Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/YohVSvb4Qtjnwxp2BIVSCh3tb2U.roa
File: YohVSvb4Qtjnwxp2BIVSCh3tb2U.roa (raw, json)
Hash identifier: 2B7l16/QGGyRv1ZW8NSrVUJAvwfqfILrOQOPLB9ZOLw=
Subject key identifier: 62:88:55:4A:F6:F8:42:D8:E7:C3:1A:76:04:85:52:0A:1D:ED:6F:65
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018CC7275FC2E236FF1B871E525670DA048C
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/YohVSvb4Qtjnwxp2BIVSCh3tb2U.roa
Signing time: Mon 01 Jan 2024 22:31:35 +0000
ROA not before: Mon 01 Jan 2024 22:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 80.87.206.0/24 maxlen: 24
185.162.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5f:c2:e2:36:ff:1b:87:1e:52:56:70:da:04:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6288554af6f842d8e7c31a760485520a1ded6f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:5f:b8:23:6e:3b:95:13:26:53:9c:81:7c:
cf:b2:ad:4d:5d:13:67:2a:d2:8c:30:f1:a1:b8:1f:
ee:9a:b2:31:dd:11:8b:f1:5a:5e:72:34:84:5b:41:
6e:65:00:d1:ed:e7:f7:35:b8:25:39:07:32:97:8a:
3b:e6:77:4e:61:ed:49:f1:82:86:06:bb:fb:71:1e:
88:53:ac:91:18:63:1a:85:49:14:60:26:5f:b6:5c:
e5:9e:fa:76:a9:52:7b:25:96:76:f6:94:71:7e:3d:
0f:f8:3e:db:46:a6:55:f0:ea:b0:98:9d:92:62:28:
e7:3a:1b:2b:e6:02:3a:45:3f:b5:3b:eb:c4:50:5a:
48:0e:07:1e:fa:38:64:38:f6:77:4f:cf:5f:79:b7:
0c:21:cd:f3:6a:ba:68:ab:27:1b:5c:03:1a:e5:71:
f1:16:4d:ec:18:f6:07:ed:4e:d7:d9:9f:ab:12:c7:
67:09:cb:66:ce:40:a9:7f:1b:fc:d5:37:58:5e:4e:
45:9d:66:67:f9:da:6f:af:16:67:5c:21:0b:a1:dd:
1c:35:74:b4:0c:88:0e:cd:cf:b7:6a:70:0a:5f:a7:
d8:40:60:07:cf:78:f7:25:88:7a:27:db:fc:b6:89:
80:bd:03:e4:4e:83:9b:df:45:ca:22:ec:cf:4e:a0:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:88:55:4A:F6:F8:42:D8:E7:C3:1A:76:04:85:52:0A:1D:ED:6F:65
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/YohVSvb4Qtjnwxp2BIVSCh3tb2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.87.206.0/24
185.162.235.0/24
Signature Algorithm: sha256WithRSAEncryption
22:40:cb:da:dc:dc:39:36:39:69:1a:10:04:fa:34:5c:ab:b7:
a5:65:47:eb:01:31:5d:ba:63:df:6f:c3:8f:83:52:d2:b0:85:
a2:19:2a:20:77:2e:45:ce:65:df:cc:81:90:9f:8f:98:cf:26:
b0:7a:c2:09:e2:47:57:b7:c8:a4:ff:62:26:b3:76:71:c5:50:
71:7b:33:72:e2:c1:5c:7f:32:d4:51:3a:85:68:b1:a2:4b:c0:
be:c5:f2:96:03:1c:ce:f9:7a:f3:81:c8:ad:9f:e7:65:87:54:
76:7f:d4:00:6a:9c:0f:05:0f:f0:6f:ba:55:47:ef:0f:71:da:
69:a7:4b:0b:92:75:d7:5e:b4:d0:f6:38:ef:be:ee:ba:2c:61:
4c:08:90:29:30:43:93:19:c3:2d:b6:35:ea:11:24:1d:0f:df:
5d:ac:91:cd:f5:77:b4:bb:72:b4:f9:fe:bf:bb:0b:11:71:79:
d6:4f:df:06:83:cb:6b:65:c9:ef:bc:a7:34:e0:7f:31:39:4f:
ab:3d:c4:ff:0e:fd:46:1c:08:12:13:6e:a8:14:56:b0:65:98:
56:a9:40:0d:de:f8:60:ce:fa:2d:a6:cc:fc:23:78:9b:7f:34:
c7:ca:5f:a1:35:f8:48:04:4d:f3:c6:b5:4c:a7:9b:10:49:9d:
a4:ef:f3:ff
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHJ1/C4jb/G4ceUlZw2gSMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjQwMTAxMjIzMTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Mjg4NTU0YWY2Zjg0MmQ4ZTdjMzFhNzYwNDg1NTIwYTFkZWQ2ZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlVfuCNuO5UTJlOcgXzPsq1NXRNn
KtKMMPGhuB/umrIx3RGL8VpecjSEW0FuZQDR7ef3NbglOQcyl4o75ndOYe1J8YKG
Brv7cR6IU6yRGGMahUkUYCZftlzlnvp2qVJ7JZZ29pRxfj0P+D7bRqZV8OqwmJ2S
YijnOhsr5gI6RT+1O+vEUFpIDgce+jhkOPZ3T89febcMIc3zarpoqycbXAMa5XHx
Fk3sGPYH7U7X2Z+rEsdnCctmzkCpfxv81TdYXk5FnWZn+dpvrxZnXCELod0cNXS0
DIgOzc+3anAKX6fYQGAHz3j3JYh6J9v8tomAvQPkToOb30XKIuzPTqBGJQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGKIVUr2+ELY58MadgSFUgod7W9lMB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEvWW9oVlN2YjRRdGpud3hwMkJJVlNDaDN0YjJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUFfOAwQA
uaLrMA0GCSqGSIb3DQEBCwUAA4IBAQAiQMva3Nw5NjlpGhAE+jRcq7elZUfrATFd
umPfb8OPg1LSsIWiGSogdy5FzmXfzIGQn4+YzyawesIJ4kdXt8ik/2Ims3ZxxVBx
ezNy4sFcfzLUUTqFaLGiS8C+xfKWAxzO+Xrzgcitn+dlh1R2f9QAapwPBQ/wb7pV
R+8Pcdppp0sLknXXXrTQ9jjvvu66LGFMCJApMEOTGcMttjXqESQdD99drJHN9Xe0
u3K0+f6/uwsRcXnWT98Gg8trZcnvvKc04H8xOU+rPcT/Dv1GHAgSE26oFFawZZhW
qUAN3vhgzvotpsz8I3ibfzTHyl+hNfhIBE3zxrVMp5sQSZ2k7/P/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:27 2024 by rpki-client on console-fra.rpki-client.org