Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/Ye6JVT0BY3jGctTpC8-Noy5f7ak.roa
File: Ye6JVT0BY3jGctTpC8-Noy5f7ak.roa (raw, json)
Hash identifier: /mhz9T0Ohic/YSzb7gN8rQp9jlu17qwpU5QfeBiEeA8=
Subject key identifier: 61:EE:89:55:3D:01:63:78:C6:72:D4:E9:0B:CF:8D:A3:2E:5F:ED:A9
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 01856E2F9FE419F8BA79354E4F6135CA6625
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/Ye6JVT0BY3jGctTpC8-Noy5f7ak.roa
Signing time: Sun 01 Jan 2023 16:34:52 +0000
ROA not before: Sun 01 Jan 2023 16:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209295
IP address blocks: 193.228.229.0/24 maxlen: 24
2001:678:ea8::/48 maxlen: 48
2001:67c:1788::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:9f:e4:19:f8:ba:79:35:4e:4f:61:35:ca:66:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Jan 1 16:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61ee89553d016378c672d4e90bcf8da32e5feda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4f:b2:68:5e:f0:78:08:82:c9:ba:5c:49:36:
49:5a:75:a9:45:d1:1a:de:cb:82:4e:9d:64:63:f5:
de:63:0b:ad:b6:91:d7:c1:a0:7f:75:60:d9:e7:85:
ab:74:d1:40:ca:bf:89:58:a1:1e:6d:06:9b:2b:ab:
6c:b6:13:e0:b1:02:35:96:1b:4c:1b:71:b8:28:c3:
0f:d6:43:a3:a0:65:c8:66:25:0e:6b:6a:e6:29:fe:
70:85:70:d3:63:87:df:06:1e:ef:8d:2f:05:20:88:
f3:12:09:34:55:d4:f5:a3:4c:0e:f2:88:fa:18:67:
0a:49:41:b3:d4:44:e8:08:68:88:ae:20:57:9a:74:
08:61:87:85:e1:b3:d0:16:cd:02:1c:c0:11:66:ec:
2c:e5:aa:00:38:aa:2b:f8:b8:83:ae:6b:3f:9e:2d:
b6:2c:87:c1:78:5f:bb:49:5a:84:21:7a:11:1c:c6:
c7:83:3f:8b:b3:44:cd:f6:0e:c8:45:e6:03:2b:c5:
c5:12:b0:c2:6c:b2:c5:aa:23:ce:9e:1e:2e:87:40:
a1:d9:92:2f:bc:80:e7:39:d8:d5:db:17:d8:29:92:
84:8b:41:fe:14:85:f7:37:1e:eb:e4:db:d0:0a:99:
ea:b8:a9:4d:6c:e4:94:92:80:e2:ac:3c:3d:25:8f:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EE:89:55:3D:01:63:78:C6:72:D4:E9:0B:CF:8D:A3:2E:5F:ED:A9
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/Ye6JVT0BY3jGctTpC8-Noy5f7ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.229.0/24
IPv6:
2001:678:ea8::/48
2001:67c:1788::/48
Signature Algorithm: sha256WithRSAEncryption
0f:1f:e8:0f:34:20:ce:5b:19:af:fe:a4:14:fe:03:7b:49:96:
54:ee:64:41:d6:46:ac:0b:c8:85:89:37:b3:25:82:33:c5:c2:
c6:e5:dc:62:46:23:86:ae:c9:56:14:07:0e:35:31:b7:fb:8f:
82:db:9a:67:67:a6:84:1f:e9:b6:95:e6:ba:88:99:dd:3a:83:
74:df:f9:c4:51:04:07:ac:a3:f8:11:a5:09:5a:c4:7e:aa:d7:
9d:3b:b6:8b:aa:95:a6:58:96:23:2b:5e:3e:78:72:ad:6d:3c:
7a:70:fc:94:fc:ae:28:32:67:ff:e0:0a:d2:ef:f6:37:18:9e:
5e:e6:ed:2e:d8:b8:96:ce:21:c7:8f:c1:9e:cb:69:ca:58:db:
a6:10:9c:dd:43:51:60:07:e0:14:da:fe:43:77:14:56:da:d5:
2c:e8:d4:31:f4:36:5d:58:04:17:82:61:96:a5:cc:22:5f:3d:
2e:51:41:f6:62:fc:54:49:26:f8:ac:37:0f:6e:f2:4c:45:56:
a4:d0:e4:a9:34:78:49:94:cf:bf:a9:7c:3f:a4:c1:76:0a:9e:
47:d8:ce:33:0b:21:9c:ee:fe:56:37:db:d5:27:63:27:70:6e:
17:23:27:06:92:fb:e6:45:26:82:0d:5d:3a:d5:58:7c:1d:b7:
66:eb:2c:3e
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYVuL5/kGfi6eTVOT2E1ymYlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNzdhMzU2ZjA3ZTA3NGNhZTZmMjZlN2Y1ODkzZGNlOWRh
YzhhZDMwHhcNMjMwMTAxMTYzNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWVlODk1NTNkMDE2Mzc4YzY3MmQ0ZTkwYmNmOGRhMzJlNWZlZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0+yaF7weAiCybpcSTZJWnWpRdEa
3suCTp1kY/XeYwuttpHXwaB/dWDZ54WrdNFAyr+JWKEebQabK6tsthPgsQI1lhtM
G3G4KMMP1kOjoGXIZiUOa2rmKf5whXDTY4ffBh7vjS8FIIjzEgk0VdT1o0wO8oj6
GGcKSUGz1EToCGiIriBXmnQIYYeF4bPQFs0CHMARZuws5aoAOKor+LiDrms/ni22
LIfBeF+7SVqEIXoRHMbHgz+Ls0TN9g7IReYDK8XFErDCbLLFqiPOnh4uh0Ch2ZIv
vIDnOdjV2xfYKZKEi0H+FIX3Nx7r5NvQCpnquKlNbOSUkoDirDw9JY9MNwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFGHuiVU9AWN4xnLU6QvPjaMuX+2pMB8GA1UdIwQY
MBaAFKB3o1bwfgdMrm8m5/WJPc6drIrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yM2IzY2UtOTkyMi00MmZiLWExMjQt
NDgwOTNmYjZjNjdmLzEvWWU2SlZUMEJZM2pHY3RUcEM4LU5veTVmN2FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8yM2IzY2UtOTkyMi00MmZiLWExMjQtNDgwOTNmYjZjNjdm
LzEvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAweTlMBgE
AgACMBIDBwAgAQZ4DqgDBwAgAQZ8F4gwDQYJKoZIhvcNAQELBQADggEBAA8f6A80
IM5bGa/+pBT+A3tJllTuZEHWRqwLyIWJN7MlgjPFwsbl3GJGI4auyVYUBw41Mbf7
j4LbmmdnpoQf6baV5rqImd06g3Tf+cRRBAeso/gRpQlaxH6q1507touqlaZYliMr
Xj54cq1tPHpw/JT8rigyZ//gCtLv9jcYnl7m7S7YuJbOIcePwZ7LacpY26YQnN1D
UWAH4BTa/kN3FFba1Szo1DH0Nl1YBBeCYZalzCJfPS5RQfZi/FRJJvisNw9u8kxF
VqTQ5Kk0eEmUz7+pfD+kwXYKnkfYzjMLIZzu/lY329UnYydwbhcjJwaS++ZFJoIN
XTrVWHwdt2brLD4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:33 2024 by rpki-client on console-ams.rpki-client.org