Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/yJ80b6S9tOkYknq6UpkKFI1kpV4.roa
File: yJ80b6S9tOkYknq6UpkKFI1kpV4.roa (raw, json)
Hash identifier: 4OCpuM6hAmTTFnSRSWir4b8wSEf9gFaus61nScYBnho=
Subject key identifier: C8:9F:34:6F:A4:BD:B4:E9:18:92:7A:BA:52:99:0A:14:8D:64:A5:5E
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE660E091863F3651219BF5855067D5
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/yJ80b6S9tOkYknq6UpkKFI1kpV4.roa
Signing time: Sun 01 Jan 2023 10:35:15 +0000
ROA not before: Sun 01 Jan 2023 10:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61066
IP address blocks: 213.91.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:60:e0:91:86:3f:36:51:21:9b:f5:85:50:67:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c89f346fa4bdb4e918927aba52990a148d64a55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:22:9e:a2:2e:9c:e0:6d:a8:14:38:09:cd:
5a:de:fe:b3:25:54:9a:01:8b:d1:a5:1b:0c:ed:03:
42:24:7e:b4:34:68:97:d1:d6:91:e0:63:66:c6:da:
cc:df:e6:a0:03:65:11:4c:44:8a:24:05:0f:bb:1d:
cc:85:99:89:87:82:19:81:0e:5f:57:52:5f:6d:12:
a3:93:29:b1:5e:bb:b9:93:d6:d9:2a:c1:29:7b:dc:
03:d2:e4:ee:ce:c6:bd:1e:2a:fd:7c:fc:cf:a9:93:
af:9f:d3:b0:b8:36:df:18:fd:38:f8:86:17:62:cc:
3b:6b:5f:17:f7:0c:8d:ae:c6:5f:9e:7a:2f:bc:b5:
22:a0:5e:08:f2:1a:56:44:08:c0:ec:5b:48:f7:05:
82:dd:aa:6a:5c:6c:f2:be:a1:a3:78:e2:28:ad:e3:
51:55:11:50:84:ae:83:df:a6:7e:8f:37:a0:b6:1d:
93:24:81:d9:75:d9:a7:d9:8f:a6:75:4d:89:d4:9f:
6e:79:fd:00:d2:7f:47:b7:28:02:50:09:e5:ea:c1:
97:bd:63:f4:ee:74:c9:f1:d1:66:f8:0c:96:54:72:
1c:fb:a6:18:9c:d9:02:ec:0a:27:d0:7d:51:c5:70:
7b:14:33:97:f4:1d:02:ee:ac:64:0d:e7:69:ab:88:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9F:34:6F:A4:BD:B4:E9:18:92:7A:BA:52:99:0A:14:8D:64:A5:5E
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/yJ80b6S9tOkYknq6UpkKFI1kpV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.91.156.0/24
Signature Algorithm: sha256WithRSAEncryption
45:2a:ef:89:67:26:40:92:45:75:fa:da:23:9d:c9:ec:ec:48:
62:1c:11:47:b8:88:21:a8:b8:ae:e9:14:4e:52:db:92:f2:a6:
64:fc:9b:3d:b9:e8:ee:82:fc:92:aa:99:50:99:bf:57:4a:19:
4d:b5:51:3f:5c:aa:a9:d4:ce:dc:9c:9c:99:75:a5:19:e0:c5:
f0:b4:c7:d3:39:c7:72:8b:74:f5:e3:3d:ff:e6:50:f2:46:27:
ca:f0:73:35:c9:51:5e:18:49:74:19:f3:c1:3c:40:c5:ed:4c:
38:7e:a6:7c:72:46:fe:15:ea:fb:37:cc:7a:1d:7d:85:27:d7:
31:6f:2b:5f:cf:55:0c:22:a6:2e:30:6b:43:c2:1f:e6:86:19:
51:01:30:d6:1b:1d:d8:13:c3:d2:0b:95:9a:c6:20:07:20:16:
1d:bb:ac:65:72:de:38:f5:d7:4d:a5:75:24:64:b8:fd:f8:e8:
4f:bf:60:6b:67:68:71:4a:43:d2:b9:bf:c6:73:55:37:f4:87:
86:ad:76:3d:a4:83:95:7c:ef:65:26:2d:d0:90:1c:68:7f:07:
0b:ff:69:14:b7:00:2b:64:a4:0a:ae:1b:56:a2:8f:3a:4c:a9:
bb:cc:9a:88:62:a1:ec:89:77:df:9f:0b:91:29:05:fb:c7:5e:
4d:30:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:54 2024 by rpki-client on console-ams.rpki-client.org