Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/Y2K5M118X_gyMYeaPu-L9EOeGHs.roa
File: Y2K5M118X_gyMYeaPu-L9EOeGHs.roa (raw, json)
Hash identifier: js2Bu9RIq9Z9qSUy1ztGNMHLDZeE1Zsj0ohrOCzDo0M=
Subject key identifier: 63:62:B9:33:5D:7C:5F:F8:32:31:87:9A:3E:EF:8B:F4:43:9E:18:7B
Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687
Certificate serial: 018570705FE633E029FEF2BB86390CC47C41
Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/Y2K5M118X_gyMYeaPu-L9EOeGHs.roa
Signing time: Mon 02 Jan 2023 03:04:50 +0000
ROA not before: Mon 02 Jan 2023 03:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209912
IP address blocks: 37.44.232.0/22 maxlen: 22
37.44.232.0/24 maxlen: 24
37.44.233.0/24 maxlen: 24
37.44.235.0/24 maxlen: 24
37.44.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5f:e6:33:e0:29:fe:f2:bb:86:39:0c:c4:7c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687
Validity
Not Before: Jan 2 03:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6362b9335d7c5ff83231879a3eef8bf4439e187b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:c3:07:f3:f4:a3:90:e3:02:37:a1:0b:21:
65:d1:de:c3:d3:c1:d7:f1:97:2d:7b:e8:af:ed:f9:
cc:eb:de:e6:16:6d:45:db:56:06:15:89:ac:68:b8:
a3:18:d1:0b:c5:2c:cc:c8:99:a3:09:10:0b:89:d4:
f8:a7:dc:f9:ef:2c:34:7f:af:6a:3e:bf:fb:9b:ec:
f1:1a:50:b0:be:d8:fd:09:a3:82:5e:54:1f:0d:be:
12:77:72:c2:2a:da:d4:c9:47:33:2d:99:32:c4:1d:
3b:51:42:5f:5d:c0:8b:af:df:28:2b:3d:ef:6b:47:
fa:97:51:05:d7:4b:a4:a5:eb:39:53:6b:22:34:84:
fc:51:a7:92:b2:33:c4:98:e7:09:8d:d0:b3:4a:14:
10:46:79:26:bf:cc:f4:66:3c:4e:b7:24:29:37:32:
1b:60:02:e5:50:67:01:2c:1a:21:1e:17:8d:c9:e7:
e1:39:fc:5a:ae:a0:0f:0d:05:3a:9c:73:56:e0:ed:
57:c3:4c:b5:d1:e2:bd:f8:2c:f4:38:97:4c:17:22:
cc:da:67:f2:a7:90:95:ec:bc:e3:9b:69:06:a4:55:
50:49:1a:79:d4:ab:e5:fb:09:90:05:44:d1:97:f9:
46:3c:3d:17:d9:eb:14:6b:ff:6e:c6:20:80:4a:e1:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:62:B9:33:5D:7C:5F:F8:32:31:87:9A:3E:EF:8B:F4:43:9E:18:7B
X509v3 Authority Key Identifier:
keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/Y2K5M118X_gyMYeaPu-L9EOeGHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.232.0/22
Signature Algorithm: sha256WithRSAEncryption
85:47:32:da:a1:bb:99:82:80:46:54:1f:79:11:33:56:1e:95:
fd:28:68:35:b7:1a:86:32:fb:16:55:78:3d:25:e6:ab:f7:34:
da:9e:ee:61:82:80:a5:eb:1e:21:3c:d1:39:aa:8f:72:45:a5:
a4:32:e8:0a:7e:d7:87:5d:8b:e5:41:81:b2:64:33:73:b5:8b:
d9:06:c1:59:03:9b:c6:6b:75:f3:d1:28:6d:e0:03:79:54:8c:
39:eb:87:a0:93:70:d6:04:34:e9:f9:27:f7:79:ba:46:e2:85:
f8:3b:18:90:61:9a:8d:fc:d1:d9:40:2b:fb:32:0d:f2:1f:77:
dc:58:84:e3:2c:5a:d5:b1:9d:b3:f6:9a:dd:67:39:37:3f:9f:
b9:e9:f0:9f:9b:77:09:47:15:7e:d3:c8:e8:53:eb:6e:38:b6:
66:47:d2:48:a9:11:51:3f:72:f7:29:be:11:0a:db:ce:de:ff:
ca:a8:5c:ca:b4:5a:d3:b9:03:3b:80:ae:62:05:31:d9:55:9c:
4f:8f:5e:3c:b0:d1:44:b7:24:0e:2d:75:10:35:98:fc:34:af:
47:a3:0a:03:47:a0:0e:60:29:c9:10:14:ae:e2:09:5c:05:e5:
e7:5e:c2:7f:ea:10:01:b3:69:f3:ea:9a:1a:d4:e6:a9:d9:8e:
60:8c:62:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwcF/mM+Ap/vK7hjkMxHxBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OWI0NzM5NDM3YjU1Zjk0NGQyMjI5ZDE2YjZlNmZhNTk5
MTk2ODcwHhcNMjMwMTAyMDMwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzYyYjkzMzVkN2M1ZmY4MzIzMTg3OWEzZWVmOGJmNDQzOWUxODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr03DB/P0o5DjAjehCyFl0d7D08HX
8Zcte+iv7fnM697mFm1F21YGFYmsaLijGNELxSzMyJmjCRALidT4p9z57yw0f69q
Pr/7m+zxGlCwvtj9CaOCXlQfDb4Sd3LCKtrUyUczLZkyxB07UUJfXcCLr98oKz3v
a0f6l1EF10ukpes5U2siNIT8UaeSsjPEmOcJjdCzShQQRnkmv8z0ZjxOtyQpNzIb
YALlUGcBLBohHheNyefhOfxarqAPDQU6nHNW4O1Xw0y10eK9+Cz0OJdMFyLM2mfy
p5CV7Lzjm2kGpFVQSRp51Kvl+wmQBUTRl/lGPD0X2esUa/9uxiCASuGzpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGNiuTNdfF/4MjGHmj7vi/RDnhh7MB8GA1UdIwQY
MBaAFKmbRzlDe1X5RNIinRa25vpZkZaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUt
ZTQ3NTY0Y2QwYmFlLzEvWTJLNU0xMThYX2d5TVllYVB1LUw5RU9lR0hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUtZTQ3NTY0Y2QwYmFl
LzEvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJSzoMA0G
CSqGSIb3DQEBCwUAA4IBAQCFRzLaobuZgoBGVB95ETNWHpX9KGg1txqGMvsWVXg9
Jear9zTanu5hgoCl6x4hPNE5qo9yRaWkMugKfteHXYvlQYGyZDNztYvZBsFZA5vG
a3Xz0Sht4AN5VIw564egk3DWBDTp+Sf3ebpG4oX4OxiQYZqN/NHZQCv7Mg3yH3fc
WITjLFrVsZ2z9prdZzk3P5+56fCfm3cJRxV+08joU+tuOLZmR9JIqRFRP3L3Kb4R
CtvO3v/KqFzKtFrTuQM7gK5iBTHZVZxPj148sNFEtyQOLXUQNZj8NK9HowoDR6AO
YCnJEBSu4glcBeXnXsJ/6hABs2nz6poa1Oap2Y5gjGIF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:49 2024 by rpki-client on console-fra.rpki-client.org