86:e4:6a:f3:cb:01:39:ef:16:0f:8b:18:44:4e:66:69:
1b:2c:1c:57:02:04:ae:0e:09:0b:c0:c4:77:e4:ed:55:e5:53:
89:4f:9e:3b:32:cf:66:c3:2f:6a:0e:e6:80:13:43:fe:6c:bc:
8c:55:e8:c7:1a:cb:db:c0:61:6b:e1:fb:46:f9:42:67:a4:34:
44:1f:be:27:59:0e:0b:89:71:89:9a:80:c5:c3:1c:ae:d8:7b:
bf:a3:59:9e:88:81:3d:4c:68:97:6b:ba:f0:dc:98:f0:45:cf:
50:13:e9:d2:6b:a6:47:11:08:3e:e1:3f:c6:85:09:cf:dc:f7:
2f:30:f0:85
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAYVrAKwIy2edjfTBMCoEDxXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMmViNWIzOGJiNjJlZGU1Yzk4Y2JmYmNmZjk1MzI4NTIx
ODA1MTYwHhcNMjMwMTAxMDE0NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWMwOWNjMWU5NTI2ZjRlN2RkN2EyZGM3YjU4Zjk4MzYyYmMzMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVrkahetR96ACp5YixF/Z1OiNaK+
0D2DskNJbWT6dNk3zQt5rWEbPnD4uj9EWPl51r2turFARqDzSnDKUSXlDBPu4HQV
HP8313pNgGsCNCx7uVm1FbtwgPjrPDtWOjJogkRNLQHnN5a5bMIVBpxjas8UjsJi
qz4hlrHibxgQjzOpnF57tws7AnZdYCDrH+6CbhjHD7lfViyq5maw7JefndgUkFHx
LZc2ZD7imqaPvs1tYb+bdN3yFjvnhLSU6wjdwxRz9S5OCrFpxrFnz6D3L/GcpcKs
q0pMz60jCotYITkVc5dW7yeiv73UFz88z3rrvqW+ZgtOdJU/E79GZHaT1wIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFGHAnMHpUm9Ofdei3HtY+YNivDGWMB8GA1UdIwQY
MBaAFMwutbOLti7eXJjL+8/5UyhSGAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEt
ZjFmODAyZTY2MTNiLzEvWWNDY3dlbFNiMDU5MTZMY2UxajVnMks4TVpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEtZjFmODAyZTY2MTNi
LzEvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjASBAIAATAMAwQCuYIs
AwQAx+frMIGDBAIAAjB9AwcAKgcOAAAAMBIDBwEqBw4AAAoDBwAqBw4AAAwDBwAq
Bw4AAKwwEgMHACoHDgAAuwMHACoHDgAAvAMHACoHDgAA/wMHACoHDgABnwMFACoH
DgEDBwAqBw4CAEEDBgEqBw4CCgMGBCoHDgIQMA8DBQAqBw4DAwYEKgcOBAAwDQYJ
KoZIhvcNAQELBQADggEBAA5UhLTEVFx0jpou7hBy+pi0w12ltrWqCdwdx4JOzhyf
HBhduQEAhawca8xZ/R5yPlKVimJqOXUzEag2k+Tlrnt7uCY7rKDf3PxSL0QrteGk
DzVQHR/pH1BhPdasNNsBSS56/90B2pCJJDZD1GObQQbvN4bXGt10lTFHe8WA26M1
huRq88sBOe8WD4sYRE5maRssHFcCBK4OCQvAxHfk7VXlU4lPnjsyz2bDL2oO5oAT
Q/5svIxV6Mcay9vAYWvh+0b5QmekNEQfvidZDguJcYmagMXDHK7Ye7+jWZ6IgT1M
aJdruvDcmPBFz1AT6dJrpkcRCD7hP8aFCc/c9y8w8IU=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:21 2023 by rpki-client on console-fra.rpki-client.org