Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/YqM-gYqjor0Mv-FsFruejXlQ-7U.roa
File: YqM-gYqjor0Mv-FsFruejXlQ-7U.roa (raw, json)
Hash identifier: DXxWyGthTS17L7rCLpc4E/FlAfiKGKsgNosm1K2JGYg=
Subject key identifier: 62:A3:3E:81:8A:A3:A2:BD:0C:BF:E1:6C:16:BB:9E:8D:79:50:FB:B5
Certificate issuer: /CN=5d83b5a67d92ffa8476c9321aa7bf6d4a20d3dab
Certificate serial: 018570303AA56F5BEA1B435EDDE86DB48E9B
Authority key identifier: 5D:83:B5:A6:7D:92:FF:A8:47:6C:93:21:AA:7B:F6:D4:A2:0D:3D:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYO1pn2S_6hHbJMhqnv21KINPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/YqM-gYqjor0Mv-FsFruejXlQ-7U.roa
Signing time: Mon 02 Jan 2023 01:54:46 +0000
ROA not before: Mon 02 Jan 2023 01:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34367
IP address blocks: 195.245.106.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:3a:a5:6f:5b:ea:1b:43:5e:dd:e8:6d:b4:8e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d83b5a67d92ffa8476c9321aa7bf6d4a20d3dab
Validity
Not Before: Jan 2 01:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62a33e818aa3a2bd0cbfe16c16bb9e8d7950fbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:e9:06:3e:04:b0:41:8e:4c:da:7d:32:e4:
4e:ce:44:41:4a:03:10:ce:8d:60:c3:0d:3f:e6:20:
20:3e:16:e4:90:c7:66:e4:1d:cc:a2:0a:e8:13:64:
a8:c2:6c:f4:17:64:44:5d:41:80:8b:3f:78:c5:e1:
98:39:8d:f9:d4:50:6f:4e:da:09:88:4a:d6:40:cf:
1b:cb:38:b3:7f:10:3f:05:f5:77:da:d9:35:a7:78:
37:d8:3c:ea:36:e5:20:c8:44:63:50:31:4a:b1:be:
6a:36:87:1c:b5:ff:a8:a3:4a:21:27:dc:95:2a:85:
37:e7:7e:dd:62:e4:25:8e:84:32:ee:7c:8c:9e:53:
36:a8:ad:12:2d:d0:96:d6:0b:6c:41:8c:56:84:21:
9e:ec:45:51:42:0f:33:30:36:ba:33:b1:a0:08:c8:
76:92:db:73:b6:77:9c:c0:a5:21:e0:00:a9:e8:b4:
48:76:a0:e2:29:3d:db:3d:47:60:18:75:1b:a2:22:
b4:1c:27:51:2b:97:8f:88:be:8a:1d:cd:29:b3:10:
5c:1b:1e:0a:84:e4:fa:e9:56:b2:18:40:c5:57:cf:
00:19:0a:72:0a:0a:4c:75:ce:f4:8e:ed:f6:23:3e:
ef:b2:f5:2e:89:50:8c:b5:c4:8e:21:cd:4c:e6:f5:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A3:3E:81:8A:A3:A2:BD:0C:BF:E1:6C:16:BB:9E:8D:79:50:FB:B5
X509v3 Authority Key Identifier:
keyid:5D:83:B5:A6:7D:92:FF:A8:47:6C:93:21:AA:7B:F6:D4:A2:0D:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYO1pn2S_6hHbJMhqnv21KINPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/YqM-gYqjor0Mv-FsFruejXlQ-7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.106.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:2d:60:e7:fe:d7:52:38:01:a9:00:f9:23:e8:07:d3:be:2c:
89:96:dc:df:3b:16:51:be:8d:b0:39:fb:9f:40:5f:c2:d2:26:
89:9a:00:e3:f1:bb:3e:dc:57:29:4b:95:bd:9b:d3:6d:6f:38:
39:05:e5:ad:55:f8:23:fe:bb:b2:1e:66:14:bf:26:5f:49:d7:
56:c4:f0:f2:d6:17:d0:dc:7a:54:63:86:4b:bb:41:93:58:4b:
86:a4:30:2e:3e:09:9f:b7:5e:7c:56:70:76:18:b0:cd:85:ae:
62:d9:7f:4d:6a:e2:36:4f:ba:01:7f:b1:14:00:a3:21:29:ce:
f3:b0:ba:e7:45:98:f9:da:c1:86:94:51:a4:79:8e:de:b0:a6:
fc:63:a4:3a:18:2d:bb:ba:47:f2:bf:30:5f:9a:9c:23:4b:e5:
a2:f6:f2:55:13:5a:9a:9e:2e:ce:db:65:38:d5:e4:54:2a:9a:
65:fb:43:40:89:5d:42:7e:3f:8a:e4:6a:29:72:89:4d:6c:44:
a7:b5:f6:f8:43:f9:5f:c4:fe:9f:5c:4c:27:c0:b1:09:6d:8a:
f2:1b:67:ff:e6:59:fd:62:1c:13:53:c7:33:89:ad:68:11:82:
b1:cf:9f:b7:b2:35:93:a2:1f:8f:bf:9d:89:cf:81:47:ca:c4:
64:26:83:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:01 2024 by rpki-client on console-fra.rpki-client.org