Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/YA6BY_MvSOc5zNgpRcfTRuGV20s.roa
File: YA6BY_MvSOc5zNgpRcfTRuGV20s.roa (raw, json)
Hash identifier: r8LQNksFNzn9GV9KDBz1Rm8yJcjSFKa0UphtqxpyWuA=
Subject key identifier: 60:0E:81:63:F3:2F:48:E7:39:CC:D8:29:45:C7:D3:46:E1:95:DB:4B
Certificate issuer: /CN=340729dc607b486c324d9114de45242a12e4b5ba
Certificate serial: 01856B9361686193C8FF55BC6468D534582D
Authority key identifier: 34:07:29:DC:60:7B:48:6C:32:4D:91:14:DE:45:24:2A:12:E4:B5:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAcp3GB7SGwyTZEU3kUkKhLktbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/YA6BY_MvSOc5zNgpRcfTRuGV20s.roa
Signing time: Sun 01 Jan 2023 04:24:58 +0000
ROA not before: Sun 01 Jan 2023 04:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206236
IP address blocks: 195.245.66.0/24 maxlen: 24
2a10:1a40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:61:68:61:93:c8:ff:55:bc:64:68:d5:34:58:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340729dc607b486c324d9114de45242a12e4b5ba
Validity
Not Before: Jan 1 04:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=600e8163f32f48e739ccd82945c7d346e195db4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:11:86:41:07:8f:4f:79:48:75:0e:87:fe:
8d:f5:80:11:4f:be:0c:73:03:60:ee:45:1c:6f:9f:
bc:12:42:ad:bd:89:36:f9:eb:ba:5c:2a:8d:ec:6c:
e3:72:5c:49:0b:59:89:4e:c3:d2:3f:56:c9:a9:90:
21:06:e8:00:92:6b:ef:01:89:33:6e:1e:ce:ec:db:
b5:c6:74:bf:29:88:f0:ed:6b:c6:48:76:92:ac:0e:
99:38:cd:9e:a7:c0:41:d0:b5:14:a7:2f:1e:5f:f0:
b7:1c:ef:93:42:d8:09:69:42:03:9f:c6:e2:cc:98:
50:01:67:16:16:51:d7:e7:4e:10:db:e0:4a:5d:91:
84:65:60:19:65:c6:18:3a:3b:94:d9:80:a7:57:e5:
47:46:14:29:b2:d9:02:34:8a:ed:6b:20:8b:e8:aa:
05:18:7b:3e:71:ad:c3:47:31:9a:72:79:3c:ff:dc:
90:0a:7b:0a:72:a5:59:fb:da:64:ae:42:bd:65:21:
d1:48:c9:c6:7b:aa:6d:68:a2:0f:c2:53:c4:db:6c:
02:83:a7:64:fd:39:6f:b0:83:d1:ab:ef:a6:e9:0b:
7c:31:61:09:82:8e:d2:21:3f:cb:77:5c:4d:da:6b:
05:ef:ba:b7:c8:b4:45:95:a9:d4:d0:5a:05:4d:42:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0E:81:63:F3:2F:48:E7:39:CC:D8:29:45:C7:D3:46:E1:95:DB:4B
X509v3 Authority Key Identifier:
keyid:34:07:29:DC:60:7B:48:6C:32:4D:91:14:DE:45:24:2A:12:E4:B5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAcp3GB7SGwyTZEU3kUkKhLktbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/YA6BY_MvSOc5zNgpRcfTRuGV20s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/NAcp3GB7SGwyTZEU3kUkKhLktbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.66.0/24
IPv6:
2a10:1a40::/29
Signature Algorithm: sha256WithRSAEncryption
