Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/IyM4dL0Uyenx9_LLOwSfIkiD7yY.roa
File: IyM4dL0Uyenx9_LLOwSfIkiD7yY.roa (raw, json)
Hash identifier: +4mMv0SZu56wf4N7ywpwbDzNlGAZM4jUMz8ev9zM4lo=
Subject key identifier: 23:23:38:74:BD:14:C9:E9:F1:F7:F2:CB:3B:04:9F:22:48:83:EF:26
Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial: 0185708CD32D6EDC78EE8999A60FBD2A20F9
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/IyM4dL0Uyenx9_LLOwSfIkiD7yY.roa
Signing time: Mon 02 Jan 2023 03:35:55 +0000
ROA not before: Mon 02 Jan 2023 03:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8657
IP address blocks: 185.96.172.0/22 maxlen: 22
195.8.0.0/19 maxlen: 24
217.168.112.0/21 maxlen: 24
2001:15d8::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d3:2d:6e:dc:78:ee:89:99:a6:0f:bd:2a:20:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
Validity
Not Before: Jan 2 03:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23233874bd14c9e9f1f7f2cb3b049f224883ef26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:37:ed:67:0a:43:33:0b:7c:9f:4c:31:85:
ce:13:79:16:cc:be:0c:9a:fa:17:7b:d9:63:25:24:
fc:93:f7:07:d6:31:cc:88:fc:be:59:58:0f:08:69:
8d:ed:a0:74:30:5b:c5:10:83:d6:fc:a5:14:c2:53:
e6:fa:4f:00:eb:fe:8f:c7:c3:54:24:89:97:d4:dd:
e1:d5:51:d3:03:0b:c0:19:91:e3:f7:f1:ae:9f:0b:
74:fb:8f:fa:5a:e2:99:72:21:79:b2:83:c0:ba:29:
1e:4f:7c:fc:2f:13:90:f6:8c:dc:96:4a:b9:ae:e5:
47:aa:24:26:85:7d:1b:9c:7c:49:41:9b:7b:bc:6e:
2d:d4:d5:dc:e4:10:e8:3c:cf:4c:48:f2:fb:65:5a:
ff:71:71:fe:e9:89:52:fe:61:ec:60:da:42:d8:2f:
d3:5f:d2:c1:9e:80:3e:a9:43:9d:33:02:5f:0f:6c:
8c:f1:c6:71:5f:41:3b:eb:ed:9c:0e:14:5a:a7:30:
0a:ce:8a:8f:55:c1:44:ed:34:38:59:81:1a:24:cf:
99:36:1b:42:55:32:95:8f:4a:32:31:d6:6e:5b:da:
a8:53:5b:97:2e:76:16:60:4c:a1:7c:3f:84:42:ab:
fa:9e:28:44:37:e4:2f:c3:49:8e:87:50:5a:51:ec:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:23:38:74:BD:14:C9:E9:F1:F7:F2:CB:3B:04:9F:22:48:83:EF:26
X509v3 Authority Key Identifier:
keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/IyM4dL0Uyenx9_LLOwSfIkiD7yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.172.0/22
195.8.0.0/19
217.168.112.0/21
IPv6:
2001:15d8::/32
Signature Algorithm: sha256WithRSAEncryption
51:06:ea:e8:18:d0:5d:a9:24:0f:72:14:c3:a2:d2:10:f0:e8:
2a:73:e8:9a:d0:71:cb:ed:f5:2f:fd:a2:51:9c:55:7e:fc:bd:
a5:3a:b0:47:51:9e:fb:10:ca:a9:18:1c:06:a9:00:53:57:72:
3d:d7:41:25:f0:72:9c:21:8d:1b:d4:0c:30:14:f4:ed:be:8f:
02:eb:97:6c:3e:d2:06:82:08:48:35:ac:da:3a:da:f6:0d:1c:
a9:ce:24:4c:ca:2f:16:ad:dc:38:58:29:61:34:e3:64:ab:c7:
80:6f:3d:7b:9a:46:9a:18:dc:5b:0b:77:0a:9f:82:42:87:e8:
ef:d0:bc:18:c4:7e:f0:88:53:71:63:e1:0d:98:53:6a:bf:2f:
ab:aa:39:fe:d9:dd:7b:3a:2c:d5:60:b0:28:5d:6d:96:3d:76:
49:8b:76:89:5f:88:39:3c:10:a9:dd:59:de:7a:6d:fc:a3:a8:
86:85:c9:75:c6:7f:fd:24:7a:72:8a:ab:a4:f7:8e:fc:74:16:
d8:b1:03:c2:02:b8:bd:ff:e2:7e:cf:01:a5:89:32:ae:6c:5c:
88:15:a4:af:cf:8e:09:a1:bc:dd:be:ae:1d:47:03:4f:71:d0:
df:2e:af:10:65:3b:e9:d2:af:c5:9c:3a:de:fc:90:42:46:a7:
5d:0f:eb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:36 2024 by rpki-client on console-fra.rpki-client.org