Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/Y3McxFicCQdceCvtTwKzz7vIhd4.roa
File: Y3McxFicCQdceCvtTwKzz7vIhd4.roa (raw, json)
Hash identifier: kKWpcPjVxqR+5JjuoWwNB41HYbM94Nn92YrIVSNIHyI=
Subject key identifier: 63:73:1C:C4:58:9C:09:07:5C:78:2B:ED:4F:02:B3:CF:BB:C8:85:DE
Certificate issuer: /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial: 01856ED4B5243316D298350D88A5D6CE17A5
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/Y3McxFicCQdceCvtTwKzz7vIhd4.roa
Signing time: Sun 01 Jan 2023 19:35:11 +0000
ROA not before: Sun 01 Jan 2023 19:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 164.215.104.0/24 maxlen: 24
164.215.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 14:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:b5:24:33:16:d2:98:35:0d:88:a5:d6:ce:17:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Validity
Not Before: Jan 1 19:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63731cc4589c09075c782bed4f02b3cfbbc885de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:3d:d3:cd:84:a9:53:fd:79:89:eb:1e:a6:
de:73:d0:63:24:0a:bf:35:f8:2d:3b:cb:e5:78:ff:
28:04:17:d9:14:e7:71:9b:e8:18:fc:9d:c5:40:fa:
5f:82:c4:8c:67:73:b4:96:1c:7d:fb:96:54:10:2d:
42:59:55:5b:4a:10:8d:21:f2:f6:46:70:2f:e8:70:
04:4d:ca:f1:94:56:a7:c2:09:bf:96:f8:80:56:60:
51:8b:ff:d5:c3:35:ea:b6:ad:aa:b6:d2:b2:a8:3a:
59:b2:fc:aa:4d:d4:b5:d1:67:88:52:46:c4:0f:61:
bc:5c:e0:65:88:09:95:14:00:23:04:90:a2:df:d7:
ae:cb:8e:34:eb:d4:a4:6d:da:0b:5f:38:6d:5c:cf:
40:cf:76:84:3b:15:4b:6d:d8:dc:25:69:58:52:db:
ed:05:08:7b:a6:10:bd:20:7d:c6:28:2f:ee:71:d2:
eb:67:43:37:3e:4e:ac:fc:b5:b8:bb:5f:a7:ae:4c:
16:73:d6:1e:d5:d0:11:c0:55:a9:63:21:f2:97:79:
95:69:43:ab:cd:cf:de:50:f0:bd:90:99:e9:da:84:
50:3a:ee:3a:74:3f:c9:1c:c9:fc:8f:35:0e:5b:60:
24:d4:3f:56:f3:b7:c5:55:0e:e7:3e:40:e9:45:21:
f2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:73:1C:C4:58:9C:09:07:5C:78:2B:ED:4F:02:B3:CF:BB:C8:85:DE
X509v3 Authority Key Identifier:
keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/Y3McxFicCQdceCvtTwKzz7vIhd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.104.0/24
164.215.111.0/24
Signature Algorithm: sha256WithRSAEncryption
70:02:8f:49:dd:35:27:f9:2f:2a:50:a8:79:39:db:9f:c3:93:
ab:2e:35:f4:35:bc:21:44:f6:96:82:30:b0:f4:ef:36:63:12:
85:ab:09:d1:78:09:35:67:43:52:ff:17:cd:3c:ab:b9:76:00:
c6:5a:c6:35:00:15:a7:da:bb:84:37:f6:ef:90:d5:d7:e1:8b:
e6:b5:16:64:0e:d4:3d:5f:f6:fc:36:9d:a4:06:7a:ab:d7:7c:
8c:51:9f:3f:e4:89:0c:d1:8d:c4:a5:ef:d0:ea:00:d3:12:1a:
d5:64:a2:21:1e:45:78:72:fd:30:ab:7e:6a:df:ea:d1:5d:84:
90:92:7f:1a:52:0b:df:55:c9:38:4f:61:89:b7:8f:05:4d:d4:
ed:80:9d:11:73:62:e2:c9:8e:da:8f:c3:d3:0e:da:09:2b:f0:
da:a7:5a:79:b4:bf:d2:36:50:a3:32:8c:88:d1:7e:1d:c8:d8:
46:b2:c0:02:70:38:28:20:dd:83:f4:26:56:90:d7:d7:db:4f:
41:46:45:2b:df:69:31:ca:70:1b:c2:69:c8:10:aa:1a:4f:33:
e2:e0:b1:a1:d0:d1:80:e1:f7:dc:3c:5c:60:de:7c:47:9e:47:
ed:d4:76:e0:33:93:bb:6b:d8:9e:1e:52:15:90:ad:4b:eb:d5:
46:a2:40:5f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVu1LUkMxbSmDUNiKXWzhelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjViN2I3Yjg5OGZhYWVlNzA3NjdkMDk3MTVjNDM2YTgz
ZmNkYzIwHhcNMjMwMTAxMTkzNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzczMWNjNDU4OWMwOTA3NWM3ODJiZWQ0ZjAyYjNjZmJiYzg4NWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo49082EqVP9eYnrHqbec9BjJAq/
NfgtO8vleP8oBBfZFOdxm+gY/J3FQPpfgsSMZ3O0lhx9+5ZUEC1CWVVbShCNIfL2
RnAv6HAETcrxlFanwgm/lviAVmBRi//VwzXqtq2qttKyqDpZsvyqTdS10WeIUkbE
D2G8XOBliAmVFAAjBJCi39euy44069SkbdoLXzhtXM9Az3aEOxVLbdjcJWlYUtvt
BQh7phC9IH3GKC/ucdLrZ0M3Pk6s/LW4u1+nrkwWc9Ye1dARwFWpYyHyl3mVaUOr
zc/eUPC9kJnp2oRQOu46dD/JHMn8jzUOW2Ak1D9W87fFVQ7nPkDpRSHyRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGNzHMRYnAkHXHgr7U8Cs8+7yIXeMB8GA1UdIwQY
MBaAFB1lt7e4mPqu5wdn0JcVxDaoP83CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUt
OGZjMzczNzU3Njg0LzEvWTNNY3hGaWNDUWRjZUN2dFR3S3p6N3ZJaGQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUtOGZjMzczNzU3Njg0
LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQApNdoAwQA
pNdvMA0GCSqGSIb3DQEBCwUAA4IBAQBwAo9J3TUn+S8qUKh5Odufw5OrLjX0Nbwh
RPaWgjCw9O82YxKFqwnReAk1Z0NS/xfNPKu5dgDGWsY1ABWn2ruEN/bvkNXX4Yvm
tRZkDtQ9X/b8Np2kBnqr13yMUZ8/5IkM0Y3Epe/Q6gDTEhrVZKIhHkV4cv0wq35q
3+rRXYSQkn8aUgvfVck4T2GJt48FTdTtgJ0Rc2LiyY7aj8PTDtoJK/Dap1p5tL/S
NlCjMoyI0X4dyNhGssACcDgoIN2D9CZWkNfX209BRkUr32kxynAbwmnIEKoaTzPi
4LGh0NGA4ffcPFxg3nxHnkft1HbgM5O7a9ieHlIVkK1L69VGokBf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:10 2024 by rpki-client on console-fra.rpki-client.org