Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/YtXvbvyU1kWYIZQWqn6kuv07FY8.roa
File: YtXvbvyU1kWYIZQWqn6kuv07FY8.roa (raw, json)
Hash identifier: E8LJ7rDjyhg2EJiuWrPjptPYXlYrOlc++DtjQYTrSUI=
Subject key identifier: 62:D5:EF:6E:FC:94:D6:45:98:21:94:16:AA:7E:A4:BA:FD:3B:15:8F
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 01856F14C6BAE449DFEC6A54CA01D658307A
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/YtXvbvyU1kWYIZQWqn6kuv07FY8.roa
Signing time: Sun 01 Jan 2023 20:45:10 +0000
ROA not before: Sun 01 Jan 2023 20:45:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60651
IP address blocks: 194.38.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:c6:ba:e4:49:df:ec:6a:54:ca:01:d6:58:30:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Jan 1 20:45:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62d5ef6efc94d64598219416aa7ea4bafd3b158f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d3:09:5f:90:a4:c9:59:89:f2:26:18:27:40:
1d:41:20:57:97:4e:18:48:01:c0:2a:2a:b9:b4:3e:
1d:4e:c2:be:56:16:d8:29:8b:79:31:d3:6c:64:5a:
49:eb:a9:81:f8:a0:28:a1:5f:e5:a9:0f:1e:e5:e6:
4e:3c:0d:45:13:51:66:85:c2:60:eb:96:78:cf:16:
71:f4:4e:c6:4d:ed:46:5c:09:c5:52:93:c0:e3:f6:
43:5a:51:94:2e:af:a1:03:4f:2c:fe:2d:5d:51:9a:
f4:c1:53:69:28:e7:da:82:1d:cd:af:a3:c8:fe:4e:
41:a1:20:2c:a9:17:b6:c9:11:3b:72:73:c4:5d:cd:
ed:89:51:69:e8:4b:9b:84:28:41:a5:a6:64:55:6e:
7e:7e:b6:c9:2e:fe:19:06:54:75:b4:5e:84:52:6f:
73:ad:73:a9:34:5e:fc:b2:b8:61:c8:14:a9:7a:f7:
35:e6:09:a5:c0:a8:94:87:87:8e:77:9d:ee:9c:1a:
d8:87:c9:3a:18:63:b4:45:15:bc:17:c8:30:0e:a4:
8f:72:1a:14:bf:3a:4a:f6:1e:86:18:1a:52:10:0e:
5b:18:fd:e8:f8:d5:c6:8c:31:7d:84:29:49:fd:5e:
c8:6c:65:dc:ab:31:48:49:b1:98:59:ac:48:5d:4a:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D5:EF:6E:FC:94:D6:45:98:21:94:16:AA:7E:A4:BA:FD:3B:15:8F
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/YtXvbvyU1kWYIZQWqn6kuv07FY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.8.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:b0:ab:41:40:a7:2d:35:8d:b5:9e:14:f9:24:4e:15:d0:89:
9c:de:a2:56:27:8b:71:cd:27:f6:27:69:78:90:47:cb:dc:2d:
bc:09:69:21:d6:08:3c:3f:3b:41:c7:0d:f7:5c:3c:8c:e6:d4:
13:90:0e:93:d0:8a:c0:78:b4:63:2c:e0:24:73:dd:61:4e:29:
80:03:55:00:d9:2d:fe:a8:60:0b:25:e6:62:55:72:fb:54:69:
9e:4b:4c:5f:84:4b:30:cd:8c:da:8c:48:b8:18:2c:65:a4:03:
40:de:ea:71:bf:d8:c7:43:db:ea:d2:8b:5f:70:11:68:3d:89:
40:0e:05:6b:45:8b:b9:6e:f0:a6:05:14:42:e5:28:68:c2:07:
5a:51:64:72:5a:a9:39:ae:13:34:9e:7e:7f:2f:d4:db:8f:21:
a5:59:09:69:30:0b:fb:84:62:69:40:a0:fa:cf:00:85:fa:a9:
09:1c:e4:4d:ae:12:f4:0b:37:c0:20:dc:9f:0d:03:2e:69:3c:
60:9d:8a:a6:fb:0d:d8:eb:b5:3f:d6:73:e2:2d:32:b1:8e:44:
fd:46:b0:bf:81:06:ec:f8:40:c9:1d:3b:f7:53:e2:b2:3b:39:
7e:d1:62:b1:cb:a5:d4:f7:1b:0c:e3:67:4e:57:ad:39:2a:05:
40:6e:dc:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvFMa65Enf7GpUygHWWDB6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MjA3Njk3ZDBiN2MyNDE5OWU2ZGQxMjgyYjQ5YjU2Y2Vm
MDI0NGYwHhcNMjMwMTAxMjA0NTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmQ1ZWY2ZWZjOTRkNjQ1OTgyMTk0MTZhYTdlYTRiYWZkM2IxNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9MJX5CkyVmJ8iYYJ0AdQSBXl04Y
SAHAKiq5tD4dTsK+VhbYKYt5MdNsZFpJ66mB+KAooV/lqQ8e5eZOPA1FE1FmhcJg
65Z4zxZx9E7GTe1GXAnFUpPA4/ZDWlGULq+hA08s/i1dUZr0wVNpKOfagh3Nr6PI
/k5BoSAsqRe2yRE7cnPEXc3tiVFp6EubhChBpaZkVW5+frbJLv4ZBlR1tF6EUm9z
rXOpNF78srhhyBSpevc15gmlwKiUh4eOd53unBrYh8k6GGO0RRW8F8gwDqSPchoU
vzpK9h6GGBpSEA5bGP3o+NXGjDF9hClJ/V7IbGXcqzFISbGYWaxIXUoEyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLV7278lNZFmCGUFqp+pLr9OxWPMB8GA1UdIwQY
MBaAFLggdpfQt8JBmebdEoK0m1bO8CRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjct
OTZkMzA0YzhkYjAyLzEvWXRYdmJ2eVUxa1dZSVpRV3FuNmt1djA3Rlk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjctOTZkMzA0YzhkYjAy
LzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiYIMA0G
CSqGSIb3DQEBCwUAA4IBAQC9sKtBQKctNY21nhT5JE4V0Imc3qJWJ4txzSf2J2l4
kEfL3C28CWkh1gg8PztBxw33XDyM5tQTkA6T0IrAeLRjLOAkc91hTimAA1UA2S3+
qGALJeZiVXL7VGmeS0xfhEswzYzajEi4GCxlpANA3upxv9jHQ9vq0otfcBFoPYlA
DgVrRYu5bvCmBRRC5ShowgdaUWRyWqk5rhM0nn5/L9TbjyGlWQlpMAv7hGJpQKD6
zwCF+qkJHORNrhL0CzfAINyfDQMuaTxgnYqm+w3Y67U/1nPiLTKxjkT9RrC/gQbs
+EDJHTv3U+KyOzl+0WKxy6XU9xsM42dOV605KgVAbtwI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org