Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/YoSkpOYu44u0mvBuDz_Fl7JXQ9s.roa
File: YoSkpOYu44u0mvBuDz_Fl7JXQ9s.roa (raw, json)
Hash identifier: N/rlSf1rMv+9+GvGE/0sfg6nXLIy5OUglXhDgJfZ9OQ=
Subject key identifier: 62:84:A4:A4:E6:2E:E3:8B:B4:9A:F0:6E:0F:3F:C5:97:B2:57:43:DB
Certificate issuer: /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Certificate serial: 018570027BEEC122D8A0AB7EA456DBEAF6B7
Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/YoSkpOYu44u0mvBuDz_Fl7JXQ9s.roa
Signing time: Mon 02 Jan 2023 01:04:48 +0000
ROA not before: Mon 02 Jan 2023 01:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60522
IP address blocks: 37.131.179.0/24 maxlen: 24
37.131.180.0/22 maxlen: 22
185.212.52.0/22 maxlen: 22
2a0b:72c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7b:ee:c1:22:d8:a0:ab:7e:a4:56:db:ea:f6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Validity
Not Before: Jan 2 01:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6284a4a4e62ee38bb49af06e0f3fc597b25743db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2c:17:b0:79:ca:fe:e6:12:8b:40:b0:a9:b1:
88:da:05:25:b8:b7:3f:60:71:82:b3:3c:da:30:d5:
ea:1c:6a:07:42:9a:75:a3:aa:74:fb:53:c3:2f:38:
7d:ab:40:85:0c:99:b9:dd:fd:a8:41:a3:f5:b1:ae:
66:88:14:b5:71:e0:c3:d3:bb:f0:59:2c:2e:53:8d:
b8:01:80:07:18:94:3a:bf:d5:b0:bb:96:7f:08:c5:
b8:61:17:38:ff:a4:bd:bd:27:76:89:28:ce:88:0d:
14:00:28:56:eb:5e:e9:b0:79:06:e4:4c:ab:e3:33:
e3:b9:a1:9a:ba:4c:e2:89:e6:da:85:69:2a:d1:5d:
57:6d:8e:a3:35:bb:eb:0a:84:fd:b3:21:1d:e8:b0:
29:8d:5d:d1:31:d9:75:14:2b:37:ff:3b:d1:77:52:
0b:9b:10:4f:ef:a9:bb:63:cc:10:b9:53:ff:53:ae:
c3:c2:5c:ef:72:c6:28:43:ed:97:1c:d2:ec:f8:91:
e7:43:05:a7:34:7e:c8:33:fc:73:5d:e1:5b:fb:d0:
71:80:75:cd:f8:6d:72:c8:01:49:74:d1:52:4c:82:
11:ce:1f:7f:06:f8:68:87:69:5d:05:e6:ed:98:6e:
cc:f0:51:42:59:f8:d5:29:09:aa:de:77:1d:44:c2:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:84:A4:A4:E6:2E:E3:8B:B4:9A:F0:6E:0F:3F:C5:97:B2:57:43:DB
X509v3 Authority Key Identifier:
keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/YoSkpOYu44u0mvBuDz_Fl7JXQ9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.179.0-37.131.183.255
185.212.52.0/22
IPv6:
2a0b:72c0::/32
Signature Algorithm: sha256WithRSAEncryption
48:49:a0:f6:50:7c:3e:3c:01:6d:b0:49:2f:77:6e:01:14:91:
2d:a2:21:74:20:d4:b1:6c:b7:29:7b:74:cd:c7:a6:13:6b:8e:
71:3a:c4:56:81:63:c0:65:5e:74:35:18:06:3b:cb:db:04:3e:
60:1d:f0:9d:7d:4e:89:78:18:35:99:f1:63:dc:c1:31:07:93:
c1:04:90:76:39:c6:5e:d1:d7:39:48:07:af:bd:9e:61:5d:5b:
61:cd:cf:f2:81:5e:36:53:24:93:60:19:bb:3c:ee:1e:ca:d4:
6a:1c:b2:fb:17:9c:5c:cf:87:28:50:82:40:d0:fa:3c:9d:62:
39:a4:45:f3:2a:63:08:d7:42:8b:78:33:a8:d9:b7:68:07:e6:
74:d8:87:c2:64:21:36:68:4f:fa:a1:e1:36:38:36:2a:28:9b:
6b:5d:76:3d:6f:31:b0:a2:bd:66:fc:d6:67:2e:97:6a:73:91:
16:23:8e:37:0e:bb:43:df:14:c5:a0:d0:59:42:93:a4:1e:3b:
71:df:d4:e8:40:16:4d:d2:a1:6a:75:63:cd:af:de:7f:2a:95:
95:88:df:05:e5:92:3b:14:89:91:89:38:16:7e:4b:06:6d:cf:
ad:01:16:18:f3:ac:48:2b:ea:21:44:b3:5f:1c:63:1a:4e:0c:
51:42:95:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:33 2024 by rpki-client on console-fra.rpki-client.org