Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/yKTWdR5hXHt1709YhBMvG8kIKYU.roa
File: yKTWdR5hXHt1709YhBMvG8kIKYU.roa (raw, json)
Hash identifier: kk8HlrQrd1yR35FfJGZcZTtMJIiNAI6AtIHjn/IOAGI=
Subject key identifier: C8:A4:D6:75:1E:61:5C:7B:75:EF:4F:58:84:13:2F:1B:C9:08:29:85
Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial: 01856D8AB152784AD028C4BD7779E349F92F
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/yKTWdR5hXHt1709YhBMvG8kIKYU.roa
Signing time: Sun 01 Jan 2023 13:34:43 +0000
ROA not before: Sun 01 Jan 2023 13:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35489
IP address blocks: 93.93.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:b1:52:78:4a:d0:28:c4:bd:77:79:e3:49:f9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Validity
Not Before: Jan 1 13:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8a4d6751e615c7b75ef4f5884132f1bc9082985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:11:fa:d5:55:69:25:81:55:65:7d:bb:02:
c4:86:1e:31:68:a8:be:13:9e:28:8a:f0:23:07:4c:
e1:7b:b9:f2:74:31:73:0f:96:dd:1d:b2:8e:07:b9:
f7:fc:c3:b2:a0:d0:d9:36:16:bd:de:a4:f3:7f:66:
a8:69:9b:fb:b4:2f:1e:d3:c7:05:fd:ff:71:38:6e:
88:5f:12:90:1c:39:15:0f:fb:7d:0a:a0:6c:7e:10:
e7:61:d8:2d:86:a2:68:3c:3c:c9:87:80:92:ca:92:
f4:7d:44:9c:d2:03:90:21:3a:f5:7f:34:0e:51:0f:
23:b4:50:32:12:3c:a4:15:83:6e:00:51:79:9a:47:
e9:09:49:48:60:ff:b7:ea:43:21:70:c2:fd:73:6e:
60:81:b3:10:ad:8b:bd:7a:02:c5:ad:83:33:73:51:
01:16:96:9f:a1:b9:6c:e7:f5:3e:9a:bb:c3:ed:ba:
ac:c5:b0:38:b3:4e:39:3f:a9:fd:df:69:20:86:0b:
1b:a4:cb:b2:8e:6c:90:44:da:f2:18:7e:28:07:71:
ab:83:f2:f0:5b:50:d7:99:91:33:2e:70:1e:cd:15:
d4:fd:f2:2a:9b:95:2b:d0:9e:8a:cb:d4:a6:69:de:
70:37:02:3a:65:1d:63:f1:a4:fb:c0:50:95:02:17:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A4:D6:75:1E:61:5C:7B:75:EF:4F:58:84:13:2F:1B:C9:08:29:85
X509v3 Authority Key Identifier:
keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/yKTWdR5hXHt1709YhBMvG8kIKYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.9.0/24
Signature Algorithm: sha256WithRSAEncryption
84:bd:87:4a:f4:24:4e:ec:70:d6:1b:88:0a:14:2c:77:cb:02:
8b:e2:e6:98:d8:36:9e:b8:16:5f:84:36:7d:f2:83:ba:68:f5:
ad:a3:22:8a:2d:87:e1:01:98:f1:05:93:a4:2f:10:d1:c5:f8:
3d:f0:2f:f2:47:f1:16:af:e3:d6:7c:70:3b:c1:95:bd:d7:d1:
70:1c:74:17:93:97:9d:db:93:59:b2:e5:81:47:96:3b:b4:d2:
12:41:5a:f3:93:93:e5:55:7a:8d:a6:b3:84:1d:0a:f4:4c:67:
c5:06:70:ac:3e:71:b8:c0:4f:98:8f:b6:1b:07:6a:fa:66:a6:
0b:b2:54:20:2b:77:df:2b:c7:91:15:7b:67:a6:7d:c4:08:27:
6f:66:70:28:64:2d:e0:4e:8f:a4:8a:f4:df:5f:1e:d1:61:cb:
62:69:8d:46:fb:db:23:60:b7:63:ff:00:98:1a:c2:3b:55:3c:
5a:f1:25:d6:92:ec:54:16:1e:3f:c8:35:3d:35:f3:3a:84:24:
c0:49:67:bf:84:83:93:70:f4:79:ce:99:94:b8:01:a8:bd:ee:
a3:e5:67:15:58:0e:98:81:eb:11:ee:37:a9:84:1b:29:30:35:
55:30:cf:27:6b:7e:1c:ab:31:69:d4:ec:2c:82:f4:e9:27:d2:
0a:7d:e8:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtirFSeErQKMS9d3njSfkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlY2M0Y2YzNzI0MWNlZDE0NjdjOTE4YWEyNzZkMzg4YjBh
ODJlZDUwHhcNMjMwMTAxMTMzNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGE0ZDY3NTFlNjE1YzdiNzVlZjRmNTg4NDEzMmYxYmM5MDgyOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mgR+tVVaSWBVWV9uwLEhh4xaKi+
E54oivAjB0zhe7nydDFzD5bdHbKOB7n3/MOyoNDZNha93qTzf2aoaZv7tC8e08cF
/f9xOG6IXxKQHDkVD/t9CqBsfhDnYdgthqJoPDzJh4CSypL0fUSc0gOQITr1fzQO
UQ8jtFAyEjykFYNuAFF5mkfpCUlIYP+36kMhcML9c25ggbMQrYu9egLFrYMzc1EB
Fpafobls5/U+mrvD7bqsxbA4s045P6n932kghgsbpMuyjmyQRNryGH4oB3Grg/Lw
W1DXmZEzLnAezRXU/fIqm5Ur0J6Ky9Smad5wNwI6ZR1j8aT7wFCVAhd/9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMik1nUeYVx7de9PWIQTLxvJCCmFMB8GA1UdIwQY
MBaAFO7MTPNyQc7RRnyRiqJ204iwqC7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYt
NWEzN2FmNDM5MDRjLzEveUtUV2RSNWhYSHQxNzA5WWhCTXZHOGtJS1lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYtNWEzN2FmNDM5MDRj
LzEvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV0JMA0G
CSqGSIb3DQEBCwUAA4IBAQCEvYdK9CRO7HDWG4gKFCx3ywKL4uaY2DaeuBZfhDZ9
8oO6aPWtoyKKLYfhAZjxBZOkLxDRxfg98C/yR/EWr+PWfHA7wZW919FwHHQXk5ed
25NZsuWBR5Y7tNISQVrzk5PlVXqNprOEHQr0TGfFBnCsPnG4wE+Yj7YbB2r6ZqYL
slQgK3ffK8eRFXtnpn3ECCdvZnAoZC3gTo+kivTfXx7RYctiaY1G+9sjYLdj/wCY
GsI7VTxa8SXWkuxUFh4/yDU9NfM6hCTASWe/hIOTcPR5zpmUuAGove6j5WcVWA6Y
gesR7jephBspMDVVMM8na34cqzFp1OwsgvTpJ9IKfeih
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:37 2024 by rpki-client on console-fra.rpki-client.org