Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/yarPGFQXWz9x1MpeNs-LHbDzBhs.roa
File: yarPGFQXWz9x1MpeNs-LHbDzBhs.roa (raw, json)
Hash identifier: 93JDzdYqyxWUkOHSajiF2w7DDCHyePqOgOSWGWchk3M=
Subject key identifier: C9:AA:CF:18:54:17:5B:3F:71:D4:CA:5E:36:CF:8B:1D:B0:F3:06:1B
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 018C622B2F6DAADD57A22476F128E18B7F00
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/yarPGFQXWz9x1MpeNs-LHbDzBhs.roa
Signing time: Wed 13 Dec 2023 07:54:06 +0000
ROA not before: Wed 13 Dec 2023 07:54:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 89.252.184.0/24 maxlen: 24
89.252.183.0/24 maxlen: 24
45.84.189.0/24 maxlen: 24
2a0f:e80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:2b:2f:6d:aa:dd:57:a2:24:76:f1:28:e1:8b:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Dec 13 07:54:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9aacf1854175b3f71d4ca5e36cf8b1db0f3061b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:92:03:be:93:5a:87:dc:fc:f8:f0:3e:d1:
83:69:45:55:0a:b1:23:27:c7:dd:05:90:66:23:b4:
80:b5:4d:e1:e8:43:70:3e:49:c5:f8:0a:ff:50:13:
65:ad:1b:e3:12:87:bc:3d:9c:5f:f8:a3:dc:81:80:
63:fb:c1:70:46:de:36:6f:dc:0a:bc:3e:95:2f:e8:
11:d4:25:96:88:50:2a:b4:97:b8:a4:bd:01:a2:7d:
6c:d8:d3:85:2b:ce:63:9d:e5:a0:c6:ac:0f:34:ed:
1c:bd:88:90:df:70:a6:03:91:d5:56:ef:27:e3:f1:
97:43:81:e8:d4:e7:49:85:4b:b6:ea:1b:38:a1:a3:
ed:fd:19:ec:5f:e2:ac:f9:bc:d0:8c:5a:60:72:76:
ad:ea:38:e3:c1:6d:fd:b5:31:a0:cf:d8:d7:ed:c7:
d6:47:a5:86:b0:0e:08:2c:ad:9f:33:58:9c:89:a0:
67:88:b8:0d:71:10:1f:02:c7:c6:1b:07:29:6d:af:
ea:b0:b6:70:de:23:5a:61:c8:cc:ab:1d:44:5c:cc:
f6:09:d9:55:3b:04:c8:4e:06:86:21:47:93:fb:fd:
cb:47:d9:d0:2a:4c:1b:a9:b5:d7:1d:d8:d2:52:31:
a3:e3:a9:c9:ba:a6:9b:5d:b7:42:57:c2:18:ec:34:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AA:CF:18:54:17:5B:3F:71:D4:CA:5E:36:CF:8B:1D:B0:F3:06:1B
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/yarPGFQXWz9x1MpeNs-LHbDzBhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.189.0/24
89.252.183.0-89.252.184.255
IPv6:
2a0f:e80::/29
Signature Algorithm: sha256WithRSAEncryption
06:c3:15:13:27:dd:7f:77:c1:1d:51:87:24:52:45:9d:98:a9:
2a:8e:d5:62:82:1c:14:34:41:52:58:b6:06:86:a7:0d:6e:4a:
15:e0:dd:61:ff:d5:ca:6f:46:6a:9f:fa:0d:f6:db:e1:4d:92:
a1:73:39:89:ba:e0:dc:b4:a0:6c:a3:85:6b:e4:a9:22:28:5c:
91:d2:83:24:18:c0:ee:81:39:a0:4a:4a:9f:fa:c0:a2:0e:81:
a8:b2:af:01:d3:51:fc:0a:fa:e4:29:eb:02:02:ad:b9:ca:10:
d3:00:21:c5:73:89:99:03:9c:b9:fc:bf:9f:b0:8f:ed:2e:e3:
f9:ad:af:75:18:b4:4c:4b:a1:8c:47:f9:8c:d9:c7:8d:2e:4e:
4a:cc:54:e0:a5:3b:e6:38:dd:c2:81:c2:a7:39:f3:09:af:eb:
0e:8d:b2:bd:ba:cd:7c:75:8d:73:f7:99:a0:2d:21:b3:49:0b:
aa:8d:7e:2b:34:1b:83:5c:b7:96:0b:6c:c6:53:f7:df:b2:48:
7f:41:67:7a:c9:81:28:5d:ea:9f:ad:27:60:18:65:da:a0:4e:
92:e0:0b:4e:ce:d7:11:71:42:64:ae:94:fc:20:37:8e:d5:0d:
7e:35:ac:76:de:75:4b:17:50:51:0a:c2:31:12:01:ea:e0:98:
07:e4:18:37
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYxiKy9tqt1XoiR28Sjhi38AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxY2ExYTcwNmFiY2ZiZTFiODU4NjUyMzhkODQzNWVlMzNl
NzU4MjAwHhcNMjMxMjEzMDc1NDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWFhY2YxODU0MTc1YjNmNzFkNGNhNWUzNmNmOGIxZGIwZjMwNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnaSA76TWofc/PjwPtGDaUVVCrEj
J8fdBZBmI7SAtU3h6ENwPknF+Ar/UBNlrRvjEoe8PZxf+KPcgYBj+8FwRt42b9wK
vD6VL+gR1CWWiFAqtJe4pL0Bon1s2NOFK85jneWgxqwPNO0cvYiQ33CmA5HVVu8n
4/GXQ4Ho1OdJhUu26hs4oaPt/RnsX+Ks+bzQjFpgcnat6jjjwW39tTGgz9jX7cfW
R6WGsA4ILK2fM1iciaBniLgNcRAfAsfGGwcpba/qsLZw3iNaYcjMqx1EXMz2CdlV
OwTITgaGIUeT+/3LR9nQKkwbqbXXHdjSUjGj46nJuqabXbdCV8IY7DT6EwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFMmqzxhUF1s/cdTKXjbPix2w8wYbMB8GA1UdIwQY
MBaAFNHKGnBqvPvhuFhlI42ENe4z51ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzIt
ZThmN2ZkM2E0MDc4LzEveWFyUEdGUVhXejl4MU1wZU5zLUxIYkR6QmhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzItZThmN2ZkM2E0MDc4
LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQALVS9MAwD
BABZ/LcDBABZ/LgwDQQCAAIwBwMFAyoPDoAwDQYJKoZIhvcNAQELBQADggEBAAbD
FRMn3X93wR1RhyRSRZ2YqSqO1WKCHBQ0QVJYtgaGpw1uShXg3WH/1cpvRmqf+g32
2+FNkqFzOYm64Ny0oGyjhWvkqSIoXJHSgyQYwO6BOaBKSp/6wKIOgaiyrwHTUfwK
+uQp6wICrbnKENMAIcVziZkDnLn8v5+wj+0u4/mtr3UYtExLoYxH+YzZx40uTkrM
VOClO+Y43cKBwqc58wmv6w6Nsr26zXx1jXP3maAtIbNJC6qNfis0G4Nct5YLbMZT
99+ySH9BZ3rJgShd6p+tJ2AYZdqgTpLgC07O1xFxQmSulPwgN47VDX41rHbedUsX
UFEKwjESAergmAfkGDc=
Generated at Mon Dec 25 17:05:37 2023 by rpki-client on console-ams.rpki-client.org