Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/YsxiCiNw3vjg-8Z19O3G2FsNjks.roa
File: YsxiCiNw3vjg-8Z19O3G2FsNjks.roa (raw, json)
Hash identifier: Ps1nLwcgCBoMlkvCKyM6M79lXLgdonMBgafE6epKujo=
Subject key identifier: 62:CC:62:0A:23:70:DE:F8:E0:FB:C6:75:F4:ED:C6:D8:5B:0D:8E:4B
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 018C6D5DB216E89651EA517CFF432DD54215
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/YsxiCiNw3vjg-8Z19O3G2FsNjks.roa
Signing time: Fri 15 Dec 2023 12:05:06 +0000
ROA not before: Fri 15 Dec 2023 12:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51402
IP address blocks: 185.196.224.0/22 maxlen: 22
185.128.120.0/22 maxlen: 22
185.221.136.0/22 maxlen: 22
91.221.250.0/23 maxlen: 23
178.239.64.0/20 maxlen: 20
2a02:2760::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:5d:b2:16:e8:96:51:ea:51:7c:ff:43:2d:d5:42:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Dec 15 12:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62cc620a2370def8e0fbc675f4edc6d85b0d8e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:12:1c:b0:b8:c7:23:7b:6b:78:8d:2a:d7:
8c:db:c8:8c:37:4d:31:9c:fd:f8:b7:f1:7e:cb:63:
6e:c9:82:61:a5:c1:e0:72:96:27:18:13:f0:a5:a9:
18:2e:8c:a0:03:e2:4c:94:9c:00:f6:17:11:87:fb:
7f:79:63:c3:d5:ec:e5:95:7b:4c:72:67:32:16:c0:
48:91:c8:b8:ee:c3:d0:54:7e:5c:d3:22:b4:e5:bd:
84:86:ba:d5:3e:b3:2c:61:93:a5:0b:28:ac:de:13:
9c:5b:64:60:23:b4:63:06:c1:e4:5e:69:6f:a9:46:
00:11:fb:ea:d3:32:d4:c7:e5:2a:57:17:e8:f5:1b:
38:81:45:fe:23:10:78:3d:1a:80:d4:05:f7:ed:13:
40:30:59:4f:ca:cd:c1:ed:8f:64:b4:35:65:85:fd:
58:56:ea:d5:cd:a7:9c:17:99:61:47:ee:a3:24:f0:
7d:3a:8f:08:4b:8c:f9:51:03:fe:f1:d1:34:b3:d0:
a6:49:44:91:fb:a4:af:56:fc:74:a7:ca:ea:55:29:
cd:97:83:ae:c4:d6:6b:ae:87:12:f5:c2:95:70:71:
9e:8c:b9:c2:2f:2a:a8:34:68:72:c0:cc:c5:d1:22:
4b:29:ee:f1:1c:30:04:52:48:58:60:43:ac:6d:8a:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CC:62:0A:23:70:DE:F8:E0:FB:C6:75:F4:ED:C6:D8:5B:0D:8E:4B
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/YsxiCiNw3vjg-8Z19O3G2FsNjks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.250.0/23
178.239.64.0/20
185.128.120.0/22
185.196.224.0/22
185.221.136.0/22
IPv6:
2a02:2760::/32
Signature Algorithm: sha256WithRSAEncryption
cb:e4:47:8c:5c:32:89:92:50:37:11:63:56:2a:34:0c:8f:56:
a6:65:e6:b8:fa:ff:82:c3:08:7c:24:10:87:20:5a:b2:13:de:
c4:06:9c:d7:8f:de:a2:c0:1f:f4:2c:36:25:43:3b:ff:bc:46:
35:cd:7b:47:8d:72:a7:10:71:db:68:31:bb:24:2c:37:9e:7e:
46:49:64:ca:9b:4e:a0:42:9c:a9:f9:27:44:3d:89:62:7a:e1:
c8:79:90:ba:9f:7c:8e:43:d5:a8:06:97:a1:ae:73:67:46:33:
7e:20:e6:58:17:52:f3:2a:cd:60:77:7c:9e:03:6c:ee:78:9a:
59:6f:a8:a0:90:be:e6:89:52:55:26:f4:ea:6d:1d:a0:98:68:
2b:ac:8e:76:4a:e4:f1:e2:18:9b:67:f0:f6:22:e0:7a:5a:4f:
21:7c:c8:8f:97:32:ad:42:1f:48:3c:76:39:e3:1b:6f:77:39:
0a:2a:87:af:eb:51:2a:f6:ea:ce:a2:bd:fe:73:73:02:9d:eb:
ff:b8:70:86:3f:ea:33:13:1f:c6:ff:9e:98:d8:55:17:f6:18:
be:e3:a9:31:e2:59:70:3e:c8:2e:2f:dc:7f:bf:99:da:fe:49:
63:f0:e3:90:bf:f5:91:0e:5b:74:3e:bc:7f:61:97:c8:93:4d:
1c:4d:05:57
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYxtXbIW6JZR6lF8/0Mt1UIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOGRmOTk4MjRjZTY3YjBjYjVmODdmYzQ2NTk5ZTEzYWRl
YTU3MDIwHhcNMjMxMjE1MTIwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmNjNjIwYTIzNzBkZWY4ZTBmYmM2NzVmNGVkYzZkODViMGQ4ZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmASHLC4xyN7a3iNKteM28iMN00x
nP34t/F+y2NuyYJhpcHgcpYnGBPwpakYLoygA+JMlJwA9hcRh/t/eWPD1ezllXtM
cmcyFsBIkci47sPQVH5c0yK05b2EhrrVPrMsYZOlCyis3hOcW2RgI7RjBsHkXmlv
qUYAEfvq0zLUx+UqVxfo9Rs4gUX+IxB4PRqA1AX37RNAMFlPys3B7Y9ktDVlhf1Y
VurVzaecF5lhR+6jJPB9Oo8IS4z5UQP+8dE0s9CmSUSR+6SvVvx0p8rqVSnNl4Ou
xNZrrocS9cKVcHGejLnCLyqoNGhywMzF0SJLKe7xHDAEUkhYYEOsbYp4gwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFGLMYgojcN744PvGdfTtxthbDY5LMB8GA1UdIwQY
MBaAFEKN+Zgkzmewy1+H/EZZnhOt6lcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEt
ZjIyNzQ5NjVjMDk1LzEvWXN4aUNpTnczdmpnLThaMTlPM0cyRnNOamtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEtZjIyNzQ5NjVjMDk1
LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBW936AwQE
su9AAwQCuYB4AwQCucTgAwQCud2IMA0EAgACMAcDBQAqAidgMA0GCSqGSIb3DQEB
CwUAA4IBAQDL5EeMXDKJklA3EWNWKjQMj1amZea4+v+Cwwh8JBCHIFqyE97EBpzX
j96iwB/0LDYlQzv/vEY1zXtHjXKnEHHbaDG7JCw3nn5GSWTKm06gQpyp+SdEPYli
euHIeZC6n3yOQ9WoBpehrnNnRjN+IOZYF1LzKs1gd3yeA2zueJpZb6igkL7miVJV
JvTqbR2gmGgrrI52SuTx4hibZ/D2IuB6Wk8hfMiPlzKtQh9IPHY54xtvdzkKKoev
61Eq9urOor3+c3MCnev/uHCGP+ozEx/G/56Y2FUX9hi+46kx4llwPsguL9x/v5na
/klj8OOQv/WRDlt0Prx/YZfIk00cTQVX
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:17 2024 by rpki-client on console.sobornost.net