31:81:b8:02:81:db:db:3b:86:1e:72:37:03:d7:98:c8:62:cc:
76:65:ac:83:91:d3:d3:16:10:3e:08:13:a1:7b:b3:42:43:45:
cb:45:8b:03:aa:6d:e9:7e:f8:36:5a:fc:8a:a3:01:ea:06:38:
35:81:87:29:d5:02:22:95:2b:f2:a8:8e:64:32:ee:57:cb:8a:
34:70:f8:75:35:cc:43:96:76:53:7e:51:87:0f:34:7e:2a:31:
c2:e1:1e:3b:70:ca:29:b3:1e:cb:2b:c4:51:bd:2c:e0:2b:13:
ab:89:44:f9:8f:2c:d5:5f:0e:9c:3c:84:3c:07:81:ff:ff:ed:
f6:e0:40:b2:03:19:cc:b8:b0:a7:48:9e:53:1a:94:f8:7c:2c:
d8:22:da:52:5b:a8:63:ad:06:b5:5e:df:a6:9d:c9:42:d0:cf:
d3:4b:9a:51:bf:0b:d4:49:b2:53:51:cb:6f:bc:43:25:50:ea:
ab:7d:12:58:6e:b3:ff:b0:57:53:e2:5e:30:c3:98:b5:05:d6:
d5:63:8a:f3:b9:1a:d2:a0:8c:76:7d:f6:94:1b:05:0d:e0:a6:
d8:83:a3:19:a1:e2:22:46:85:46:86:84:c1:99:d4:55:7a:3d:
1f:c3:9c:4a:e4:5c:c1:81:85:c1:af:61:13:f2:0c:f1:a7:49:
e4:16:be:54
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVrk2FoYZPI/1W8ZGjVNFgtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDcyOWRjNjA3YjQ4NmMzMjRkOTExNGRlNDUyNDJhMTJl
NGI1YmEwHhcNMjMwMTAxMDQyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDBlODE2M2YzMmY0OGU3MzljY2Q4Mjk0NWM3ZDM0NmUxOTVkYjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb0RhkEHj095SHUOh/6N9YART74M
cwNg7kUcb5+8EkKtvYk2+eu6XCqN7GzjclxJC1mJTsPSP1bJqZAhBugAkmvvAYkz
bh7O7Nu1xnS/KYjw7WvGSHaSrA6ZOM2ep8BB0LUUpy8eX/C3HO+TQtgJaUIDn8bi
zJhQAWcWFlHX504Q2+BKXZGEZWAZZcYYOjuU2YCnV+VHRhQpstkCNIrtayCL6KoF
GHs+ca3DRzGacnk8/9yQCnsKcqVZ+9pkrkK9ZSHRSMnGe6ptaKIPwlPE22wCg6dk
/TlvsIPRq++m6Qt8MWEJgo7SIT/Ld1xN2msF77q3yLRFlanU0FoFTUIclwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGAOgWPzL0jnOczYKUXH00bhldtLMB8GA1UdIwQY
MBaAFDQHKdxge0hsMk2RFN5FJCoS5LW6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFjcDNHQjdTR3d5VFpFVTNrVWtLaExrdGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80ZmUwZWMtNjFiMy00N2MyLTljMjkt
ZTRjZmJjYzhiOGQwLzEvWUE2QllfTXZTT2M1ek5ncFJjZlRSdUdWMjBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi80ZmUwZWMtNjFiMy00N2MyLTljMjktZTRjZmJjYzhiOGQw
LzEvTkFjcDNHQjdTR3d5VFpFVTNrVWtLaExrdGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw/VCMA0E
AgACMAcDBQMqEBpAMA0GCSqGSIb3DQEBCwUAA4IBAQAxgbgCgdvbO4YecjcD15jI
Ysx2ZayDkdPTFhA+CBOhe7NCQ0XLRYsDqm3pfvg2WvyKowHqBjg1gYcp1QIilSvy
qI5kMu5Xy4o0cPh1NcxDlnZTflGHDzR+KjHC4R47cMopsx7LK8RRvSzgKxOriUT5
jyzVXw6cPIQ8B4H//+324ECyAxnMuLCnSJ5TGpT4fCzYItpSW6hjrQa1Xt+mnclC
0M/TS5pRvwvUSbJTUctvvEMlUOqrfRJYbrP/sFdT4l4ww5i1BdbVY4rzuRrSoIx2
ffaUGwUN4KbYg6MZoeIiRoVGhoTBmdRVej0fw5xK5FzBgYXBr2ET8gzxp0nkFr5U
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:29 2024 by rpki-client on console.sobornost.net