Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/y3Yu6NtUkK5n8nKBPDv-ZOn-gRg.roa
File: y3Yu6NtUkK5n8nKBPDv-ZOn-gRg.roa (raw, json)
Hash identifier: X22tT54Bh2CI82+LaRHq3uD8b7ykSP9zFx6MMNvrATI=
Subject key identifier: CB:76:2E:E8:DB:54:90:AE:67:F2:72:81:3C:3B:FE:64:E9:FE:81:18
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018C19FC696DAC1F285887695ABBC0D8796C
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/y3Yu6NtUkK5n8nKBPDv-ZOn-gRg.roa
Signing time: Wed 29 Nov 2023 07:30:21 +0000
ROA not before: Wed 29 Nov 2023 07:30:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59620
IP address blocks: 90.154.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:fc:69:6d:ac:1f:28:58:87:69:5a:bb:c0:d8:79:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Nov 29 07:30:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb762ee8db5490ae67f272813c3bfe64e9fe8118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:de:dd:22:1b:d3:8f:56:bf:41:5e:8d:3f:
67:d8:cc:f9:f4:f1:4c:22:d2:09:ad:9f:a0:c4:af:
38:7b:f1:bb:06:36:dc:d9:97:98:81:b0:23:7a:c8:
1b:72:ba:fb:af:fb:6b:15:ef:ed:67:c1:75:b4:8e:
05:51:aa:1e:bb:91:38:ef:94:e7:83:14:79:1d:1c:
b5:65:b5:7e:3d:8a:d9:c8:e1:56:49:b8:bc:90:c6:
c7:3e:47:39:51:de:8d:49:5a:65:33:9c:33:b8:50:
e8:75:05:2f:b6:66:01:65:99:3f:5f:c4:30:a3:60:
9f:88:96:f2:fc:13:f0:3e:67:a6:db:55:20:b3:60:
ed:5a:c2:c5:7c:0a:94:99:b9:b0:7a:99:87:07:f6:
0d:3c:de:7f:3f:bb:85:e9:85:ce:93:51:0c:86:a4:
b1:58:12:43:4b:cd:e9:16:87:11:4e:07:ff:0c:27:
9b:6a:9c:76:10:37:6a:5f:95:82:24:4a:fc:50:9a:
bb:06:b2:04:80:b9:f8:94:58:e9:e3:43:b6:2e:86:
36:e3:18:e5:e1:9b:1d:43:2d:e6:c0:dc:06:6b:78:
e7:eb:15:82:2d:4a:02:c6:4c:af:08:16:52:f8:3f:
ec:f3:27:20:2f:ac:66:43:ff:5f:dd:a7:9b:f7:7b:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:76:2E:E8:DB:54:90:AE:67:F2:72:81:3C:3B:FE:64:E9:FE:81:18
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/y3Yu6NtUkK5n8nKBPDv-ZOn-gRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.154.224.0/24
Signature Algorithm: sha256WithRSAEncryption
71:28:96:c2:28:6f:f7:18:91:af:12:8a:7b:da:12:91:8e:37:
af:00:c2:79:e3:f2:09:65:55:74:7f:b3:7c:da:d0:f9:6f:98:
04:f4:5a:76:f4:0e:b8:62:e2:66:85:8c:31:cb:cb:64:05:5d:
8e:21:29:d6:2e:83:d0:c8:01:97:06:23:27:23:62:d2:43:dd:
75:1b:76:73:ee:be:d2:08:77:a5:34:8d:6e:6a:cb:68:05:2b:
4b:93:4f:5c:82:e1:78:dd:6e:11:07:5b:c7:94:60:4b:4e:eb:
88:f8:a6:9c:e5:57:f4:57:8e:7e:b0:f9:de:79:25:11:f7:5b:
b6:40:19:dd:a6:16:22:2b:20:ed:ac:c2:34:c1:f4:8e:a6:19:
30:fd:fb:fa:4c:91:9e:68:f9:43:0a:ac:ac:1c:c4:5b:d4:77:
81:91:33:76:2e:cc:af:c6:18:a4:22:23:f1:ac:4c:a4:b1:d8:
90:0e:99:5b:4d:7a:c9:20:60:8f:fd:d5:b2:f8:85:f0:ea:34:
61:88:4f:e3:25:f5:64:ea:ae:d6:79:37:c7:a4:a6:87:66:f0:
e8:98:f6:89:17:f5:cd:ec:4c:03:b3:7a:86:40:77:26:4c:22:
af:bd:b3:9f:99:e2:16:90:45:b5:2c:4f:09:ae:a0:b3:1b:db:
e6:34:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:54 2024 by rpki-client on console-ams.rpki-client.org