Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/cYkRAL2gNnzBDdewh6HsZz-9SVI.roa
File: cYkRAL2gNnzBDdewh6HsZz-9SVI.roa (raw, json)
Hash identifier: wv0b0AgLU3Se/hchY05Wq1vj/24XSd8B9rJjo+gLYo4=
Subject key identifier: 71:89:11:00:BD:A0:36:7C:C1:0D:D7:B0:87:A1:EC:67:3F:BD:49:52
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019193C14538BEAEE9DCC03CD1C104F46A17
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/cYkRAL2gNnzBDdewh6HsZz-9SVI.roa
Signing time: Tue 27 Aug 2024 12:13:22 +0000
ROA not before: Tue 27 Aug 2024 12:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58232
IP address blocks: 185.49.105.0/24 maxlen: 24
185.118.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 05:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:c1:45:38:be:ae:e9:dc:c0:3c:d1:c1:04:f4:6a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Aug 27 12:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71891100bda0367cc10dd7b087a1ec673fbd4952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:fc:57:c1:51:51:c7:62:d7:d7:aa:8c:60:
07:c0:fe:4e:a0:e2:c2:bc:1e:9b:79:70:21:78:63:
ba:c7:91:3d:77:69:cb:ad:f4:67:fa:06:af:7c:c4:
da:ee:ff:04:5e:96:8e:ed:e6:ce:fc:01:51:8a:b2:
c6:f1:b1:13:68:2c:fe:c5:14:95:c6:e7:f8:a0:8d:
0e:23:55:0b:8d:54:4d:92:35:f4:44:3f:ca:f5:87:
73:28:7a:7f:63:3f:bf:94:b2:b3:da:fb:3a:5f:ee:
8b:12:07:1f:cb:7d:d3:f7:6b:5e:78:0c:ec:ae:ee:
74:c8:0c:f2:86:35:9c:f6:f8:f7:e4:bf:68:7f:40:
34:3d:e2:6c:9c:5d:cd:e5:80:d8:2e:0a:58:69:f1:
93:3f:63:a8:9b:12:af:5c:4b:fd:ec:cd:7c:0c:a6:
ae:05:d0:80:60:23:ea:27:59:6c:62:b0:39:97:f3:
f9:65:59:10:3f:10:be:8e:0a:b5:a4:4e:2b:cb:37:
d5:ac:e7:e3:00:33:25:af:8d:1d:2a:64:e1:9a:57:
14:a7:28:76:5f:ae:4e:8e:25:d7:6c:fa:4b:e2:17:
3b:ea:cd:7e:7d:f1:2a:f8:bd:cd:68:4a:2d:38:04:
db:2a:c1:bb:8e:94:7f:0f:dd:06:cc:a6:a8:bc:25:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:89:11:00:BD:A0:36:7C:C1:0D:D7:B0:87:A1:EC:67:3F:BD:49:52
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/cYkRAL2gNnzBDdewh6HsZz-9SVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.105.0/24
185.118.12.0/24
Signature Algorithm: sha256WithRSAEncryption
41:54:e7:c2:e8:cf:eb:a7:75:47:47:d4:ef:e6:f1:b7:58:64:
ef:a4:58:52:98:fd:bd:b0:23:2e:f6:d6:3c:0f:83:d2:d7:b8:
5d:18:d1:60:49:23:e3:7d:d3:c6:c2:69:b7:03:01:59:e2:72:
31:09:1d:62:53:4e:75:43:e7:e4:fc:98:8d:dc:06:3d:3f:f0:
9b:7f:bc:07:0b:8e:ac:29:81:bb:a2:5e:19:7b:d9:18:ec:5b:
b9:bb:63:b1:f2:67:3c:a8:fd:27:77:61:48:cf:5a:b9:b1:94:
4e:29:be:93:0f:1c:87:a3:da:99:ab:10:3d:45:48:e3:26:6c:
13:d2:30:7f:c3:c8:6d:39:33:cf:c4:8e:09:4f:f0:9c:d1:df:
5e:4f:48:c6:4b:9f:01:d7:52:4e:46:e7:cb:7d:8b:80:b7:2c:
3d:f4:64:b6:02:87:92:7f:71:8a:4c:9d:99:b9:7f:00:4d:d3:
7a:6a:80:d9:79:5d:05:18:b6:93:c5:91:05:f7:23:f4:fa:96:
63:06:40:14:2e:91:19:b2:a4:e7:0f:c0:a2:2b:20:34:a2:87:
dc:40:0b:c4:37:93:c1:4c:b4:52:17:07:03:65:c0:43:05:b5:
48:67:cf:58:fa:ec:a4:9f:45:42:c8:2b:5b:f1:ad:5f:0c:b6:
3a:62:5d:80
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZGTwUU4vq7p3MA80cEE9GoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw
MTljMjQwHhcNMjQwODI3MTIxMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTg5MTEwMGJkYTAzNjdjYzEwZGQ3YjA4N2ExZWM2NzNmYmQ0OTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3X8V8FRUcdi19eqjGAHwP5OoOLC
vB6beXAheGO6x5E9d2nLrfRn+gavfMTa7v8EXpaO7ebO/AFRirLG8bETaCz+xRSV
xuf4oI0OI1ULjVRNkjX0RD/K9YdzKHp/Yz+/lLKz2vs6X+6LEgcfy33T92teeAzs
ru50yAzyhjWc9vj35L9of0A0PeJsnF3N5YDYLgpYafGTP2OomxKvXEv97M18DKau
BdCAYCPqJ1lsYrA5l/P5ZVkQPxC+jgq1pE4ryzfVrOfjADMlr40dKmThmlcUpyh2
X65OjiXXbPpL4hc76s1+ffEq+L3NaEotOATbKsG7jpR/D90GzKaovCW+mwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHGJEQC9oDZ8wQ3XsIeh7Gc/vUlSMB8GA1UdIwQY
MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1
LWQyMTA3MWVmNzM1Yi8xL2NZa1JBTDJnTm56QkRkZXdoNkhzWnotOVNWSS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1LWQyMTA3MWVmNzM1
Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAC5MWkD
BAC5dgwwDQYJKoZIhvcNAQELBQADggEBAEFU58Loz+undUdH1O/m8bdYZO+kWFKY
/b2wIy721jwPg9LXuF0Y0WBJI+N908bCabcDAVnicjEJHWJTTnVD5+T8mI3cBj0/
8Jt/vAcLjqwpgbuiXhl72RjsW7m7Y7HyZzyo/Sd3YUjPWrmxlE4pvpMPHIej2pmr
ED1FSOMmbBPSMH/DyG05M8/EjglP8JzR315PSMZLnwHXUk5G58t9i4C3LD30ZLYC
h5J/cYpMnZm5fwBN03pqgNl5XQUYtpPFkQX3I/T6lmMGQBQukRmypOcPwKIrIDSi
h9xAC8Q3k8FMtFIXBwNlwEMFtUhnz1j67KSfRULIK1vxrV8MtjpiXYA=
Generated at Mon Sep 30 07:43:54 2024 by rpki-client on console-fra.rpki-client.org