Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/YTP803aXYR4jAOr9GoZsPc6GRB0.roa
File: YTP803aXYR4jAOr9GoZsPc6GRB0.roa (raw, json)
Hash identifier: ljvIL7dC/NJVaSJyH950WJdZmgfRwyIWlBFBxu2M3sc=
Subject key identifier: 61:33:FC:D3:76:97:61:1E:23:00:EA:FD:1A:86:6C:3D:CE:86:44:1D
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018A5AC28927C79BCE8A4F124C0D36720C35
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/YTP803aXYR4jAOr9GoZsPc6GRB0.roa
Signing time: Sun 03 Sep 2023 11:16:52 +0000
ROA not before: Sun 03 Sep 2023 11:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197730
IP address blocks: 45.130.181.0/24 maxlen: 24
45.130.183.0/24 maxlen: 24
45.130.182.0/24 maxlen: 24
45.130.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5a:c2:89:27:c7:9b:ce:8a:4f:12:4c:0d:36:72:0c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Sep 3 11:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6133fcd37697611e2300eafd1a866c3dce86441d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:f7:65:3f:33:c9:4e:d4:0f:b1:7c:b9:9d:
68:97:5f:cf:d3:ba:95:8e:d6:f2:b1:c8:be:70:de:
c3:7e:43:0b:62:f1:6d:a7:76:7a:8a:25:73:db:62:
38:56:94:ea:25:76:58:02:6c:71:1e:8d:1f:80:86:
9a:69:f9:3a:b4:1f:80:81:71:d8:81:20:ac:d8:ff:
46:57:f5:fb:37:93:09:d8:27:77:22:e6:80:25:99:
5f:05:e4:16:b7:7a:b1:8a:38:66:93:4d:e9:75:40:
c3:ff:7d:75:0b:1e:1a:49:7a:7a:8c:f8:ec:cf:bc:
20:72:ef:00:42:2a:6d:9b:ab:86:57:2b:f7:7e:2e:
03:00:9c:57:a2:1e:d4:74:3f:4d:ac:ff:21:d5:f3:
aa:a4:62:02:5a:cb:ff:89:51:76:23:26:05:49:1e:
97:37:5c:fb:d9:22:ce:41:43:30:fa:0a:ab:5e:84:
63:a3:9f:27:de:ab:9c:39:ad:52:f6:a1:1a:e1:3d:
5b:c0:25:87:74:f5:46:09:46:fd:6e:9c:b3:6b:7d:
1f:0c:ab:5a:6e:29:aa:e0:fe:d2:74:2a:17:28:44:
c3:40:3f:a9:ef:1b:76:e5:b2:d9:fe:69:3a:a3:ea:
03:8e:77:70:22:cb:05:c4:cd:7c:71:6a:ab:86:bf:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:33:FC:D3:76:97:61:1E:23:00:EA:FD:1A:86:6C:3D:CE:86:44:1D
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/YTP803aXYR4jAOr9GoZsPc6GRB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.180.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:62:7e:32:2c:b9:7e:4f:65:45:b5:48:6d:4a:ef:1c:d1:46:
58:0f:6b:f9:e2:f8:3d:f1:80:59:bf:68:eb:ab:7f:c0:9e:4f:
bb:99:ac:1f:20:25:50:e7:4f:02:7a:fe:cd:41:c4:b9:6d:e8:
b7:45:ad:57:09:d9:05:ba:42:60:a1:0b:d0:7f:68:85:7b:8e:
b5:0e:33:c7:82:ad:46:41:be:32:ca:f7:4d:f4:70:97:98:3d:
0c:96:50:c1:c3:96:8b:84:72:94:93:c3:ec:4a:f7:7c:80:8d:
0d:23:7e:86:66:16:df:d0:cf:73:1a:32:44:75:8b:22:10:06:
1f:1f:b1:a3:d4:2e:e9:87:82:a8:05:60:e4:84:01:fd:df:82:
64:0c:f2:f5:5d:ff:28:95:ab:be:35:19:e3:02:1e:13:5c:69:
89:d8:ca:9e:cd:38:1c:63:45:68:5a:88:2a:d1:b2:be:4d:70:
fd:88:a0:8a:3b:46:5d:f8:12:c4:c9:72:6c:99:02:ab:a5:23:
6a:9d:0e:ee:f7:7c:22:f5:f5:67:90:1d:a0:69:ba:30:f0:a8:
76:3d:99:44:f5:4b:20:14:e2:5f:60:d5:44:0d:c1:d0:8d:8f:
ba:71:22:61:e1:e4:29:01:cf:fa:92:0c:5a:c9:d9:34:9f:59:
5b:c8:12:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpawoknx5vOik8STA02cgw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjMwOTAzMTExNjUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTMzZmNkMzc2OTc2MTFlMjMwMGVhZmQxYTg2NmMzZGNlODY0NDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO73ZT8zyU7UD7F8uZ1ol1/P07qV
jtbysci+cN7DfkMLYvFtp3Z6iiVz22I4VpTqJXZYAmxxHo0fgIaaafk6tB+AgXHY
gSCs2P9GV/X7N5MJ2Cd3IuaAJZlfBeQWt3qxijhmk03pdUDD/311Cx4aSXp6jPjs
z7wgcu8AQiptm6uGVyv3fi4DAJxXoh7UdD9NrP8h1fOqpGICWsv/iVF2IyYFSR6X
N1z72SLOQUMw+gqrXoRjo58n3qucOa1S9qEa4T1bwCWHdPVGCUb9bpyza30fDKta
bimq4P7SdCoXKETDQD+p7xt25bLZ/mk6o+oDjndwIssFxM18cWqrhr8/pwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGEz/NN2l2EeIwDq/RqGbD3OhkQdMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvWVRQODAzYVhZUjRqQU9yOUdvWnNQYzZHUkIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYK0MA0G
CSqGSIb3DQEBCwUAA4IBAQAaYn4yLLl+T2VFtUhtSu8c0UZYD2v54vg98YBZv2jr
q3/Ank+7mawfICVQ508Cev7NQcS5bei3Ra1XCdkFukJgoQvQf2iFe461DjPHgq1G
Qb4yyvdN9HCXmD0MllDBw5aLhHKUk8PsSvd8gI0NI36GZhbf0M9zGjJEdYsiEAYf
H7Gj1C7ph4KoBWDkhAH934JkDPL1Xf8olau+NRnjAh4TXGmJ2MqezTgcY0VoWogq
0bK+TXD9iKCKO0Zd+BLEyXJsmQKrpSNqnQ7u93wi9fVnkB2gabow8Kh2PZlE9Usg
FOJfYNVEDcHQjY+6cSJh4eQpAc/6kgxaydk0n1lbyBLg
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:48 2023 by rpki-client on console.sobornost.net