Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/y8p9Re6_7nETc9lzJoUNpyTF40w.roa
File: y8p9Re6_7nETc9lzJoUNpyTF40w.roa (raw, json)
Hash identifier: fhDIIKfVSfoqSD8z0TRpwi/Ww/+6/crU4qh6bD2nP0E=
Subject key identifier: CB:CA:7D:45:EE:BF:EE:71:13:73:D9:73:26:85:0D:A7:24:C5:E3:4C
Certificate issuer: /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial: 018571BA06AF7E66FA90B433F871A5A0081A
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/y8p9Re6_7nETc9lzJoUNpyTF40w.roa
Signing time: Mon 02 Jan 2023 09:04:54 +0000
ROA not before: Mon 02 Jan 2023 09:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209319
IP address blocks: 85.209.204.0/22 maxlen: 22
45.150.220.0/22 maxlen: 22
2a0f:300::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 24 Jan 2023 17:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:06:af:7e:66:fa:90:b4:33:f8:71:a5:a0:08:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Validity
Not Before: Jan 2 09:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbca7d45eebfee711373d97326850da724c5e34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:ce:6c:12:60:73:88:e7:fc:2c:7f:3c:a3:
03:91:c7:4f:09:46:f5:56:cf:d6:9a:06:61:76:e7:
78:88:58:b1:cf:56:7f:25:e8:ef:25:c4:db:e7:5a:
c3:21:86:c6:41:5e:63:0a:7f:95:2c:fb:7b:2b:9c:
3c:9b:be:ae:6d:17:33:e2:83:3a:27:c6:b5:a8:99:
a9:cb:75:e6:bd:c2:02:6b:25:34:6d:d6:10:43:c5:
fc:2b:fb:bc:cc:77:03:49:d2:ac:c4:c6:b8:49:b0:
5e:75:7d:a2:87:a9:62:a8:b6:f4:4b:69:30:d6:30:
8d:8a:ab:b1:03:ca:26:83:ab:e2:d1:b6:ce:e6:73:
79:9a:ea:bd:e4:59:c5:3f:61:36:ad:0d:a8:79:fa:
7d:63:ca:53:01:bc:32:af:66:c6:0c:e6:ff:48:af:
2b:7e:2a:21:66:a5:5a:bd:07:60:96:e7:ac:65:3e:
77:1a:13:90:84:60:70:48:c3:0a:63:32:8f:18:f0:
90:69:8b:35:62:a3:b1:26:13:71:56:19:02:ad:c8:
9c:e1:c8:6a:f0:62:c7:6a:1b:ca:d8:c6:b6:ab:c3:
a4:9b:ca:84:8a:ee:ee:55:2c:ad:98:8a:b7:cb:7d:
0a:b7:9b:1b:18:46:56:56:e6:2f:26:93:64:cd:bf:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CA:7D:45:EE:BF:EE:71:13:73:D9:73:26:85:0D:A7:24:C5:E3:4C
X509v3 Authority Key Identifier:
keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/y8p9Re6_7nETc9lzJoUNpyTF40w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.220.0/22
85.209.204.0/22
IPv6:
2a0f:300::/29
Signature Algorithm: sha256WithRSAEncryption
28:35:3e:63:b5:7b:c9:3a:ef:15:1a:f7:33:ef:98:4a:c3:2f:
76:f0:f5:31:1d:1e:34:1d:e6:c3:4b:44:fb:af:95:1f:2c:95:
e6:0d:5a:61:62:11:0a:6a:81:73:40:5a:ab:f4:f5:d7:17:e2:
6d:ef:66:33:0e:4d:ca:d9:16:6b:cc:92:c0:5e:82:fd:31:63:
29:af:76:c8:59:4a:78:46:ce:79:1a:c7:6e:05:13:ae:ba:81:
e9:2d:c0:70:96:99:2e:f1:8d:f8:b4:42:95:67:00:08:67:b0:
96:b8:11:5e:eb:fb:d3:f7:8d:4b:1e:f1:15:e1:80:b6:66:35:
d7:a9:c9:b6:9c:b2:25:20:69:a7:4b:4b:77:fb:5a:de:7e:e5:
d9:8f:a2:08:6a:89:0f:80:73:fb:3e:d8:16:07:8b:73:6e:df:
1b:4b:79:7a:fd:8f:39:30:5f:42:60:43:fd:f7:14:1b:15:f2:
1b:4f:34:94:47:49:59:15:6b:81:45:04:bf:c1:eb:98:85:42:
a1:34:32:a3:d5:8d:aa:13:e6:9e:ca:85:37:d1:0a:9c:7c:62:
a6:40:57:e2:28:bc:47:d2:de:4a:a4:c8:66:66:ee:7e:af:8d:
ef:a4:59:9f:59:ad:73:eb:28:8e:78:0c:58:e2:64:15:64:d3:
d5:a3:4b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org