Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YXi3N0SMTKBptusOZCA1RL66ro4.roa
File: YXi3N0SMTKBptusOZCA1RL66ro4.roa (raw, json)
Hash identifier: eouUV/yIlH4+ojGjXOIu5QfjRdnMXSYYk7oZUl1XIMQ=
Subject key identifier: 61:78:B7:37:44:8C:4C:A0:69:B6:EB:0E:64:20:35:44:BE:BA:AE:8E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189BADD6489460F732B5F25845D019ABA3B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YXi3N0SMTKBptusOZCA1RL66ro4.roa
Signing time: Thu 03 Aug 2023 10:06:58 +0000
ROA not before: Thu 03 Aug 2023 10:06:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 45.90.19.0/24 maxlen: 24
185.214.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Sep 2023 08:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:dd:64:89:46:0f:73:2b:5f:25:84:5d:01:9a:ba:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 3 10:06:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6178b737448c4ca069b6eb0e64203544bebaae8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4c:06:bb:a2:0d:5b:a0:ad:a0:53:18:ee:2e:
3a:ca:85:45:0f:dd:fb:b2:0f:70:15:8d:d7:49:12:
0a:c8:11:0d:ac:65:fe:69:58:7f:ae:2b:84:3d:b3:
2d:cb:39:92:26:97:47:c9:70:c3:a4:2d:85:8c:19:
e0:7d:28:0e:e2:5a:45:25:08:ac:ff:4f:f1:94:ba:
42:10:35:3f:cd:a4:fd:c9:99:03:19:12:ac:e9:23:
bb:e8:a0:f1:2b:76:af:f6:63:c2:92:76:5b:9c:1f:
6d:ae:18:d7:4c:bd:bb:21:d0:51:0c:69:7e:e7:bc:
6f:4d:06:e2:53:f3:61:73:7d:20:be:5b:9d:b4:1f:
48:a9:5d:6e:65:72:05:3c:86:f0:ac:c4:7f:76:83:
df:13:6f:32:af:c0:c6:d4:1b:0b:88:b1:21:f9:56:
a7:42:ea:a7:8c:0d:59:ea:39:da:a5:d3:de:62:a4:
f7:44:41:c0:0d:82:40:05:da:82:80:9b:eb:0a:65:
e5:39:e3:f1:3f:9b:ee:06:bc:94:6b:05:f6:93:3d:
6c:f9:69:5d:03:f0:c5:88:0f:4a:88:bb:f1:bd:8e:
6c:f0:54:a1:f7:7b:d5:c4:5f:1f:80:d6:5a:c0:60:
86:32:90:8b:64:60:df:d9:3f:35:fc:1c:a5:fb:11:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:78:B7:37:44:8C:4C:A0:69:B6:EB:0E:64:20:35:44:BE:BA:AE:8E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YXi3N0SMTKBptusOZCA1RL66ro4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.19.0/24
185.214.102.0/24
Signature Algorithm: sha256WithRSAEncryption
75:22:b2:f2:8e:0a:b7:55:5e:54:4a:72:6a:bf:b0:5f:f8:fe:
cf:66:da:ec:d9:85:84:bd:8e:ce:62:4e:3e:47:b9:70:97:e5:
a8:a1:5f:68:37:59:6f:e8:9f:68:1d:5b:af:f8:36:22:70:89:
85:6c:ed:d3:bc:ae:e2:73:3d:18:27:14:ba:19:ea:bc:6c:95:
62:10:64:35:16:dd:59:cc:eb:00:7c:3c:c8:65:c6:c4:21:d9:
7f:5b:ad:6e:ff:56:78:87:56:6b:6a:64:ab:46:dc:14:eb:3f:
71:e6:05:eb:24:86:98:ab:de:41:38:af:b4:c8:8d:5e:75:49:
1c:3a:9d:1e:6b:c2:35:75:03:44:f1:e0:b5:c4:7a:e6:0a:8b:
9d:7f:4c:39:58:6c:5d:57:41:1b:0b:21:5b:0f:5c:1d:26:8b:
0e:18:43:86:d7:26:44:ef:9e:9b:3b:ae:1b:26:89:18:2e:48:
51:14:d6:2d:cb:fd:90:48:38:ba:be:8d:3d:ad:00:75:5e:0f:
04:61:ab:0f:8b:05:43:dd:8d:37:89:d5:21:b1:92:89:ab:1b:
04:07:79:20:62:6d:c0:88:99:1a:22:9f:b6:66:6e:c3:db:b7:
a3:f5:d7:25:fe:ef:62:3c:e1:f2:a4:11:3a:73:a7:bf:41:92:
28:08:41:b8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYm63WSJRg9zK18lhF0Bmro7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwODAzMTAwNjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTc4YjczNzQ0OGM0Y2EwNjliNmViMGU2NDIwMzU0NGJlYmFhZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUwGu6INW6CtoFMY7i46yoVFD937
sg9wFY3XSRIKyBENrGX+aVh/riuEPbMtyzmSJpdHyXDDpC2FjBngfSgO4lpFJQis
/0/xlLpCEDU/zaT9yZkDGRKs6SO76KDxK3av9mPCknZbnB9trhjXTL27IdBRDGl+
57xvTQbiU/Nhc30gvludtB9IqV1uZXIFPIbwrMR/doPfE28yr8DG1BsLiLEh+Van
QuqnjA1Z6jnapdPeYqT3REHADYJABdqCgJvrCmXlOePxP5vuBryUawX2kz1s+Wld
A/DFiA9KiLvxvY5s8FSh93vVxF8fgNZawGCGMpCLZGDf2T81/Byl+xE22QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGF4tzdEjEygabbrDmQgNUS+uq6OMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvWVhpM04wU01US0JwdHVzT1pDQTFSTDY2cm80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVoTAwQA
udZmMA0GCSqGSIb3DQEBCwUAA4IBAQB1IrLyjgq3VV5USnJqv7Bf+P7PZtrs2YWE
vY7OYk4+R7lwl+WooV9oN1lv6J9oHVuv+DYicImFbO3TvK7icz0YJxS6Geq8bJVi
EGQ1Ft1ZzOsAfDzIZcbEIdl/W61u/1Z4h1ZramSrRtwU6z9x5gXrJIaYq95BOK+0
yI1edUkcOp0ea8I1dQNE8eC1xHrmCoudf0w5WGxdV0EbCyFbD1wdJosOGEOG1yZE
756bO64bJokYLkhRFNYty/2QSDi6vo09rQB1Xg8EYasPiwVD3Y03idUhsZKJqxsE
B3kgYm3AiJkaIp+2Zm7D27ej9dcl/u9iPOHypBE6c6e/QZIoCEG4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org