Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/Y_LoSr2y23NeBrYC6Dj-xjvOUnY.roa
File: Y_LoSr2y23NeBrYC6Dj-xjvOUnY.roa (raw, json)
Hash identifier: B/IieTWOHMnqgtf5X+viQlhHX/aXu8phumE7Y1l3M2U=
Subject key identifier: 63:F2:E8:4A:BD:B2:DB:73:5E:06:B6:02:E8:38:FE:C6:3B:CE:52:76
Certificate issuer: /CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Certificate serial: 01856EB90F9ACB10B48C5179EAC0B5AD153B
Authority key identifier: 53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/Y_LoSr2y23NeBrYC6Dj-xjvOUnY.roa
Signing time: Sun 01 Jan 2023 19:04:59 +0000
ROA not before: Sun 01 Jan 2023 19:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12571
IP address blocks: 45.128.100.0/22 maxlen: 22
212.76.192.0/19 maxlen: 19
2a00:1d48::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Feb 2023 11:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:0f:9a:cb:10:b4:8c:51:79:ea:c0:b5:ad:15:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Validity
Not Before: Jan 1 19:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63f2e84abdb2db735e06b602e838fec63bce5276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:27:a8:d2:5d:c6:8a:45:8e:5b:94:e7:f5:
56:29:ab:a7:08:4c:fa:74:7f:87:2e:13:5e:3b:94:
06:60:91:13:5c:4d:51:1b:f5:19:f8:2b:8b:9a:19:
19:a7:cb:b2:a2:18:25:24:74:48:f9:ff:ad:f5:2c:
54:ad:cb:6f:e5:5a:9e:ca:e4:a8:e6:68:82:b7:d8:
35:4b:ce:c5:46:86:70:b1:f3:e7:84:5a:8d:78:38:
08:8f:3b:e0:c6:80:51:c7:8e:98:10:55:72:6c:b0:
96:a4:36:08:8b:9a:19:ba:ec:2e:99:86:a3:91:c4:
b9:c6:c1:59:c8:e0:98:b0:9c:6e:e9:d6:6d:4c:cf:
d9:de:f1:fb:9f:00:6a:a8:78:66:ec:5b:33:d7:ad:
3d:3e:73:0f:28:24:85:d2:1d:59:6e:7c:51:7a:1c:
3b:b9:75:2d:3c:33:09:7a:3a:cd:20:43:3a:84:fe:
07:76:fb:ba:b5:7d:3e:8b:3f:15:e0:7a:37:26:f9:
32:3d:64:1b:9b:d7:89:b7:d5:2b:ee:8a:df:e5:4e:
3d:9c:c4:e6:34:ce:a6:3e:bd:f6:47:d1:8d:ab:a6:
a6:56:ee:3e:c8:87:0a:0e:31:bc:65:bb:f8:f3:79:
28:d4:b2:0d:b3:e0:f5:c1:1f:da:28:9f:05:07:0f:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F2:E8:4A:BD:B2:DB:73:5E:06:B6:02:E8:38:FE:C6:3B:CE:52:76
X509v3 Authority Key Identifier:
keyid:53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/Y_LoSr2y23NeBrYC6Dj-xjvOUnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.100.0/22
212.76.192.0/19
IPv6:
2a00:1d48::/32
Signature Algorithm: sha256WithRSAEncryption
10:b6:56:fc:2b:b1:50:67:d8:f8:e6:e1:81:83:ad:d5:eb:ec:
6e:29:7f:c4:4e:dd:7c:ec:fd:14:fb:ee:50:74:53:5c:06:94:
b2:9e:13:a1:26:ed:2f:da:87:da:cb:e8:bd:d5:bb:62:7a:76:
ad:59:00:f9:ba:ac:9b:a4:7d:8e:78:70:75:29:21:fa:26:30:
ec:d8:02:11:1c:89:32:bf:1b:34:d3:09:d6:99:61:80:a3:22:
64:0a:77:94:f1:06:61:6c:17:01:f9:50:e7:c8:f2:65:e5:b9:
9c:65:7c:eb:78:45:d2:d9:39:0c:50:cc:27:0c:b3:18:8f:93:
3b:41:e5:1e:3d:1e:a6:a5:ac:8b:1d:71:5d:a0:e2:75:2b:db:
71:94:61:3f:99:5d:1b:67:23:0d:ba:bc:6f:e1:a6:79:89:50:
47:0c:9f:2a:f9:f7:70:c3:56:bf:f3:7a:43:36:f4:0f:12:a5:
07:67:b0:6b:57:0b:3a:44:a1:b3:a0:72:c9:d0:57:29:2b:07:
61:d7:32:a8:b8:46:3f:d8:71:7d:12:d8:4d:dd:4c:b7:6d:35:
c0:b0:ed:ab:6d:ae:e4:ce:bd:c8:6b:04:14:1a:ee:78:54:c2:
f0:ba:9a:07:23:57:39:db:d9:68:f7:c4:48:c4:b4:d3:27:d3:
d9:b6:bf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:04 2024 by rpki-client on console-ams.rpki-client.org