Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/YT2eyhGEEgy41xuVMMde3-4UEA8.roa
File: YT2eyhGEEgy41xuVMMde3-4UEA8.roa (raw, json)
Hash identifier: dcUrqjhCyO/8U665+rIVcITjCsd+zdAK1mvYdPZjh8A=
Subject key identifier: 61:3D:9E:CA:11:84:12:0C:B8:D7:1B:95:30:C7:5E:DF:EE:14:10:0F
Certificate issuer: /CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Certificate serial: 0185719570FBFC1F1D4DFC62D3369A75D28C
Authority key identifier: FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/YT2eyhGEEgy41xuVMMde3-4UEA8.roa
Signing time: Mon 02 Jan 2023 08:24:57 +0000
ROA not before: Mon 02 Jan 2023 08:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49801
IP address blocks: 185.166.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:70:fb:fc:1f:1d:4d:fc:62:d3:36:9a:75:d2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Validity
Not Before: Jan 2 08:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=613d9eca1184120cb8d71b9530c75edfee14100f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:2a:5f:5d:79:43:eb:31:7f:9d:77:35:b2:
37:46:5a:aa:90:fa:0b:a8:46:5c:3d:be:38:87:f8:
b9:cd:83:82:ca:cb:b6:8d:f2:9f:1b:28:33:92:f0:
06:ff:35:c0:79:08:13:04:f7:31:94:49:80:57:30:
71:b9:85:d3:c4:b0:18:6b:72:d2:4a:f4:95:55:55:
ce:89:79:2e:73:8a:53:0e:ff:d0:dc:79:27:66:f3:
17:44:c1:89:c6:46:e8:52:96:93:39:b3:46:42:7c:
ba:d2:da:6c:22:6e:c9:ba:5b:54:8c:36:87:46:dc:
37:08:d0:f0:3f:96:5f:5d:6f:cf:9f:98:e2:ab:20:
a0:c7:c4:a5:6a:7f:c5:99:c0:92:d6:65:3e:65:ed:
ef:3d:08:23:05:78:ba:39:0e:23:23:9f:5b:93:95:
ef:75:5b:a2:f4:07:ca:3a:c8:89:c2:a4:47:0b:e7:
0c:07:14:39:2e:94:ed:b8:43:fc:69:99:23:b4:fb:
65:43:23:eb:d4:ec:79:a7:cb:52:1d:c2:67:51:f6:
35:b0:2d:1b:83:f3:ed:59:60:03:b8:f7:a5:b8:72:
55:6f:99:7e:1c:71:8a:12:f1:bb:02:37:e3:d3:e3:
07:41:fb:7a:6e:ff:94:c7:e9:40:91:4d:5c:eb:e3:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3D:9E:CA:11:84:12:0C:B8:D7:1B:95:30:C7:5E:DF:EE:14:10:0F
X509v3 Authority Key Identifier:
keyid:FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/YT2eyhGEEgy41xuVMMde3-4UEA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.106.0/24
Signature Algorithm: sha256WithRSAEncryption
49:55:a2:3f:ae:46:19:86:23:69:bb:28:44:3a:ea:0d:9c:49:
f7:50:04:9c:ac:e7:60:7e:c8:bd:ef:88:5c:93:db:e1:02:d0:
a3:4c:9d:e2:26:51:96:c1:ed:ca:aa:6e:4d:ab:55:d7:37:6e:
db:52:fe:95:22:52:fc:ce:88:56:a2:2e:97:24:c7:8f:7c:af:
04:40:7f:f2:71:4b:ab:ee:72:d3:2d:7f:8f:60:f3:cf:d8:fb:
2d:af:69:0a:62:8a:51:06:a6:d8:44:1c:31:c5:72:75:58:85:
02:9f:91:89:0f:a9:dc:7b:f0:3c:66:e4:83:c1:86:e6:59:b1:
5d:58:58:ea:6c:63:65:4b:93:9b:40:a7:51:a4:1b:40:c3:5f:
f5:17:01:12:2e:34:89:2f:95:ef:16:63:90:4f:d2:e9:d8:2b:
71:79:1d:c3:f2:5f:43:c5:02:c6:7c:92:35:b8:d3:ed:ee:21:
9c:ae:27:b0:18:8b:6c:ef:a8:86:90:59:1b:77:18:bc:76:dc:
c5:a9:d6:9b:7f:86:23:d8:2a:41:6b:23:fa:8b:21:32:1b:b3:
c1:68:a0:45:c0:b5:f1:8a:ca:d7:3b:8b:5d:e8:90:04:23:84:
16:84:7a:6e:f0:9c:3b:ce:e9:43:e6:44:0a:c8:e9:c2:7c:90:
74:65:33:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxlXD7/B8dTfxi0zaaddKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOWJlNGVkNGU1NGI2MDFlNmI2YTQyZDBiYTA0Y2ZiN2Fi
MmMzYmYwHhcNMjMwMTAyMDgyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTNkOWVjYTExODQxMjBjYjhkNzFiOTUzMGM3NWVkZmVlMTQxMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCYqX115Q+sxf513NbI3RlqqkPoL
qEZcPb44h/i5zYOCysu2jfKfGygzkvAG/zXAeQgTBPcxlEmAVzBxuYXTxLAYa3LS
SvSVVVXOiXkuc4pTDv/Q3HknZvMXRMGJxkboUpaTObNGQny60tpsIm7JultUjDaH
Rtw3CNDwP5ZfXW/Pn5jiqyCgx8Slan/FmcCS1mU+Ze3vPQgjBXi6OQ4jI59bk5Xv
dVui9AfKOsiJwqRHC+cMBxQ5LpTtuEP8aZkjtPtlQyPr1Ox5p8tSHcJnUfY1sC0b
g/PtWWADuPeluHJVb5l+HHGKEvG7Ajfj0+MHQft6bv+Ux+lAkU1c6+NtowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGE9nsoRhBIMuNcblTDHXt/uFBAPMB8GA1UdIwQY
MBaAFPyb5O1OVLYB5rakLQugTPt6ssO/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0p2azdVNVV0Z0htdHFRdEM2Qk0tM3F5dzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zNjM2MmEtZDkxYy00YWQ0LTkyYzct
MWQyNTEzMzA4ZDIxLzEvWVQyZXloR0VFZ3k0MXh1Vk1NZGUzLTRVRUE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8zNjM2MmEtZDkxYy00YWQ0LTkyYzctMWQyNTEzMzA4ZDIx
LzEvX0p2azdVNVV0Z0htdHFRdEM2Qk0tM3F5dzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaZqMA0G
CSqGSIb3DQEBCwUAA4IBAQBJVaI/rkYZhiNpuyhEOuoNnEn3UAScrOdgfsi974hc
k9vhAtCjTJ3iJlGWwe3Kqm5Nq1XXN27bUv6VIlL8zohWoi6XJMePfK8EQH/ycUur
7nLTLX+PYPPP2Pstr2kKYopRBqbYRBwxxXJ1WIUCn5GJD6nce/A8ZuSDwYbmWbFd
WFjqbGNlS5ObQKdRpBtAw1/1FwESLjSJL5XvFmOQT9Lp2CtxeR3D8l9DxQLGfJI1
uNPt7iGcriewGIts76iGkFkbdxi8dtzFqdabf4Yj2CpBayP6iyEyG7PBaKBFwLXx
isrXO4td6JAEI4QWhHpu8Jw7zulD5kQKyOnCfJB0ZTPT
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:37 2024 by rpki-client on console.sobornost.net