Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/YBB5BACobnd3pFfEZ3W2eGZXZxQ.roa
File: YBB5BACobnd3pFfEZ3W2eGZXZxQ.roa (raw, json)
Hash identifier: ZPzRd0egn2cP3uL6+q1GoaPN9BVPVYhDVC8ATFKnz5s=
Subject key identifier: 60:10:79:04:00:A8:6E:77:77:A4:57:C4:67:75:B6:78:66:57:67:14
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018CC4938A7692DFF9FFCCF168F48B5618A2
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/YBB5BACobnd3pFfEZ3W2eGZXZxQ.roa
Signing time: Mon 01 Jan 2024 10:30:52 +0000
ROA not before: Mon 01 Jan 2024 10:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262287
IP address blocks: 192.145.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 00:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8a:76:92:df:f9:ff:cc:f1:68:f4:8b:56:18:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 10:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6010790400a86e7777a457c46775b67866576714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:ec:cc:b2:2c:0c:e4:0b:0f:d9:c6:ed:1d:
03:10:fc:b3:dd:44:1f:78:2c:4e:f1:00:cf:8c:5c:
ae:4a:9b:df:f3:d8:1a:4c:3a:78:43:16:ff:f4:af:
d4:b7:d5:fe:ab:36:30:b5:a3:fe:59:10:16:36:9d:
0b:e3:1d:e9:22:6d:1d:3b:05:e6:00:a2:3d:69:47:
fc:59:b0:b3:04:99:5d:2f:4e:9c:50:c9:b7:10:a9:
62:f0:5e:5b:5f:f1:5e:98:9f:b1:29:da:cf:5e:e4:
6d:42:c4:c8:5e:06:a6:79:07:46:2c:48:79:96:6b:
14:b8:98:22:f3:06:55:66:53:4d:f3:41:22:50:a6:
a1:23:59:58:f4:91:8a:64:e3:07:7e:3a:8e:bf:01:
2f:b6:b3:cc:9e:d7:cf:49:b4:c6:cc:04:e0:c9:48:
f0:d6:c0:ea:e8:92:0d:cd:a2:7b:2b:a3:f1:90:35:
2d:25:5e:cd:97:08:b8:28:62:1b:80:f7:c1:cf:66:
72:ad:10:95:ba:da:2d:3e:cb:1a:a5:04:41:a0:6a:
7d:cc:7b:d6:53:04:f4:88:81:3a:c2:99:3f:c9:31:
2d:53:73:f8:de:83:26:72:ac:04:d6:01:8d:18:4e:
f8:ec:d2:04:4d:60:c7:a3:5d:c2:ef:40:29:f8:36:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:10:79:04:00:A8:6E:77:77:A4:57:C4:67:75:B6:78:66:57:67:14
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/YBB5BACobnd3pFfEZ3W2eGZXZxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.70.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e0:23:10:e1:05:b2:1c:12:78:a1:20:f3:68:87:1a:a6:6a:
01:64:6a:cd:d9:cc:a8:91:43:e5:0e:3b:ac:c0:3c:42:bc:ef:
b6:70:8d:7b:6d:cb:37:a8:db:20:6f:18:f5:df:c9:5f:af:a7:
0a:d5:bd:d2:f0:2a:e0:d3:5e:ab:a9:bc:1c:4b:9a:d7:67:c8:
13:52:a7:a8:8f:b2:16:b1:1a:80:4e:f6:95:a3:84:85:c8:1d:
f6:30:c5:11:5e:00:56:95:72:0d:33:ad:38:2b:e2:50:26:24:
09:02:8f:24:22:57:82:b8:1a:cc:82:f2:7f:77:47:4c:9a:25:
ba:c4:29:0f:43:b2:c9:16:51:5b:e5:a6:e1:8c:f1:18:17:2e:
5c:93:de:1c:bf:24:40:91:02:60:eb:22:cc:fb:57:dd:fc:1a:
cb:ec:23:cb:3f:6e:0f:07:25:d0:ea:82:9b:a4:0e:51:e7:0c:
a0:dd:67:e6:60:f2:19:cb:25:aa:fd:41:6f:25:c4:40:5c:84:
65:9c:15:9f:56:15:f0:c1:02:b9:5f:5f:8c:fe:9e:c8:b6:ad:
4d:6b:d5:3c:fa:a4:a4:47:9d:a8:5c:3e:9e:d4:25:bc:8b:15:
e4:a9:91:76:21:bd:d1:e2:c3:27:1d:e8:0a:67:bb:5c:35:e4:
c5:7c:bf:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk4p2kt/5/8zxaPSLVhiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjQwMTAxMTAzMDUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDEwNzkwNDAwYTg2ZTc3NzdhNDU3YzQ2Nzc1YjY3ODY2NTc2NzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2vszLIsDOQLD9nG7R0DEPyz3UQf
eCxO8QDPjFyuSpvf89gaTDp4Qxb/9K/Ut9X+qzYwtaP+WRAWNp0L4x3pIm0dOwXm
AKI9aUf8WbCzBJldL06cUMm3EKli8F5bX/FemJ+xKdrPXuRtQsTIXgameQdGLEh5
lmsUuJgi8wZVZlNN80EiUKahI1lY9JGKZOMHfjqOvwEvtrPMntfPSbTGzATgyUjw
1sDq6JINzaJ7K6PxkDUtJV7Nlwi4KGIbgPfBz2ZyrRCVutotPssapQRBoGp9zHvW
UwT0iIE6wpk/yTEtU3P43oMmcqwE1gGNGE747NIETWDHo13C70Ap+DaRrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGAQeQQAqG53d6RXxGd1tnhmV2cUMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvWUJCNUJBQ29ibmQzcEZmRVozVzJlR1pYWnhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJFGMA0G
CSqGSIb3DQEBCwUAA4IBAQAZ4CMQ4QWyHBJ4oSDzaIcapmoBZGrN2cyokUPlDjus
wDxCvO+2cI17bcs3qNsgbxj138lfr6cK1b3S8Crg016rqbwcS5rXZ8gTUqeoj7IW
sRqATvaVo4SFyB32MMURXgBWlXINM604K+JQJiQJAo8kIleCuBrMgvJ/d0dMmiW6
xCkPQ7LJFlFb5abhjPEYFy5ck94cvyRAkQJg6yLM+1fd/BrL7CPLP24PByXQ6oKb
pA5R5wyg3WfmYPIZyyWq/UFvJcRAXIRlnBWfVhXwwQK5X1+M/p7Itq1Na9U8+qSk
R52oXD6e1CW8ixXkqZF2Ib3R4sMnHegKZ7tcNeTFfL8o
-----END CERTIFICATE-----
Generated at Fri Feb 16 06:09:45 2024 by rpki-client on console-ams.rpki-client.org