Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/yuxoIjbMDtMCMU2cyf8AoQz1o5w.roa
File: yuxoIjbMDtMCMU2cyf8AoQz1o5w.roa (raw, json)
Hash identifier: Tmqb37FJQ5qGVpSfFAmKapkIJTGDElU9dODtcQ5KZOU=
Subject key identifier: CA:EC:68:22:36:CC:0E:D3:02:31:4D:9C:C9:FF:00:A1:0C:F5:A3:9C
Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial: 0193E89E2C2256003A3C2359C73643A206DF
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/yuxoIjbMDtMCMU2cyf8AoQz1o5w.roa
Signing time: Sat 21 Dec 2024 09:48:20 +0000
ROA not before: Sat 21 Dec 2024 09:48:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200287
IP address blocks: 80.243.233.0/24 maxlen: 24
80.243.234.0/24 maxlen: 24
80.243.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Dec 2024 20:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e8:9e:2c:22:56:00:3a:3c:23:59:c7:36:43:a2:06:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Validity
Not Before: Dec 21 09:48:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=caec682236cc0ed302314d9cc9ff00a10cf5a39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:63:a1:ed:67:d2:33:3c:73:01:34:fb:a3:cb:
7c:70:41:08:0c:7f:d6:99:05:24:4c:50:96:c8:b7:
93:8c:7a:41:ee:88:b3:ee:04:b8:68:cf:5a:de:25:
15:99:ea:15:ff:96:35:7a:7e:b9:d6:47:00:43:c6:
71:40:77:e9:19:c0:1c:d2:7a:44:17:0d:3b:50:58:
d4:8d:95:3c:3d:3e:93:c9:e7:5f:cd:1e:ad:88:95:
ef:ad:f2:c8:13:a5:4a:8d:87:04:79:eb:80:a6:3c:
a4:ec:0e:fe:6b:eb:fe:21:0b:6e:fc:2f:f4:3d:06:
2a:e8:fc:b8:83:ab:b6:23:f7:8b:76:82:cc:8d:52:
3a:46:9e:b1:5e:cd:33:14:52:09:3b:fa:28:4d:74:
8f:c0:6d:5d:d7:99:a4:5d:7a:31:13:00:03:88:7a:
6d:a7:b1:3c:01:10:a1:a3:1b:06:92:e1:ff:28:5f:
f8:1c:f5:08:6c:a7:d0:1c:de:b2:c1:a9:ea:91:7a:
9e:44:36:d3:d3:fc:60:47:a0:90:ea:9b:9f:bb:2f:
39:5a:ae:f3:83:a1:1d:92:f4:62:66:7d:ed:7f:f1:
a5:fb:f8:9a:bf:1d:62:c5:a8:27:32:05:39:4e:a4:
4f:2b:f6:f3:72:06:58:b4:57:0d:95:28:dc:d4:5e:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EC:68:22:36:CC:0E:D3:02:31:4D:9C:C9:FF:00:A1:0C:F5:A3:9C
X509v3 Authority Key Identifier:
keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/yuxoIjbMDtMCMU2cyf8AoQz1o5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.233.0-80.243.235.255
Signature Algorithm: sha256WithRSAEncryption
58:10:dc:94:c4:df:8b:35:d9:50:8c:44:26:96:bf:d7:78:b4:
8b:03:0d:3c:26:25:60:2b:17:c0:3b:d2:12:f5:92:cb:aa:2a:
b5:d1:2a:67:a1:f5:ae:85:0b:e3:07:19:8e:62:9d:25:48:0f:
a8:cb:ba:ea:93:57:8e:31:bb:c2:dc:e5:63:09:3f:f3:37:ac:
a1:55:5b:fe:d1:9b:c2:20:77:4b:3f:67:70:ec:4d:0c:40:33:
19:c6:1d:4e:7f:f4:07:54:28:3c:5f:be:af:e3:5a:57:97:74:
9d:fa:a1:83:f7:9c:a7:80:8b:68:9b:15:20:bd:06:4b:78:5d:
f9:b9:48:23:c6:94:16:61:ba:04:28:a3:7b:2a:1a:f1:80:65:
70:0b:b0:df:d4:e9:0f:30:69:1f:d5:d0:b4:76:bb:2d:72:08:
70:ea:a7:0f:a4:5b:71:95:57:be:08:07:22:9b:82:8c:e8:2f:
f7:ad:c1:e7:64:61:60:92:09:5b:e0:4b:54:80:d3:88:f2:70:
fb:81:d3:a5:3c:b3:b9:61:8b:bf:5b:0a:09:36:af:ff:c5:a5:
52:04:11:d6:00:bb:ca:52:ca:7e:d1:8d:be:27:a2:13:c9:55:
fb:50:a4:64:4c:58:b8:29:1a:76:32:7f:7a:3e:2c:15:17:44:
f3:db:70:80
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZPoniwiVgA6PCNZxzZDogbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMzIyNGM1MDE3ZDM0ZWNkYzI4ZDBjZjM2NDQyZDY1YmVm
OWUwYTAwHhcNMjQxMjIxMDk0ODIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWVjNjgyMjM2Y2MwZWQzMDIzMTRkOWNjOWZmMDBhMTBjZjVhMzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12Oh7WfSMzxzATT7o8t8cEEIDH/W
mQUkTFCWyLeTjHpB7oiz7gS4aM9a3iUVmeoV/5Y1en651kcAQ8ZxQHfpGcAc0npE
Fw07UFjUjZU8PT6TyedfzR6tiJXvrfLIE6VKjYcEeeuApjyk7A7+a+v+IQtu/C/0
PQYq6Py4g6u2I/eLdoLMjVI6Rp6xXs0zFFIJO/ooTXSPwG1d15mkXXoxEwADiHpt
p7E8ARChoxsGkuH/KF/4HPUIbKfQHN6ywanqkXqeRDbT0/xgR6CQ6pufuy85Wq7z
g6EdkvRiZn3tf/Gl+/iavx1ixagnMgU5TqRPK/bzcgZYtFcNlSjc1F7rUQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMrsaCI2zA7TAjFNnMn/AKEM9aOcMB8GA1UdIwQY
MBaAFKIyJMUBfTTs3CjQzzZELWW++eCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTkt
ZmVjOGE4MGVkMjMzLzEveXV4b0lqYk1EdE1DTVUyY3lmOEFvUXoxbzV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTktZmVjOGE4MGVkMjMz
LzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABQ8+kD
BAJQ8+gwDQYJKoZIhvcNAQELBQADggEBAFgQ3JTE34s12VCMRCaWv9d4tIsDDTwm
JWArF8A70hL1ksuqKrXRKmeh9a6FC+MHGY5inSVID6jLuuqTV44xu8Lc5WMJP/M3
rKFVW/7Rm8Igd0s/Z3DsTQxAMxnGHU5/9AdUKDxfvq/jWleXdJ36oYP3nKeAi2ib
FSC9Bkt4Xfm5SCPGlBZhugQoo3sqGvGAZXALsN/U6Q8waR/V0LR2uy1yCHDqpw+k
W3GVV74IByKbgozoL/etwedkYWCSCVvgS1SA04jycPuB06U8s7lhi79bCgk2r//F
pVIEEdYAu8pSyn7Rjb4nohPJVftQpGRMWLgpGnYyf3o+LBUXRPPbcIA=
-----END CERTIFICATE-----
Generated at Sat May 3 01:20:32 2025 by rpki-client