Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/yC4_eIMSKg7ZyWRa33QCsiVkRaI.roa
File: yC4_eIMSKg7ZyWRa33QCsiVkRaI.roa (raw, json)
Hash identifier: Hc1FPO134befwfnZKbx7iHgt5z1E+wDCPk38Cyc2GW0=
Subject key identifier: C8:2E:3F:78:83:12:2A:0E:D9:C9:64:5A:DF:74:02:B2:25:64:45:A2
Certificate issuer: /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Certificate serial: 018572D5BBA8D59192AC8745AA2DCE9BF7CC
Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/yC4_eIMSKg7ZyWRa33QCsiVkRaI.roa
Signing time: Mon 02 Jan 2023 14:14:47 +0000
ROA not before: Mon 02 Jan 2023 14:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211727
IP address blocks: 185.243.130.0/24 maxlen: 24
2a10:9d40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:bb:a8:d5:91:92:ac:87:45:aa:2d:ce:9b:f7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Validity
Not Before: Jan 2 14:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c82e3f7883122a0ed9c9645adf7402b2256445a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:6a:bd:96:f8:d7:33:36:4b:10:9c:f1:25:
41:2f:c5:01:fc:7b:47:d7:fd:a0:44:2f:31:39:45:
09:9e:76:84:55:97:cd:4e:32:09:53:9e:47:b6:f7:
d6:94:51:d4:25:6b:ec:f7:d6:09:c3:6b:d2:05:95:
b2:62:b3:26:3c:b3:27:b0:a8:c7:8e:cf:54:a4:4b:
87:1b:be:59:60:1c:0d:5f:85:75:1b:36:59:fd:e2:
ce:be:b7:2d:d7:1c:d9:41:b1:d2:4b:4c:53:f6:5c:
70:e6:8a:e5:20:ba:e4:9b:db:eb:f6:80:b7:d3:ea:
c4:0d:07:a3:53:62:64:93:62:46:66:0c:52:45:0e:
58:59:07:c4:15:77:2c:6d:0c:ef:49:0c:16:0f:e0:
66:29:46:4a:6f:4a:4e:8c:7c:9a:ff:45:df:1c:e4:
1f:58:8f:89:26:65:9f:bb:12:f7:18:00:12:59:04:
a8:54:99:92:c9:31:57:d7:65:f1:ff:87:a4:79:b7:
0a:44:af:11:0d:18:dd:3c:a7:47:df:76:52:0a:d1:
d0:b0:6f:aa:19:06:94:4e:87:8b:78:03:ca:2f:af:
e6:97:0d:ac:9c:27:f3:9b:c8:11:64:c9:11:1b:66:
39:d7:8f:b7:44:d8:33:f9:0a:23:ee:c1:51:4d:97:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2E:3F:78:83:12:2A:0E:D9:C9:64:5A:DF:74:02:B2:25:64:45:A2
X509v3 Authority Key Identifier:
keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/yC4_eIMSKg7ZyWRa33QCsiVkRaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.130.0/24
IPv6:
2a10:9d40::/29
Signature Algorithm: sha256WithRSAEncryption
95:0e:eb:bb:c6:53:0e:d5:19:44:2d:92:38:42:b0:49:56:bd:
b0:a8:e7:2b:57:9f:9b:e5:a2:d1:b3:57:d1:4c:93:24:a6:36:
e6:17:90:3c:d0:94:70:40:ab:e2:34:f1:c5:52:f8:3c:64:f3:
6f:ee:69:99:22:e2:f0:c1:e7:ee:33:29:97:06:85:30:07:4e:
68:2d:3e:c4:19:eb:89:a0:25:2a:e4:45:4d:25:3b:61:21:9f:
7e:bc:fc:9e:42:4c:0a:b9:4a:e2:1d:07:4b:fa:a0:c3:03:35:
4b:9d:fa:1a:9c:90:ee:50:2c:0c:e6:c3:46:b3:ed:19:de:f2:
a5:99:d0:aa:57:bf:0c:69:ca:c2:5b:2b:f9:8a:98:97:2e:de:
4f:96:fb:c2:7b:4a:8f:8e:e9:3e:4a:90:73:dc:01:20:97:d3:
cf:c9:c6:bc:68:7d:82:8e:8b:5b:12:e9:ce:6f:03:18:e8:4d:
68:c5:bc:54:5b:8e:a4:96:69:2b:f1:4b:d7:f1:59:50:d4:8d:
70:7c:18:86:04:82:78:d8:ee:ff:94:f4:99:1d:5b:4c:b0:c9:
39:70:07:6a:5a:9a:d6:73:c4:6a:64:29:73:ef:91:66:19:31:
44:39:6f:8d:91:50:bb:dc:de:8f:e5:0c:99:02:46:c9:9e:d9:
02:bd:e6:4b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVy1buo1ZGSrIdFqi3Om/fMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkM2RkOGQzMmNmYzcxN2E2ZTY5MGViZTNlMWRiNDM4NmQ4
ZjZjNjQwHhcNMjMwMTAyMTQxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODJlM2Y3ODgzMTIyYTBlZDljOTY0NWFkZjc0MDJiMjI1NjQ0NWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBNqvZb41zM2SxCc8SVBL8UB/HtH
1/2gRC8xOUUJnnaEVZfNTjIJU55HtvfWlFHUJWvs99YJw2vSBZWyYrMmPLMnsKjH
js9UpEuHG75ZYBwNX4V1GzZZ/eLOvrct1xzZQbHSS0xT9lxw5orlILrkm9vr9oC3
0+rEDQejU2Jkk2JGZgxSRQ5YWQfEFXcsbQzvSQwWD+BmKUZKb0pOjHya/0XfHOQf
WI+JJmWfuxL3GAASWQSoVJmSyTFX12Xx/4ekebcKRK8RDRjdPKdH33ZSCtHQsG+q
GQaUToeLeAPKL6/mlw2snCfzm8gRZMkRG2Y514+3RNgz+Qoj7sFRTZeA0QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMguP3iDEioO2clkWt90ArIlZEWiMB8GA1UdIwQY
MBaAFK092NMs/HF6bmkOvj4dtDhtj2xkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQt
M2JjZDIzOTllZTY0LzEveUM0X2VJTVNLZzdaeVdSYTMzUUNzaVZrUmFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQtM2JjZDIzOTllZTY0
LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufOCMA0E
AgACMAcDBQMqEJ1AMA0GCSqGSIb3DQEBCwUAA4IBAQCVDuu7xlMO1RlELZI4QrBJ
Vr2wqOcrV5+b5aLRs1fRTJMkpjbmF5A80JRwQKviNPHFUvg8ZPNv7mmZIuLwwefu
MymXBoUwB05oLT7EGeuJoCUq5EVNJTthIZ9+vPyeQkwKuUriHQdL+qDDAzVLnfoa
nJDuUCwM5sNGs+0Z3vKlmdCqV78MacrCWyv5ipiXLt5PlvvCe0qPjuk+SpBz3AEg
l9PPyca8aH2CjotbEunObwMY6E1oxbxUW46klmkr8UvX8VlQ1I1wfBiGBIJ42O7/
lPSZHVtMsMk5cAdqWprWc8RqZClz75FmGTFEOW+NkVC73N6P5QyZAkbJntkCveZL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:34 2024 by rpki-client on console-ams.rpki-client.org