Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ynT0gfWtxiUHS2vBWXb2NMMA5Mo.roa
File: ynT0gfWtxiUHS2vBWXb2NMMA5Mo.roa (raw, json)
Hash identifier: +twr43W+VQ2ASK5HK+AJnOZMsXs0YKqFrPRNpzwG8i4=
Subject key identifier: CA:74:F4:81:F5:AD:C6:25:07:4B:6B:C1:59:76:F6:34:C3:00:E4:CA
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018905784E795AAC820113C1586D8EE8D801
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ynT0gfWtxiUHS2vBWXb2NMMA5Mo.roa
Signing time: Thu 29 Jun 2023 04:45:17 +0000
ROA not before: Thu 29 Jun 2023 04:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
193.93.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:05:78:4e:79:5a:ac:82:01:13:c1:58:6d:8e:e8:d8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 29 04:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca74f481f5adc625074b6bc15976f634c300e4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:3a:e9:32:cd:ae:c8:66:cf:67:43:72:26:
41:d9:5f:29:27:36:5e:55:3b:86:2a:a4:b5:66:b2:
b1:e7:56:18:7b:42:df:bd:4c:e2:11:4c:ec:55:ff:
21:15:c4:9c:86:4c:13:65:f1:9f:18:e6:12:67:0e:
04:fb:9c:ae:66:3c:04:a7:4b:94:5d:3e:8d:c4:3d:
c7:3f:36:d4:b8:fd:3d:c0:15:8f:65:13:e4:69:05:
64:63:1d:2a:e4:20:d3:98:1f:3e:56:05:e1:f7:ed:
02:3d:e2:45:84:36:68:24:20:93:b6:fe:60:98:3d:
99:d8:cc:d0:f0:fb:1f:a1:c7:11:c1:cf:61:bd:fd:
58:8b:1e:61:3b:0f:bf:23:16:ba:a6:cd:13:2d:d4:
0a:89:7e:3c:5e:b3:af:94:00:33:19:67:6d:31:d9:
ee:39:4b:6e:6f:ac:b1:a3:09:21:9c:af:59:cd:7a:
7f:f2:22:57:eb:b1:5f:9b:f5:f8:39:30:8c:64:f4:
bb:3e:93:07:bd:04:68:97:d8:4f:f2:47:9a:50:27:
9a:49:bc:0d:cc:de:9d:c9:f5:4a:21:07:f8:b6:89:
b5:eb:6a:34:d3:37:53:06:64:2e:38:2e:17:bd:d1:
c6:1d:9d:22:14:5a:9a:a8:17:d5:24:4e:d1:a7:ed:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:74:F4:81:F5:AD:C6:25:07:4B:6B:C1:59:76:F6:34:C3:00:E4:CA
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ynT0gfWtxiUHS2vBWXb2NMMA5Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
193.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e0:87:fc:91:18:40:77:a5:a7:07:a1:fe:44:34:54:8a:f0:
d1:c9:fc:7a:da:2f:7e:48:83:50:62:d7:31:d9:eb:4d:37:17:
dc:09:d1:e5:2d:4a:49:1e:48:73:8a:ba:1a:da:91:c2:5f:00:
80:37:39:2e:e1:7e:b7:80:9f:f2:c6:fd:0d:da:97:4c:0e:e7:
8b:c9:aa:24:99:8a:d9:03:7e:c5:b8:4a:b5:00:ea:a8:d1:cd:
ae:e0:7e:83:b3:29:e5:8d:ba:5b:0f:71:00:16:4e:60:12:9e:
f8:e6:70:14:77:fe:b9:ee:33:f8:3d:95:98:17:da:2b:bd:91:
4c:40:07:4e:fa:d5:8b:23:79:e0:9d:67:27:40:8a:65:61:1f:
b8:46:dc:e8:1b:a2:cc:2f:6a:5b:14:53:47:2d:e0:4d:3c:6e:
71:64:28:bd:ba:38:74:2a:28:0a:09:26:63:06:2e:fd:7b:90:
1a:4a:b4:ce:77:99:1f:6c:da:c0:4b:45:53:e3:4a:16:be:5f:
bc:1b:94:d5:5e:98:15:f8:bf:0e:9b:b8:ee:bd:ae:ce:10:80:
a1:78:0e:ab:0a:ab:1c:f7:bb:38:f0:63:0e:36:0c:4d:e3:c4:
41:79:6a:51:48:09:a9:1f:78:f9:2a:8c:62:1d:3b:75:5d:dc:
10:ba:9a:c8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkFeE55WqyCARPBWG2O6NgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwNjI5MDQ0NTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTc0ZjQ4MWY1YWRjNjI1MDc0YjZiYzE1OTc2ZjYzNGMzMDBlNGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/s66TLNrshmz2dDciZB2V8pJzZe
VTuGKqS1ZrKx51YYe0LfvUziEUzsVf8hFcSchkwTZfGfGOYSZw4E+5yuZjwEp0uU
XT6NxD3HPzbUuP09wBWPZRPkaQVkYx0q5CDTmB8+VgXh9+0CPeJFhDZoJCCTtv5g
mD2Z2MzQ8PsfoccRwc9hvf1Yix5hOw+/Ixa6ps0TLdQKiX48XrOvlAAzGWdtMdnu
OUtub6yxowkhnK9ZzXp/8iJX67Ffm/X4OTCMZPS7PpMHvQRol9hP8keaUCeaSbwN
zN6dyfVKIQf4tom162o00zdTBmQuOC4XvdHGHZ0iFFqaqBfVJE7Rp+3tewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMp09IH1rcYlB0trwVl29jTDAOTKMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEveW5UMGdmV3R4aVVIUzJ2QldYYjJOTU1BNU1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXouAwQA
wV00MA0GCSqGSIb3DQEBCwUAA4IBAQCI4If8kRhAd6WnB6H+RDRUivDRyfx62i9+
SINQYtcx2etNNxfcCdHlLUpJHkhziroa2pHCXwCANzku4X63gJ/yxv0N2pdMDueL
yaokmYrZA37FuEq1AOqo0c2u4H6DsynljbpbD3EAFk5gEp745nAUd/657jP4PZWY
F9orvZFMQAdO+tWLI3ngnWcnQIplYR+4RtzoG6LML2pbFFNHLeBNPG5xZCi9ujh0
KigKCSZjBi79e5AaSrTOd5kfbNrAS0VT40oWvl+8G5TVXpgV+L8Om7juva7OEICh
eA6rCqsc97s48GMONgxN48RBeWpRSAmpH3j5KoxiHTt1XdwQuprI
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:47 2023 by rpki-client on console.sobornost.net