Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/YS2SgDyw_I4gZ2PpasnzUvzHxNo.roa
File: YS2SgDyw_I4gZ2PpasnzUvzHxNo.roa (raw, json)
Hash identifier: 7+t6CwEKZ/JiZjyKR/27R9po0PwslA/31mDPGQ6RXmc=
Subject key identifier: 61:2D:92:80:3C:B0:FC:8E:20:67:63:E9:6A:C9:F3:52:FC:C7:C4:DA
Certificate issuer: /CN=8044244bf5c2e84685dbd212f3216a82ffae0f09
Certificate serial: 018570E76C14247A9BEA04361E4103C1552E
Authority key identifier: 80:44:24:4B:F5:C2:E8:46:85:DB:D2:12:F3:21:6A:82:FF:AE:0F:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEQkS_XC6EaF29IS8yFqgv-uDwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/YS2SgDyw_I4gZ2PpasnzUvzHxNo.roa
Signing time: Mon 02 Jan 2023 05:14:52 +0000
ROA not before: Mon 02 Jan 2023 05:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49173
IP address blocks: 194.146.28.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:6c:14:24:7a:9b:ea:04:36:1e:41:03:c1:55:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8044244bf5c2e84685dbd212f3216a82ffae0f09
Validity
Not Before: Jan 2 05:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=612d92803cb0fc8e206763e96ac9f352fcc7c4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:69:d3:45:bf:44:4b:2a:dc:3a:33:37:26:27:
3f:57:43:31:a2:eb:57:bd:23:73:19:c9:b6:0c:36:
cf:ea:ec:61:ed:69:49:a7:2e:1c:31:0e:eb:00:15:
ca:e1:55:6b:b2:b3:9a:30:02:91:12:53:45:d8:6f:
3e:9d:f1:c3:fd:e8:a7:cd:5a:9f:2d:d4:d3:c0:f2:
b8:f8:e4:27:b0:fe:49:3b:22:78:d8:f1:ef:5d:16:
5b:c7:ac:80:f1:f5:31:6f:8c:0a:7c:34:5b:57:d8:
4b:23:18:84:4f:4b:64:2d:4e:92:1d:fc:aa:8e:88:
90:f7:85:bc:65:ec:68:06:7d:a0:5c:d3:af:48:5c:
be:2d:98:1b:53:68:69:89:08:f3:0f:2b:5c:cc:48:
d3:79:9f:9a:95:eb:2b:29:bc:72:35:33:56:77:16:
af:ce:1f:0b:2e:89:56:90:bf:c3:c0:9a:04:63:75:
97:41:7c:0c:50:74:2f:3d:33:9d:30:ee:9b:63:7d:
fb:91:77:80:c3:f3:3f:15:01:77:06:32:8a:e1:21:
7a:c0:e8:4f:83:35:11:a5:62:fb:c5:53:04:f3:39:
7d:a1:cc:c8:ce:d5:6c:36:f5:75:a5:10:00:7c:61:
b2:bc:b0:fb:7d:32:fd:1e:64:a5:7c:0f:86:59:bc:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2D:92:80:3C:B0:FC:8E:20:67:63:E9:6A:C9:F3:52:FC:C7:C4:DA
X509v3 Authority Key Identifier:
keyid:80:44:24:4B:F5:C2:E8:46:85:DB:D2:12:F3:21:6A:82:FF:AE:0F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEQkS_XC6EaF29IS8yFqgv-uDwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/YS2SgDyw_I4gZ2PpasnzUvzHxNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/gEQkS_XC6EaF29IS8yFqgv-uDwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.28.0/22
Signature Algorithm: sha256WithRSAEncryption
