Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/yLSwIou24ADx-coRRrZcn-CkURE.roa
File: yLSwIou24ADx-coRRrZcn-CkURE.roa (raw, json)
Hash identifier: zdPyG7Ciu6qeUNFelnhGqUImjtyZy8K4H86ft/YX5jw=
Subject key identifier: C8:B4:B0:22:8B:B6:E0:00:F1:F9:CA:11:46:B6:5C:9F:E0:A4:51:11
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 0185728C94516984522DAE79570BFC32F8C3
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/yLSwIou24ADx-coRRrZcn-CkURE.roa
Signing time: Mon 02 Jan 2023 12:54:53 +0000
ROA not before: Mon 02 Jan 2023 12:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12637
IP address blocks: 77.83.64.0/22 maxlen: 24
80.241.140.0/22 maxlen: 24
2a05:be80::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:94:51:69:84:52:2d:ae:79:57:0b:fc:32:f8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Jan 2 12:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8b4b0228bb6e000f1f9ca1146b65c9fe0a45111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:57:17:a4:52:4b:eb:47:e3:6a:d3:dc:e2:
ca:6b:bb:c2:a1:19:ea:b9:58:b9:24:7c:e7:d2:0f:
36:4d:81:83:d4:85:dd:f3:63:22:eb:a7:01:43:08:
db:54:11:e7:8e:9f:c1:8a:d1:25:78:45:e7:9b:2f:
4b:ad:16:9f:c5:fb:99:5c:15:3d:25:0c:af:83:89:
9f:39:0d:10:0a:97:a9:dc:34:e2:cf:59:d4:d7:c4:
cf:2b:0a:29:03:95:c3:3c:b0:fa:59:17:c7:be:70:
dd:e7:ad:22:83:76:37:07:3e:86:27:b5:3b:cd:5a:
87:ad:00:57:6e:d4:7c:69:94:d0:c9:55:9e:d5:5c:
44:b9:69:37:92:1b:d1:08:82:42:fa:4e:ad:a1:21:
dc:26:74:c2:19:f0:15:a3:24:58:ff:45:50:d5:89:
e1:93:79:1a:a6:5a:82:8d:1a:9b:6a:c5:da:a1:03:
92:0e:56:ea:53:d4:99:80:3f:34:f4:21:23:a0:cd:
d7:83:53:be:de:e0:53:c6:a1:98:19:31:11:c2:9b:
8d:00:5b:6d:6a:a8:39:dc:dc:6f:67:0a:0c:dd:97:
b6:a1:1f:b8:c0:c1:81:f7:07:5c:ec:3d:af:2e:2f:
01:10:3b:c8:a5:93:a6:c0:94:9e:55:16:a2:b0:79:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B4:B0:22:8B:B6:E0:00:F1:F9:CA:11:46:B6:5C:9F:E0:A4:51:11
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/yLSwIou24ADx-coRRrZcn-CkURE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.64.0/22
80.241.140.0/22
IPv6:
2a05:be80::/29
Signature Algorithm: sha256WithRSAEncryption
71:19:32:8f:54:0a:41:88:73:fa:43:3b:d5:3a:e9:c8:91:4f:
b2:04:95:c5:13:77:e1:a5:68:46:25:56:17:22:0b:96:37:dc:
c7:3a:2f:3b:a6:6e:34:e1:e9:3c:86:03:eb:20:4e:51:d3:96:
89:5d:ec:ff:10:1a:9f:fd:07:ce:e0:cd:80:f0:2c:e4:d0:27:
69:f8:13:08:52:9c:84:bf:0e:1b:4b:02:4c:e8:35:33:fe:3b:
38:ad:79:cb:7c:34:b1:a1:58:4b:bb:eb:28:ba:f5:da:e7:90:
23:93:87:7b:57:a7:f5:26:31:e2:0c:79:96:b0:de:8b:a9:fa:
3c:b9:0f:f1:8c:bf:8f:98:74:9f:e8:bd:83:9e:c5:9e:15:31:
0c:56:f6:27:bf:b7:74:a3:42:b2:af:5d:dc:68:0e:a7:cb:af:
21:af:fb:35:97:92:71:0b:40:74:00:9a:e8:f2:a9:b4:f1:5c:
98:a6:25:95:4e:76:f6:99:66:21:36:df:6b:db:bd:f0:e9:91:
dc:34:45:9d:0c:9c:d7:95:3d:a6:98:41:9e:62:3b:e0:d8:4a:
c4:87:18:55:b0:c0:3e:9c:cd:9f:66:84:55:5c:64:00:5f:e7:
6a:df:e9:8c:cc:e0:32:6f:0a:67:7d:43:0b:00:95:5c:23:af:
2c:68:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:23 2024 by rpki-client on console-ams.rpki-client.org