Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/yZElkFZ1Ge9GE5J6fqEuqXQKhTw.roa
File: yZElkFZ1Ge9GE5J6fqEuqXQKhTw.roa (raw, json)
Hash identifier: uDBQKgN8Is7mhCIQZNdPsw83/SJFAkqe/OPSVk6NRvU=
Subject key identifier: C9:91:25:90:56:75:19:EF:46:13:92:7A:7E:A1:2E:A9:74:0A:85:3C
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 01874BA7837394A3B0AC797B5BBE0F5C499D
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/yZElkFZ1Ge9GE5J6fqEuqXQKhTw.roa
Signing time: Tue 04 Apr 2023 09:44:42 +0000
ROA not before: Tue 04 Apr 2023 09:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211302
IP address blocks: 185.69.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:a7:83:73:94:a3:b0:ac:79:7b:5b:be:0f:5c:49:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Apr 4 09:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9912590567519ef4613927a7ea12ea9740a853c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:16:f7:70:17:83:5e:e1:df:2b:e1:06:a7:ce:
40:66:89:a9:d7:6d:72:b3:f4:df:a9:0f:4c:95:26:
ee:d8:48:01:72:81:9a:21:be:57:62:aa:c5:20:4c:
d2:df:f7:4e:ba:3c:c9:79:e2:69:96:38:78:0e:f2:
fe:7a:70:e1:3d:9c:94:0c:d8:ef:3a:8c:43:21:99:
a1:c4:7f:65:d9:27:1d:ab:89:71:02:d9:3f:ce:28:
d9:b8:1a:0b:80:1b:44:7d:07:cd:58:e9:19:62:26:
5a:4f:95:af:81:71:38:c0:83:0f:f4:6b:64:c5:01:
5d:22:f0:aa:a3:22:e7:b9:27:b0:0b:3f:83:1e:e0:
66:b7:a4:d2:af:1b:52:ab:97:36:1e:bb:d9:52:1f:
20:f2:91:b2:0a:c3:3b:eb:46:75:03:37:54:91:bb:
69:58:a5:09:40:d4:32:72:eb:7d:14:0d:74:34:04:
c0:29:db:d1:00:7f:b2:30:ee:71:17:29:e1:eb:c5:
3e:b1:87:b2:cc:e1:a9:34:f2:36:d5:63:f8:02:cc:
5d:53:5e:07:48:6c:36:d1:49:b3:f4:e0:a7:97:99:
4f:38:8b:8b:3f:60:b3:7f:de:da:c6:ec:64:09:61:
0a:7e:11:a9:c1:c6:fd:59:5c:8d:5f:ab:34:bb:b8:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:91:25:90:56:75:19:EF:46:13:92:7A:7E:A1:2E:A9:74:0A:85:3C
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/yZElkFZ1Ge9GE5J6fqEuqXQKhTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.0.0/24
Signature Algorithm: sha256WithRSAEncryption
36:79:d0:5e:4b:4c:fc:98:87:68:f8:b2:ad:cd:61:10:91:16:
aa:53:d7:b8:af:58:ac:40:2a:c6:5d:21:c5:44:79:5c:5c:ef:
dc:40:bd:65:f7:be:a2:60:49:5a:39:59:09:8d:6e:ec:29:e0:
23:5e:7d:e4:2e:84:b2:bd:54:b5:c2:b3:ee:58:b3:ef:b0:82:
97:a3:f6:bc:24:c1:6b:e4:3d:69:1d:7c:a5:d6:64:45:08:7f:
47:d2:3f:3b:fa:ef:2c:14:21:e6:09:09:25:86:ad:83:1c:7a:
bd:b5:de:b8:1f:47:37:7b:15:78:85:50:72:8f:52:3d:20:f6:
b3:fd:49:f8:b6:57:b5:f5:56:06:c6:7a:f1:14:c1:4e:85:80:
97:32:9b:8e:49:ce:91:09:32:49:f4:b1:89:39:77:e0:5a:94:
66:b5:d5:99:8b:5b:b6:4f:3a:d4:a0:7a:ef:e6:58:6c:6d:dd:
20:1f:1f:8e:43:ee:7b:6f:fd:89:31:79:be:cd:ac:e7:c0:1e:
83:8a:f2:f4:3d:02:c9:8a:f9:7a:59:e0:1e:a2:01:0a:dc:13:
b8:f4:21:74:27:48:2d:8c:08:61:b0:cf:88:c7:bb:64:05:75:
d0:a0:ca:4a:68:13:b3:11:ac:6c:20:40:00:eb:82:0d:16:0f:
9c:b2:17:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdLp4NzlKOwrHl7W74PXEmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3M2RkYmM0YmIzODFkYmVmMjRkMmZmOGI0ZTFmMjNmMmRk
ZjQwY2MwHhcNMjMwNDA0MDk0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTkxMjU5MDU2NzUxOWVmNDYxMzkyN2E3ZWExMmVhOTc0MGE4NTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRb3cBeDXuHfK+EGp85AZomp121y
s/TfqQ9MlSbu2EgBcoGaIb5XYqrFIEzS3/dOujzJeeJpljh4DvL+enDhPZyUDNjv
OoxDIZmhxH9l2Scdq4lxAtk/zijZuBoLgBtEfQfNWOkZYiZaT5WvgXE4wIMP9Gtk
xQFdIvCqoyLnuSewCz+DHuBmt6TSrxtSq5c2HrvZUh8g8pGyCsM760Z1AzdUkbtp
WKUJQNQycut9FA10NATAKdvRAH+yMO5xFynh68U+sYeyzOGpNPI21WP4AsxdU14H
SGw20Umz9OCnl5lPOIuLP2Czf97axuxkCWEKfhGpwcb9WVyNX6s0u7iG5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMmRJZBWdRnvRhOSen6hLql0CoU8MB8GA1UdIwQY
MBaAFEc928S7OB2+8k0v+LTh8j8t30DMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81NWJmOWYtMjQwZi00OWJiLWIzMGUt
NjA0YjIwMWU2NWY4LzEveVpFbGtGWjFHZTlHRTVKNmZxRXVxWFFLaFR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81NWJmOWYtMjQwZi00OWJiLWIzMGUtNjA0YjIwMWU2NWY4
LzEvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUUAMA0G
CSqGSIb3DQEBCwUAA4IBAQA2edBeS0z8mIdo+LKtzWEQkRaqU9e4r1isQCrGXSHF
RHlcXO/cQL1l976iYElaOVkJjW7sKeAjXn3kLoSyvVS1wrPuWLPvsIKXo/a8JMFr
5D1pHXyl1mRFCH9H0j87+u8sFCHmCQklhq2DHHq9td64H0c3exV4hVByj1I9IPaz
/Un4tle19VYGxnrxFMFOhYCXMpuOSc6RCTJJ9LGJOXfgWpRmtdWZi1u2TzrUoHrv
5lhsbd0gHx+OQ+57b/2JMXm+zaznwB6DivL0PQLJivl6WeAeogEK3BO49CF0J0gt
jAhhsM+Ix7tkBXXQoMpKaBOzEaxsIEAA64INFg+cshcO
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:25 2023 by rpki-client on console.sobornost.net