Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/YnYxD-gRMFrc2vSrMcXyBWxi9xk.roa
File: YnYxD-gRMFrc2vSrMcXyBWxi9xk.roa (raw, json)
Hash identifier: dA94du7aYUZql4pjHGUhPI61QX7aUEDxzRkGWYAVIdE=
Subject key identifier: 62:76:31:0F:E8:11:30:5A:DC:DA:F4:AB:31:C5:F2:05:6C:62:F7:19
Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial: 01857228059E8CE2C2EB1351E662ECDB14B5
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/YnYxD-gRMFrc2vSrMcXyBWxi9xk.roa
Signing time: Mon 02 Jan 2023 11:05:03 +0000
ROA not before: Mon 02 Jan 2023 11:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34903
IP address blocks: 45.130.208.0/22 maxlen: 24
2a0e:c240::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:05:9e:8c:e2:c2:eb:13:51:e6:62:ec:db:14:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Validity
Not Before: Jan 2 11:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6276310fe811305adcdaf4ab31c5f2056c62f719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1b:0a:62:89:40:99:c2:6d:68:b8:b3:04:ea:
9d:8d:ea:26:06:56:47:8e:0e:23:f2:68:33:f9:c3:
84:de:d9:dc:a2:de:37:f7:60:1d:0c:28:6e:f8:bb:
82:25:45:c1:da:bc:59:3b:49:ef:8c:2f:22:74:a4:
e4:93:4e:3a:24:0a:e1:d8:a9:5f:3a:f5:0c:3f:e1:
7b:d9:6f:fe:53:20:d9:54:bd:07:33:fb:f0:f4:64:
94:61:c0:2e:9f:be:1b:67:31:e2:e8:25:64:72:bd:
a9:6c:59:75:31:f2:c1:1e:17:f6:d4:3e:57:a2:ad:
80:97:ba:ca:6e:ca:62:d3:9f:9e:f3:94:c0:20:cb:
af:9b:63:64:98:59:14:f2:2a:bd:67:23:a9:b8:fb:
ab:00:63:72:68:7a:1c:7f:f9:f6:1c:a9:32:73:9c:
57:29:ff:6f:c8:4b:a5:04:3c:db:aa:61:75:49:8d:
b8:ca:cb:b6:db:88:1d:e5:2c:eb:9c:ff:6c:df:c0:
f5:ab:d4:59:75:63:1b:1a:b5:03:d2:77:a7:e6:23:
06:40:06:a2:36:13:8e:8a:30:e7:b1:e2:18:1a:39:
57:5c:8a:07:d1:c7:51:45:26:c8:ff:26:fd:ee:c8:
35:34:17:3b:d4:32:46:74:e4:30:62:84:51:6c:bd:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:76:31:0F:E8:11:30:5A:DC:DA:F4:AB:31:C5:F2:05:6C:62:F7:19
X509v3 Authority Key Identifier:
keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/YnYxD-gRMFrc2vSrMcXyBWxi9xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.208.0/22
IPv6:
2a0e:c240::/29
Signature Algorithm: sha256WithRSAEncryption
02:18:7d:e4:b3:7f:dd:b2:23:7d:2b:8d:8d:bd:97:c9:d9:45:
67:36:dc:07:17:d7:8f:5e:da:9c:71:13:d9:c7:df:30:bd:78:
f1:0c:d0:23:07:54:7a:c0:2f:c7:2b:2d:0d:64:99:10:b8:35:
14:26:a6:c2:2e:2e:99:41:3b:f1:a1:ef:db:3d:81:8c:c5:eb:
ad:02:9c:1f:db:9c:87:d5:83:8d:2c:44:f5:ff:71:23:38:2c:
4d:3f:7c:5e:cc:76:04:f0:75:26:fd:17:ef:0b:f7:f4:2f:84:
b6:aa:52:ed:68:33:e1:55:fb:db:18:57:35:b2:8b:7a:17:d6:
a5:10:02:48:c5:1a:ff:6a:f9:0c:f1:0f:36:81:b6:e1:a6:0b:
ea:6c:a7:e5:80:16:d5:2a:87:4a:49:a8:fa:35:2b:1d:00:6f:
f1:4b:b3:3a:dc:18:8b:49:c2:86:26:20:0e:ea:97:6a:2e:b0:
7d:c7:37:d8:a2:e3:71:83:42:98:41:20:7b:62:e3:03:f0:7a:
06:b8:0a:9c:b5:e2:28:bf:32:bf:2a:2b:7c:be:43:a6:2f:20:
ba:57:0a:df:7a:0e:20:08:f8:4b:1a:a7:31:28:56:a3:f7:98:
6e:eb:8c:f0:26:cb:3d:f0:28:5f:4d:59:76:a0:1e:87:f3:ec:
7e:62:9b:32
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVyKAWejOLC6xNR5mLs2xS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMDhlMTY4Nzg3NDRiODhiODQyMDNlZWZlMmQ3N2E4N2Rh
YjkwYjEwHhcNMjMwMTAyMTEwNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Mjc2MzEwZmU4MTEzMDVhZGNkYWY0YWIzMWM1ZjIwNTZjNjJmNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hsKYolAmcJtaLizBOqdjeomBlZH
jg4j8mgz+cOE3tncot4392AdDChu+LuCJUXB2rxZO0nvjC8idKTkk046JArh2Klf
OvUMP+F72W/+UyDZVL0HM/vw9GSUYcAun74bZzHi6CVkcr2pbFl1MfLBHhf21D5X
oq2Al7rKbspi05+e85TAIMuvm2NkmFkU8iq9ZyOpuPurAGNyaHocf/n2HKkyc5xX
Kf9vyEulBDzbqmF1SY24ysu224gd5SzrnP9s38D1q9RZdWMbGrUD0nen5iMGQAai
NhOOijDnseIYGjlXXIoH0cdRRSbI/yb97sg1NBc71DJGdOQwYoRRbL2iNwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGJ2MQ/oETBa3Nr0qzHF8gVsYvcZMB8GA1UdIwQY
MBaAFHsI4Wh4dEuIuEID7v4td6h9q5CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDIt
YTE4YzA2ZWM1MmU4LzEvWW5ZeEQtZ1JNRnJjMnZTck1jWHlCV3hpOXhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDItYTE4YzA2ZWM1MmU4
LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYLQMA0E
AgACMAcDBQMqDsJAMA0GCSqGSIb3DQEBCwUAA4IBAQACGH3ks3/dsiN9K42NvZfJ
2UVnNtwHF9ePXtqccRPZx98wvXjxDNAjB1R6wC/HKy0NZJkQuDUUJqbCLi6ZQTvx
oe/bPYGMxeutApwf25yH1YONLET1/3EjOCxNP3xezHYE8HUm/RfvC/f0L4S2qlLt
aDPhVfvbGFc1sot6F9alEAJIxRr/avkM8Q82gbbhpgvqbKflgBbVKodKSaj6NSsd
AG/xS7M63BiLScKGJiAO6pdqLrB9xzfYouNxg0KYQSB7YuMD8HoGuAqcteIovzK/
Kit8vkOmLyC6Vwrfeg4gCPhLGqcxKFaj95hu64zwJss98ChfTVl2oB6H8+x+Ypsy
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:17:11 2024 by rpki-client on console.sobornost.net