Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Yohoz3Dr8OTqf1O1qEcj2YdrJzw.roa
File: Yohoz3Dr8OTqf1O1qEcj2YdrJzw.roa (raw, json)
Hash identifier: gJIDHwyl/c4Ej6w9r/jTcJhwYigxL+l56TcBb43aw0M=
Subject key identifier: 62:88:68:CF:70:EB:F0:E4:EA:7F:53:B5:A8:47:23:D9:87:6B:27:3C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01882476FD8AEE015F9377EDD2C598BF707E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Yohoz3Dr8OTqf1O1qEcj2YdrJzw.roa
Signing time: Tue 16 May 2023 12:09:17 +0000
ROA not before: Tue 16 May 2023 12:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 88.209.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:76:fd:8a:ee:01:5f:93:77:ed:d2:c5:98:bf:70:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 16 12:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=628868cf70ebf0e4ea7f53b5a84723d9876b273c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:c4:04:f6:cf:6e:26:64:81:91:74:aa:c9:
c1:1b:60:15:3a:30:5f:65:88:a7:d4:2d:d5:44:69:
d9:00:2e:16:0d:51:72:2d:6f:e8:bd:52:af:fa:0a:
71:e6:ea:9e:b9:3e:8f:1d:2e:01:09:41:47:0e:75:
d3:76:5f:c3:35:22:d8:78:f5:21:99:1a:30:98:b2:
97:8e:de:2f:3a:75:1c:6c:d7:e2:27:01:1c:05:d2:
37:29:14:0d:c7:6b:eb:c3:cc:a3:1d:8f:b6:f4:32:
6e:a2:57:41:7d:9c:89:c8:aa:51:db:e0:cf:7b:56:
c7:9f:c0:57:94:ae:92:f3:6b:93:20:67:dd:43:7b:
6c:9c:f7:b8:4c:94:a7:4d:3c:ae:e5:1f:41:47:5d:
e8:88:66:72:58:96:36:8f:b6:91:a3:3b:c1:73:f4:
df:8d:cf:8e:ce:d3:92:97:60:9b:81:0d:dc:4b:6c:
13:47:93:a5:0f:4e:c4:49:99:2b:45:4c:b9:b0:3c:
55:d9:73:fb:f5:b2:c0:00:52:07:f7:15:bc:32:02:
5c:4a:29:81:00:97:61:af:57:ac:6c:a0:4b:73:2c:
e4:3c:84:16:1a:c2:01:7b:11:42:92:a3:89:08:af:
8e:d7:28:73:d0:28:b0:ba:a0:fe:1a:f4:06:45:29:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:88:68:CF:70:EB:F0:E4:EA:7F:53:B5:A8:47:23:D9:87:6B:27:3C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Yohoz3Dr8OTqf1O1qEcj2YdrJzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.201.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:02:b6:ed:5e:f9:ee:03:78:79:5d:00:21:35:41:c2:6f:c8:
fa:31:ef:00:04:b6:43:10:2d:d1:d9:1d:72:cd:08:13:62:11:
42:d4:0d:ab:b1:27:c3:f7:53:ed:a9:99:0d:95:5f:3d:a6:f5:
f6:73:a3:b5:94:84:b2:f1:bf:2e:99:e4:51:d6:b4:c2:d4:b4:
5a:a0:92:30:aa:01:f6:f4:b2:91:fa:b3:a5:ad:18:87:6b:26:
83:79:4e:b9:73:2a:1e:66:2e:44:dc:c0:f4:a7:7a:f5:a5:96:
65:81:6b:cb:51:a0:91:e4:16:b7:e3:ed:aa:91:77:e3:63:cb:
06:90:d8:6e:60:2e:ca:ce:16:83:c9:fc:68:1c:fc:83:36:3b:
d2:aa:80:e3:a7:f4:af:35:21:a4:d2:44:99:ac:e5:f2:71:b2:
1d:8a:93:e3:03:36:b8:11:6c:16:c6:35:be:90:8f:d1:ed:3c:
a6:43:01:4d:a4:74:74:e9:fe:f7:72:fb:c2:d4:b2:3e:b7:95:
bd:0c:4d:d5:77:e3:26:79:07:37:b8:15:76:6b:e1:af:3b:a0:
17:fb:17:f9:4d:20:7c:c3:ee:9f:0b:9e:1d:cc:9a:00:30:f6:
f4:94:26:ef:0d:79:7d:28:55:e4:43:26:bb:b0:c8:21:c3:77:
ec:99:8c:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgkdv2K7gFfk3ft0sWYv3B+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwNTE2MTIwOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Mjg4NjhjZjcwZWJmMGU0ZWE3ZjUzYjVhODQ3MjNkOTg3NmIyNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw7EBPbPbiZkgZF0qsnBG2AVOjBf
ZYin1C3VRGnZAC4WDVFyLW/ovVKv+gpx5uqeuT6PHS4BCUFHDnXTdl/DNSLYePUh
mRowmLKXjt4vOnUcbNfiJwEcBdI3KRQNx2vrw8yjHY+29DJuoldBfZyJyKpR2+DP
e1bHn8BXlK6S82uTIGfdQ3tsnPe4TJSnTTyu5R9BR13oiGZyWJY2j7aRozvBc/Tf
jc+OztOSl2CbgQ3cS2wTR5OlD07ESZkrRUy5sDxV2XP79bLAAFIH9xW8MgJcSimB
AJdhr1esbKBLcyzkPIQWGsIBexFCkqOJCK+O1yhz0CiwuqD+GvQGRSmv1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGKIaM9w6/Dk6n9TtahHI9mHayc8MB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvWW9ob3ozRHI4T1RxZjFPMXFFY2oyWWRySnp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNHJMA0G
CSqGSIb3DQEBCwUAA4IBAQDDArbtXvnuA3h5XQAhNUHCb8j6Me8ABLZDEC3R2R1y
zQgTYhFC1A2rsSfD91PtqZkNlV89pvX2c6O1lISy8b8umeRR1rTC1LRaoJIwqgH2
9LKR+rOlrRiHayaDeU65cyoeZi5E3MD0p3r1pZZlgWvLUaCR5Ba34+2qkXfjY8sG
kNhuYC7KzhaDyfxoHPyDNjvSqoDjp/SvNSGk0kSZrOXycbIdipPjAza4EWwWxjW+
kI/R7TymQwFNpHR06f73cvvC1LI+t5W9DE3Vd+MmeQc3uBV2a+GvO6AX+xf5TSB8
w+6fC54dzJoAMPb0lCbvDXl9KFXkQya7sMghw3fsmYxo
-----END CERTIFICATE-----
Generated at Fri Sep 1 07:54:36 2023 by rpki-client on console-ams.rpki-client.org