Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/y-pWVCZHuqY3-bKxEg-nkx-19FA.roa
File: y-pWVCZHuqY3-bKxEg-nkx-19FA.roa (raw, json)
Hash identifier: qCvyJIPXFyVICLUJMGbAJkmrl8ytjxPybQO2iXdOhRU=
Subject key identifier: CB:EA:56:54:26:47:BA:A6:37:F9:B2:B1:12:0F:A7:93:1F:B5:F4:50
Certificate issuer: /CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Certificate serial: 018570FBCC29810A4D6E8D51C45A85873ED4
Authority key identifier: 52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/y-pWVCZHuqY3-bKxEg-nkx-19FA.roa
Signing time: Mon 02 Jan 2023 05:37:07 +0000
ROA not before: Mon 02 Jan 2023 05:37:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203983
IP address blocks: 185.112.68.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:cc:29:81:0a:4d:6e:8d:51:c4:5a:85:87:3e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Validity
Not Before: Jan 2 05:37:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbea56542647baa637f9b2b1120fa7931fb5f450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:e0:85:ff:16:03:63:0f:b5:86:3a:f7:5e:
03:0f:80:4f:1e:17:9e:2a:d1:a4:17:0a:6c:d5:f9:
cd:e2:0a:37:d2:51:c5:9b:3a:a4:4d:c9:a3:2b:f0:
cd:1e:c5:88:d1:40:2a:0b:67:2a:1e:30:ea:e8:98:
c1:5c:67:3a:a5:79:a4:94:33:ce:f4:b1:11:e7:fa:
7e:aa:4f:6f:de:2a:26:d4:b2:8a:4d:98:e4:78:1a:
80:16:f9:ec:45:97:cc:78:0a:a8:a6:85:85:9d:e2:
2c:a9:c2:5b:2d:6b:66:6f:7f:67:cb:c3:98:fb:f1:
a2:45:73:54:9a:d4:0d:79:93:88:62:76:2d:69:15:
e6:46:c7:05:96:49:53:d5:9c:91:67:d8:aa:32:d8:
1d:11:9d:ab:24:46:50:f8:a0:1d:0f:6a:a6:ff:c0:
73:2c:8f:71:52:92:af:c4:c4:23:53:77:01:07:36:
b2:99:01:75:81:6f:cf:cd:16:5d:48:c0:31:c0:b4:
19:d6:a0:0d:19:be:d1:a8:d9:2b:8a:28:5c:22:ed:
68:83:53:10:13:a4:88:99:9d:4c:44:3c:a2:60:69:
5c:42:38:0d:4e:c9:a4:73:c7:81:db:c6:fb:9a:f4:
93:75:c7:a8:7e:45:87:d6:67:91:f7:13:8c:24:91:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EA:56:54:26:47:BA:A6:37:F9:B2:B1:12:0F:A7:93:1F:B5:F4:50
X509v3 Authority Key Identifier:
keyid:52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/y-pWVCZHuqY3-bKxEg-nkx-19FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.68.0/22
Signature Algorithm: sha256WithRSAEncryption
19:ae:c0:e3:f2:52:05:a0:58:4f:60:56:ca:55:7a:1a:dd:61:
82:50:83:54:18:07:b6:5e:11:e0:42:bb:f7:d8:82:0b:c9:10:
76:95:b3:0b:3e:7f:95:1c:66:81:a5:14:a9:0e:b5:47:04:95:
16:2b:79:97:c9:41:1d:4b:2e:da:e6:e3:0c:79:55:23:dc:bd:
19:66:87:65:9f:06:38:98:81:d6:61:d7:45:35:b1:2e:5c:91:
ee:fb:c6:c3:45:75:de:0f:b8:b8:27:90:a8:6a:7a:85:c6:3d:
35:0c:da:61:ba:7e:91:83:2d:0a:88:70:4c:e9:dc:ba:ef:eb:
3c:cf:63:52:dd:16:17:a9:d3:70:5b:97:47:6b:81:99:8b:2a:
9f:ec:ee:76:d9:be:d9:67:36:06:eb:97:18:ee:55:e2:d3:bf:
8e:24:b0:b9:21:2f:05:d6:0d:ce:98:c2:a8:c1:e0:89:f3:15:
f9:77:a7:8a:94:74:86:67:bd:bf:24:99:67:0a:4b:8a:45:81:
08:e6:1e:2a:b3:79:ff:3b:90:c7:33:50:bb:c4:12:9d:03:4d:
00:e6:f9:e7:e1:a0:5c:06:f2:d4:39:7a:36:bf:3e:81:93:a3:
91:10:b3:55:37:c0:7c:a2:0c:a1:ed:75:cb:65:a8:4f:51:eb:
1e:f3:50:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw+8wpgQpNbo1RxFqFhz7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMTVmZTgzOTQ4Y2ZjN2QzZTAwNzI4NzBjNzAzZmEzMTM1
MDJjYmMwHhcNMjMwMTAyMDUzNzA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmVhNTY1NDI2NDdiYWE2MzdmOWIyYjExMjBmYTc5MzFmYjVmNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEnghf8WA2MPtYY6914DD4BPHhee
KtGkFwps1fnN4go30lHFmzqkTcmjK/DNHsWI0UAqC2cqHjDq6JjBXGc6pXmklDPO
9LER5/p+qk9v3iom1LKKTZjkeBqAFvnsRZfMeAqopoWFneIsqcJbLWtmb39ny8OY
+/GiRXNUmtQNeZOIYnYtaRXmRscFlklT1ZyRZ9iqMtgdEZ2rJEZQ+KAdD2qm/8Bz
LI9xUpKvxMQjU3cBBzaymQF1gW/PzRZdSMAxwLQZ1qANGb7RqNkriihcIu1og1MQ
E6SImZ1MRDyiYGlcQjgNTsmkc8eB28b7mvSTdceofkWH1meR9xOMJJEv0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMvqVlQmR7qmN/mysRIPp5MftfRQMB8GA1UdIwQY
MBaAFFIV/oOUjPx9PgByhwxwP6MTUCy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWhYLWc1U01fSDAtQUhLSERIQV9veE5RTEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jMDkzNGItMWQxZC00NWMwLWJhNmYt
ZWY5ODE0Y2ZmMmI4LzEveS1wV1ZDWkh1cVkzLWJLeEVnLW5reC0xOUZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jMDkzNGItMWQxZC00NWMwLWJhNmYtZWY5ODE0Y2ZmMmI4
LzEvVWhYLWc1U01fSDAtQUhLSERIQV9veE5RTEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXBEMA0G
CSqGSIb3DQEBCwUAA4IBAQAZrsDj8lIFoFhPYFbKVXoa3WGCUINUGAe2XhHgQrv3
2IILyRB2lbMLPn+VHGaBpRSpDrVHBJUWK3mXyUEdSy7a5uMMeVUj3L0ZZodlnwY4
mIHWYddFNbEuXJHu+8bDRXXeD7i4J5CoanqFxj01DNphun6Rgy0KiHBM6dy67+s8
z2NS3RYXqdNwW5dHa4GZiyqf7O522b7ZZzYG65cY7lXi07+OJLC5IS8F1g3OmMKo
weCJ8xX5d6eKlHSGZ72/JJlnCkuKRYEI5h4qs3n/O5DHM1C7xBKdA00A5vnn4aBc
BvLUOXo2vz6Bk6ORELNVN8B8ogyh7XXLZahPUese81Bq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:30 2024 by rpki-client on console-ams.rpki-client.org