Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/5yt8SvASgQmaxLNyewo8ac0OLKs.roa
File: 5yt8SvASgQmaxLNyewo8ac0OLKs.roa (raw, json)
Hash identifier: xkkCjdEw/pjXHNr+cEVi/DxYVeWzWh7aJ3yYCzOyOiI=
Subject key identifier: E7:2B:7C:4A:F0:12:81:09:9A:C4:B3:72:7B:0A:3C:69:CD:0E:2C:AB
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 01856FF05CB53956D73639C2226E4D55F68A
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/5yt8SvASgQmaxLNyewo8ac0OLKs.roa
Signing time: Mon 02 Jan 2023 00:45:01 +0000
ROA not before: Mon 02 Jan 2023 00:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 80.172.222.0/24 maxlen: 24
2001:4cc0:8000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:5c:b5:39:56:d7:36:39:c2:22:6e:4d:55:f6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Jan 2 00:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e72b7c4af01281099ac4b3727b0a3c69cd0e2cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:66:2c:94:41:80:c7:dd:69:98:a7:1e:6d:
dc:5e:29:c8:58:6e:17:bd:04:d3:ea:d2:e7:dc:f0:
f1:3f:84:53:c5:70:34:1a:9f:56:99:51:3c:db:6b:
78:f1:2e:e9:fe:66:98:c0:f2:76:ab:8f:92:98:4e:
61:71:c6:d8:4a:9a:91:4d:c8:59:24:29:9a:4d:ec:
f0:7d:18:85:f4:a1:dc:d7:ae:3c:dc:6a:b5:1e:90:
33:9e:72:81:ec:8e:2a:9a:1c:a8:95:49:87:07:1c:
36:cf:3f:7d:d1:aa:bc:41:9a:22:17:85:f6:fa:6b:
4e:d1:42:5e:69:c8:18:8a:8a:83:e1:be:23:a0:11:
b5:db:b2:b3:18:79:73:61:30:bc:4b:07:ef:a7:a4:
7a:38:20:69:98:ec:4b:05:25:cc:30:7a:e6:01:34:
53:c4:fe:87:c0:73:60:74:23:44:19:6c:dd:45:82:
8d:62:7f:70:8a:5c:25:04:43:13:1a:1f:43:83:02:
d8:20:5e:07:32:b8:66:0b:d5:dc:86:f5:93:d1:0a:
53:6b:84:11:c3:e1:ab:fb:5c:8a:0b:b6:7d:d1:23:
1f:ef:98:d3:4e:bd:f2:7d:ca:37:21:ab:1d:4f:4b:
50:39:19:09:69:79:57:95:a5:9f:7f:5b:03:e6:b6:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2B:7C:4A:F0:12:81:09:9A:C4:B3:72:7B:0A:3C:69:CD:0E:2C:AB
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/5yt8SvASgQmaxLNyewo8ac0OLKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.172.222.0/24
IPv6:
2001:4cc0:8000::/48
Signature Algorithm: sha256WithRSAEncryption
7d:4a:69:e1:c6:65:bb:0b:71:a4:7e:82:b5:2e:56:de:a0:4f:
22:22:9e:42:5e:28:02:c6:64:fb:39:16:37:36:50:27:1c:92:
f4:f2:e8:6d:ec:e6:c4:41:93:7c:82:92:a0:11:a1:27:bb:02:
3d:2a:22:6a:a5:ac:06:bb:bd:3a:30:b1:e4:f0:90:5b:96:23:
e4:c1:74:88:06:38:98:c6:af:aa:50:09:6c:11:fa:63:25:79:
74:e9:b7:48:1c:63:d8:87:41:a9:3e:00:bf:50:db:41:b4:c9:
5a:19:b4:37:45:bb:6e:6d:dc:3a:3f:31:fb:1f:c1:57:8a:14:
fb:f1:12:c2:45:e9:80:5b:fe:52:c1:ea:e6:fb:09:f8:c3:f6:
0b:5a:55:63:65:63:c5:d3:f8:f3:c9:f3:be:53:ee:ec:f0:41:
fb:52:cf:6a:c0:ca:69:4f:2e:af:1a:49:ff:38:7c:30:59:8e:
16:41:3d:90:63:36:6a:c1:44:25:1f:10:71:bf:31:80:c0:b8:
aa:37:96:50:76:53:e2:e9:07:c7:6c:fa:d5:ad:af:80:25:b3:
57:e2:05:7f:df:94:07:34:bc:f4:ae:0a:20:c0:bc:0d:5c:cd:
2c:3c:c5:bf:f9:88:5b:c5:0b:69:cd:1c:92:fd:11:84:90:cb:
fc:1c:65:20
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVv8Fy1OVbXNjnCIm5NVfaKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNjQxZmM5MDNkNWI0Y2M5NzE2NDkzMjRhNGIzNGU0Zjgy
NDIyYzUwHhcNMjMwMTAyMDA0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzJiN2M0YWYwMTI4MTA5OWFjNGIzNzI3YjBhM2M2OWNkMGUyY2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIRmLJRBgMfdaZinHm3cXinIWG4X
vQTT6tLn3PDxP4RTxXA0Gp9WmVE822t48S7p/maYwPJ2q4+SmE5hccbYSpqRTchZ
JCmaTezwfRiF9KHc16483Gq1HpAznnKB7I4qmhyolUmHBxw2zz990aq8QZoiF4X2
+mtO0UJeacgYioqD4b4joBG127KzGHlzYTC8Swfvp6R6OCBpmOxLBSXMMHrmATRT
xP6HwHNgdCNEGWzdRYKNYn9wilwlBEMTGh9DgwLYIF4HMrhmC9XchvWT0QpTa4QR
w+Gr+1yKC7Z90SMf75jTTr3yfco3IasdT0tQORkJaXlXlaWff1sD5rb07wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOcrfErwEoEJmsSzcnsKPGnNDiyrMB8GA1UdIwQY
MBaAFNtkH8kD1bTMlxZJMkpLNOT4JCLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzkt
N2ZlZTU5MWEyMDljLzEvNXl0OFN2QVNnUW1heExOeWV3bzhhYzBPTEtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzktN2ZlZTU5MWEyMDlj
LzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUKzeMA8E
AgACMAkDBwAgAUzAgAAwDQYJKoZIhvcNAQELBQADggEBAH1KaeHGZbsLcaR+grUu
Vt6gTyIinkJeKALGZPs5Fjc2UCcckvTy6G3s5sRBk3yCkqARoSe7Aj0qImqlrAa7
vTowseTwkFuWI+TBdIgGOJjGr6pQCWwR+mMleXTpt0gcY9iHQak+AL9Q20G0yVoZ
tDdFu25t3Do/MfsfwVeKFPvxEsJF6YBb/lLB6ub7CfjD9gtaVWNlY8XT+PPJ875T
7uzwQftSz2rAymlPLq8aSf84fDBZjhZBPZBjNmrBRCUfEHG/MYDAuKo3llB2U+Lp
B8ds+tWtr4Als1fiBX/flAc0vPSuCiDAvA1czSw8xb/5iFvFC2nNHJL9EYSQy/wc
ZSA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:05 2024 by rpki-client on console-fra.rpki-client.org