Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/cybb-EnEQwygaWfvfK4dOggYC0I.roa
File: cybb-EnEQwygaWfvfK4dOggYC0I.roa (raw, json)
Hash identifier: pRiR2IC/8vo0ud8eOiEhff3NSXDUqafMg+DK2qtQcjQ=
Subject key identifier: 73:26:DB:F8:49:C4:43:0C:A0:69:67:EF:7C:AE:1D:3A:08:18:0B:42
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 0191940504F4823D1001F7E55D7404C5F2F4
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/cybb-EnEQwygaWfvfK4dOggYC0I.roa
Signing time: Tue 27 Aug 2024 13:27:22 +0000
ROA not before: Tue 27 Aug 2024 13:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 188.214.234.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 26 Oct 2024 17:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:94:05:04:f4:82:3d:10:01:f7:e5:5d:74:04:c5:f2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Aug 27 13:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7326dbf849c4430ca06967ef7cae1d3a08180b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:54:1a:bd:e9:1c:6d:2c:29:e4:0b:44:89:
89:f7:80:e8:ec:69:8a:1f:8c:4a:82:35:c5:b4:4a:
c8:28:0c:81:a3:44:5e:ac:a5:79:b7:b5:2e:56:ee:
b2:13:aa:a9:ed:bf:03:f5:8c:ef:5f:ed:3b:3a:d8:
15:90:45:ff:00:a6:5e:fe:0b:2b:34:66:80:7f:bb:
3a:7c:94:51:c5:6d:fb:c4:1a:24:00:49:ea:f3:26:
84:00:74:20:93:66:37:df:67:02:49:ae:63:c7:3c:
f1:f7:c6:92:ed:5f:c3:9d:80:51:73:55:9f:67:60:
fa:a2:9f:69:d5:5d:7e:1a:91:2f:c3:88:ea:a8:30:
e6:eb:94:64:20:88:e5:d4:b6:31:a1:62:14:00:de:
22:a1:af:4b:2f:dc:b6:47:be:d4:c1:15:af:30:d4:
34:67:3b:ff:b0:28:ba:34:76:29:4f:00:38:ec:38:
7b:f0:c0:0c:c6:4f:01:44:2a:3c:d1:89:26:4f:37:
ee:8c:65:8e:c7:b6:f4:37:01:3a:0f:a1:4f:90:64:
e9:41:5e:dc:bf:14:c1:a0:34:08:01:e9:87:eb:9c:
0f:a3:57:d5:24:65:17:a1:4d:c9:65:38:b0:4b:a5:
b1:c6:48:cb:af:66:68:04:58:62:aa:92:e0:3e:a9:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:26:DB:F8:49:C4:43:0C:A0:69:67:EF:7C:AE:1D:3A:08:18:0B:42
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/cybb-EnEQwygaWfvfK4dOggYC0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.234.0/23
Signature Algorithm: sha256WithRSAEncryption
94:5e:e4:e8:a8:13:74:88:bd:03:5e:68:52:f9:21:c2:59:5e:
6a:35:39:63:b2:95:c2:00:d2:da:98:a5:41:42:3b:b4:c7:58:
8b:4d:f6:e0:03:32:d3:10:4a:82:57:a6:15:24:6b:be:43:d3:
03:54:ed:d8:fd:af:99:cc:8d:10:db:eb:e0:d0:6c:b4:2b:d1:
a8:3e:2d:68:c1:b0:fb:18:e9:89:a8:cc:43:6c:a3:05:ba:87:
4a:4f:e3:42:b8:a0:45:55:ae:c6:3c:d7:34:eb:4a:6c:b6:30:
6f:d5:b4:96:53:d5:be:b5:5d:78:4d:37:eb:19:39:83:07:21:
d5:3b:eb:4c:7a:9b:01:70:51:ee:15:28:c6:b7:2f:de:6b:8e:
f0:d7:04:88:ee:34:8d:18:90:50:fb:2d:a8:f8:20:bb:a5:6c:
db:4e:74:46:03:24:0f:1d:3a:71:9d:88:76:85:d5:5a:aa:88:
58:9a:41:b8:53:eb:d5:e2:83:ef:33:d3:f7:9b:44:f1:a7:cc:
1d:6d:7a:0a:d9:bf:90:d0:fc:1d:83:a0:97:8e:6e:c5:ca:30:
ea:c1:84:18:66:f2:98:42:bc:64:1a:9b:71:a8:e5:db:8f:e7:
e3:5e:36:b5:ec:42:ae:4e:fd:6d:2d:ac:6c:e7:0f:f0:7b:38:
41:bd:8c:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGUBQT0gj0QAfflXXQExfL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmYyZTg2ZGQ3Y2M5MTAxNjU4ZmY4ZDVhNTI0MTQ0NWZj
ZDFkNmEwHhcNMjQwODI3MTMyNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzI2ZGJmODQ5YzQ0MzBjYTA2OTY3ZWY3Y2FlMWQzYTA4MTgwYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXRUGr3pHG0sKeQLRImJ94Do7GmK
H4xKgjXFtErIKAyBo0RerKV5t7UuVu6yE6qp7b8D9YzvX+07OtgVkEX/AKZe/gsr
NGaAf7s6fJRRxW37xBokAEnq8yaEAHQgk2Y332cCSa5jxzzx98aS7V/DnYBRc1Wf
Z2D6op9p1V1+GpEvw4jqqDDm65RkIIjl1LYxoWIUAN4ioa9LL9y2R77UwRWvMNQ0
Zzv/sCi6NHYpTwA47Dh78MAMxk8BRCo80YkmTzfujGWOx7b0NwE6D6FPkGTpQV7c
vxTBoDQIAemH65wPo1fVJGUXoU3JZTiwS6WxxkjLr2ZoBFhiqpLgPqk21wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHMm2/hJxEMMoGln73yuHToIGAtCMB8GA1UdIwQY
MBaAFK8vLobdfMkQFlj/jVpSQURfzR1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYt
NDZiYjdhZWMxZjMwLzEvY3liYi1FbkVRd3lnYVdmdmZLNGRPZ2dZQzBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYtNDZiYjdhZWMxZjMw
LzEvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvNbqMA0G
CSqGSIb3DQEBCwUAA4IBAQCUXuToqBN0iL0DXmhS+SHCWV5qNTljspXCANLamKVB
Qju0x1iLTfbgAzLTEEqCV6YVJGu+Q9MDVO3Y/a+ZzI0Q2+vg0Gy0K9GoPi1owbD7
GOmJqMxDbKMFuodKT+NCuKBFVa7GPNc060pstjBv1bSWU9W+tV14TTfrGTmDByHV
O+tMepsBcFHuFSjGty/ea47w1wSI7jSNGJBQ+y2o+CC7pWzbTnRGAyQPHTpxnYh2
hdVaqohYmkG4U+vV4oPvM9P3m0Txp8wdbXoK2b+Q0Pwdg6CXjm7FyjDqwYQYZvKY
QrxkGptxqOXbj+fjXja17EKuTv1tLaxs5w/wezhBvYzc
-----END CERTIFICATE-----
Generated at Sat Oct 26 19:07:52 2024 by rpki-client on console-fra.rpki-client.org