Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/Pyp6AJKRS__R05sUy5mR2f3rTrM.roa
File: Pyp6AJKRS__R05sUy5mR2f3rTrM.roa (raw, json)
Hash identifier: tg7xwnnfFHu+aqALqKrOw8sUCz8EbncUzMkRYF0eSdQ=
Subject key identifier: 3F:2A:7A:00:92:91:4B:FF:D1:D3:9B:14:CB:99:91:D9:FD:EB:4E:B3
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 018571A7B50BE51F4D75647C4C32AD9508FF
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/Pyp6AJKRS__R05sUy5mR2f3rTrM.roa
Signing time: Mon 02 Jan 2023 08:44:54 +0000
ROA not before: Mon 02 Jan 2023 08:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39599
IP address blocks: 185.51.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b5:0b:e5:1f:4d:75:64:7c:4c:32:ad:95:08:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Jan 2 08:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f2a7a0092914bffd1d39b14cb9991d9fdeb4eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:bb:f4:8e:57:fe:0c:b7:69:fd:f4:57:b4:
e7:bb:37:3a:fc:10:96:73:16:f4:d6:d2:2b:67:e1:
7e:b3:c1:ca:52:c2:cd:bf:0b:24:4f:ae:10:fa:4d:
87:e2:ba:8b:18:36:ba:da:d7:88:60:0f:87:70:98:
de:7e:2c:74:e5:73:cc:fb:89:3a:48:1b:6c:13:04:
3d:1a:f5:00:b6:9b:17:43:5a:22:b5:1c:b3:49:2a:
be:04:e2:27:12:e6:a3:25:f0:6a:79:6c:3b:7d:85:
5a:b3:1c:1c:98:9c:32:6d:58:63:52:fd:42:f2:16:
85:d9:4d:a3:01:01:f0:53:65:e3:fe:31:55:c3:22:
c5:2f:ff:42:76:e0:b5:66:7c:74:14:c3:6a:8b:f8:
9a:7f:95:c6:85:32:f2:9a:d4:ec:ff:55:4c:b5:bc:
10:f7:9c:ef:5f:70:4a:4f:6b:0d:c7:9f:18:64:f0:
9d:6e:b1:8e:ec:ad:3f:89:1a:b3:c0:4c:84:77:75:
01:44:1f:e0:f8:88:ed:a6:cb:ed:5b:e5:ab:2b:40:
da:a5:81:9d:7e:6d:61:22:64:e4:91:51:bd:12:44:
60:48:bc:64:5e:c9:8a:0e:01:08:4e:fb:dc:53:65:
1b:6e:f0:ee:db:52:3e:2f:71:34:da:57:f1:16:21:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2A:7A:00:92:91:4B:FF:D1:D3:9B:14:CB:99:91:D9:FD:EB:4E:B3
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/Pyp6AJKRS__R05sUy5mR2f3rTrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.117.0/24
Signature Algorithm: sha256WithRSAEncryption
83:42:78:5d:6a:b8:1f:58:f1:49:a9:9e:44:93:79:2f:f6:55:
8b:cd:a7:a2:27:c6:03:fe:15:a1:4c:ae:4b:51:f6:b0:07:ca:
e9:b6:45:29:8a:3e:1d:f7:7c:78:61:98:00:5b:16:0c:3d:ec:
d4:dd:37:73:f1:aa:50:32:db:8a:b2:35:42:3f:e7:99:6d:0b:
a2:7e:07:3d:1d:f5:ec:29:47:d7:8f:9d:f6:77:68:38:9e:77:
05:01:14:fe:80:90:2f:55:32:d9:f5:31:49:71:9e:82:ff:6a:
fa:8a:bd:70:7d:c6:39:bd:4f:c3:5e:65:6c:1e:e2:c4:76:20:
08:a2:c6:f7:aa:a8:f9:d5:01:9b:ad:5a:cb:fa:d7:04:90:84:
bc:47:dc:19:69:93:0f:07:05:0b:18:16:53:4e:fc:70:3e:f5:
72:fb:4e:63:5b:e0:dd:13:76:68:b4:47:52:e2:2b:b7:b2:29:
08:be:a5:46:be:10:65:db:90:6f:c3:00:26:ac:5b:84:a9:c4:
15:7e:6b:55:2a:cc:ad:7d:8d:2f:2e:56:49:e3:2a:fe:a6:90:
83:7e:a5:3a:47:23:3e:98:17:0c:7e:94:24:4b:88:23:71:d7:
a5:71:36:38:28:37:b3:af:38:18:aa:89:15:89:c2:aa:69:f8:
7b:d0:f8:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxp7UL5R9NdWR8TDKtlQj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjhlYzk2YzhlZTI2NWMzZGE0MjMyMzBhNTUyMTkzNjZk
ZDliMjgwHhcNMjMwMTAyMDg0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjJhN2EwMDkyOTE0YmZmZDFkMzliMTRjYjk5OTFkOWZkZWI0ZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtC79I5X/gy3af30V7Tnuzc6/BCW
cxb01tIrZ+F+s8HKUsLNvwskT64Q+k2H4rqLGDa62teIYA+HcJjefix05XPM+4k6
SBtsEwQ9GvUAtpsXQ1oitRyzSSq+BOInEuajJfBqeWw7fYVasxwcmJwybVhjUv1C
8haF2U2jAQHwU2Xj/jFVwyLFL/9CduC1Znx0FMNqi/iaf5XGhTLymtTs/1VMtbwQ
95zvX3BKT2sNx58YZPCdbrGO7K0/iRqzwEyEd3UBRB/g+IjtpsvtW+WrK0DapYGd
fm1hImTkkVG9EkRgSLxkXsmKDgEITvvcU2UbbvDu21I+L3E02lfxFiH3UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD8qegCSkUv/0dObFMuZkdn9606zMB8GA1UdIwQY
MBaAFPT47JbI7iZcPaQjIwpVIZNm3ZsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWIt
OGQ0OTg4MjdmNDVjLzEvUHlwNkFKS1JTX19SMDVzVXk1bVIyZjNyVHJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWItOGQ0OTg4MjdmNDVj
LzEvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTN1MA0G
CSqGSIb3DQEBCwUAA4IBAQCDQnhdargfWPFJqZ5Ek3kv9lWLzaeiJ8YD/hWhTK5L
UfawB8rptkUpij4d93x4YZgAWxYMPezU3Tdz8apQMtuKsjVCP+eZbQuifgc9HfXs
KUfXj532d2g4nncFART+gJAvVTLZ9TFJcZ6C/2r6ir1wfcY5vU/DXmVsHuLEdiAI
osb3qqj51QGbrVrL+tcEkIS8R9wZaZMPBwULGBZTTvxwPvVy+05jW+DdE3ZotEdS
4iu3sikIvqVGvhBl25BvwwAmrFuEqcQVfmtVKsytfY0vLlZJ4yr+ppCDfqU6RyM+
mBcMfpQkS4gjcdelcTY4KDezrzgYqokVicKqafh70Pgh
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:30 2024 by rpki-client on console-fra.rpki-client.org