53:5b:3e:7d:ca:d6:8a:69:d5:13:57:05:e3:35:10:6d:4c:a1:
04:7e:6a:82:22:41:52:db:88:79:cc:cb:fd:59:a4:ae:27:69:
3b:df:b6:d0:fd:31:51:3d:fc:a6:f8:08:35:5b:05:ed:8b:a6:
8e:7c:d4:3e:7e:56:a7:c1:e9:45:e6:b5:3e:f4:e4:db:05:79:
1d:7d:15:2f:03:1a:40:0b:0d:2d:cc:38:6c:ed:b4:c7:6b:c1:
d4:2f:dc:ff:87:53:32:fc:22:c6:33:f3:78:a3:c6:12:00:d1:
1c:ce:4d:e2:af:c6:8a:34:77:77:20:18:bf:e4:38:ad:a3:4d:
25:fa:d4:28:c9:c9:3d:57:da:35:fe:b8:57:4e:c5:af:d7:cf:
25:d3:0f:4b:d7:1e:3a:df:23:5d:b6:e5:64:ff:c8:94:0f:91:
81:5a:d1:95:07:3f:70:7e:ab:bd:f9:1c:2f:08:60:bb:2b:fe:
6b:4b:74:97:70:b5:65:c7:80:83:ba:0d:b1:05:e0:9f:0d:89:
55:47:2e:e4:3b:27:7b:d1:56:44:09:8e:dc:ee:e7:20:a6:74:
85:79:5d:7d:77:ba:46:46:75:4b:20:27:b7:af:3f:78:14:13:
5e:17:b1:89:00:2b:06:50:d4:ca:a3:d2:7d:3c:60:28:61:c8:
9b:cf:f0:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw52wUJHqb6gQ2HkEDwVUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNDQyNDRiZjVjMmU4NDY4NWRiZDIxMmYzMjE2YTgyZmZh
ZTBmMDkwHhcNMjMwMTAyMDUxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTJkOTI4MDNjYjBmYzhlMjA2NzYzZTk2YWM5ZjM1MmZjYzdjNGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimnTRb9ESyrcOjM3Jic/V0MxoutX
vSNzGcm2DDbP6uxh7WlJpy4cMQ7rABXK4VVrsrOaMAKRElNF2G8+nfHD/einzVqf
LdTTwPK4+OQnsP5JOyJ42PHvXRZbx6yA8fUxb4wKfDRbV9hLIxiET0tkLU6SHfyq
joiQ94W8ZexoBn2gXNOvSFy+LZgbU2hpiQjzDytczEjTeZ+alesrKbxyNTNWdxav
zh8LLolWkL/DwJoEY3WXQXwMUHQvPTOdMO6bY337kXeAw/M/FQF3BjKK4SF6wOhP
gzURpWL7xVME8zl9oczIztVsNvV1pRAAfGGyvLD7fTL9HmSlfA+GWbzL+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGEtkoA8sPyOIGdj6WrJ81L8x8TaMB8GA1UdIwQY
MBaAFIBEJEv1wuhGhdvSEvMhaoL/rg8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0VRa1NfWEM2RWFGMjlJUzh5RnFndi11RHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kYmUzMmYtODZkYy00MGM4LWE4OTMt
MWQ4NGU5MDkyZTUyLzEvWVMyU2dEeXdfSTRnWjJQcGFzbnpVdnpIeE5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kYmUzMmYtODZkYy00MGM4LWE4OTMtMWQ4NGU5MDkyZTUy
LzEvZ0VRa1NfWEM2RWFGMjlJUzh5RnFndi11RHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwpIcMA0G
CSqGSIb3DQEBCwUAA4IBAQBTWz59ytaKadUTVwXjNRBtTKEEfmqCIkFS24h5zMv9
WaSuJ2k737bQ/TFRPfym+Ag1WwXti6aOfNQ+flanwelF5rU+9OTbBXkdfRUvAxpA
Cw0tzDhs7bTHa8HUL9z/h1My/CLGM/N4o8YSANEczk3ir8aKNHd3IBi/5Dito00l
+tQoyck9V9o1/rhXTsWv188l0w9L1x463yNdtuVk/8iUD5GBWtGVBz9wfqu9+Rwv
CGC7K/5rS3SXcLVlx4CDug2xBeCfDYlVRy7kOyd70VZECY7c7ucgpnSFeV19d7pG
RnVLICe3rz94FBNeF7GJACsGUNTKo9J9PGAoYcibz/BM
-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:02 2024 by rpki-client on console.sobornost.net