Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/yQxvdOah3P6zpdmsmaJFlBtU50M.roa
File: yQxvdOah3P6zpdmsmaJFlBtU50M.roa (raw, json)
Hash identifier: ZNwzNfVWaiQDr7IHbP8vOlvM8G1RYMpb3qYnBuKoOrU=
Subject key identifier: C9:0C:6F:74:E6:A1:DC:FE:B3:A5:D9:AC:99:A2:45:94:1B:54:E7:43
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 0187B1F7D2F7FB57D490AA48F52BF564167C
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/yQxvdOah3P6zpdmsmaJFlBtU50M.roa
Signing time: Mon 24 Apr 2023 06:33:41 +0000
ROA not before: Mon 24 Apr 2023 06:33:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24951
IP address blocks: 185.154.36.0/22 maxlen: 22
185.154.38.0/24 maxlen: 24
195.144.7.0/24 maxlen: 24
212.71.96.0/20 maxlen: 24
217.71.93.0/24 maxlen: 24
212.71.102.0/24 maxlen: 24
212.71.112.0/22 maxlen: 22
212.71.107.0/24 maxlen: 24
212.71.116.0/24 maxlen: 24
212.71.118.0/24 maxlen: 24
212.71.117.0/24 maxlen: 24
212.71.112.0/20 maxlen: 24
212.71.119.0/24 maxlen: 24
212.71.120.0/21 maxlen: 21
217.20.192.0/20 maxlen: 24
217.20.192.0/24 maxlen: 24
217.71.80.0/20 maxlen: 24
217.71.85.0/24 maxlen: 24
217.71.88.0/24 maxlen: 24
217.71.89.0/24 maxlen: 24
217.71.87.0/24 maxlen: 24
2a00:fb00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b1:f7:d2:f7:fb:57:d4:90:aa:48:f5:2b:f5:64:16:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Apr 24 06:33:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c90c6f74e6a1dcfeb3a5d9ac99a245941b54e743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9b:e0:a7:94:69:89:b5:2b:74:14:ac:9b:a4:
92:e2:ca:48:0c:dd:18:ae:89:c3:82:81:9c:e0:c8:
d0:1d:28:cc:dc:33:c4:1b:f6:40:e3:2c:2f:be:13:
be:c0:9f:59:ec:7a:1e:40:e9:45:81:80:be:be:92:
1b:34:9b:1f:ad:76:42:bc:04:62:09:f1:b2:24:ca:
26:57:9a:42:6f:94:f7:08:4f:1b:c0:cd:fc:b8:61:
a2:8b:a3:11:4b:fb:03:14:bb:1e:96:b3:a8:a0:62:
56:49:aa:b2:31:da:4b:8f:89:51:b8:70:c4:9e:4e:
c6:de:a4:aa:92:6d:62:8b:e3:ef:95:f6:94:61:e4:
fa:2f:a2:bd:3e:ca:c3:08:0a:73:7b:82:b8:be:1c:
dc:66:c9:3c:a3:d4:1c:af:1d:04:03:14:be:59:f0:
43:53:85:90:b3:b1:59:8c:e3:39:3f:b4:41:fe:a5:
f1:d8:2d:c9:61:01:d9:35:62:37:ea:de:7a:ce:05:
0e:9b:b1:6d:f9:18:27:5d:73:c3:ce:f6:30:be:a4:
29:fd:64:bd:57:fb:6c:d7:eb:06:91:ba:73:99:3c:
01:2e:ac:45:c0:1a:59:6b:e0:7e:d5:a1:5f:fe:e6:
fd:9c:e7:59:62:11:82:2c:08:b9:49:d8:4f:cb:0f:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0C:6F:74:E6:A1:DC:FE:B3:A5:D9:AC:99:A2:45:94:1B:54:E7:43
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/yQxvdOah3P6zpdmsmaJFlBtU50M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.36.0/22
195.144.7.0/24
212.71.96.0/19
217.20.192.0/20
217.71.80.0/20
IPv6:
2a00:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
84:a4:54:7d:5e:8c:b3:ae:3c:c4:84:5a:e5:43:62:2a:4f:56:
42:e3:c6:da:5a:8a:23:2d:cb:f2:a8:17:06:30:cb:74:f2:58:
58:c6:c9:25:52:af:eb:a2:97:6c:f3:ef:40:0d:9f:b4:6b:02:
12:1c:77:af:a3:08:e5:96:b5:81:6f:51:ab:df:68:92:01:ff:
c7:db:d9:a6:37:98:88:34:5c:aa:5a:1d:4b:31:5b:ef:2d:f3:
75:b1:20:8e:7e:c3:06:a6:e6:10:84:1c:92:12:fd:6a:00:a4:
46:6b:78:78:dc:29:de:8d:ee:43:1b:3b:60:0e:2f:ef:dc:92:
d3:5b:5c:38:6e:96:8e:d6:e4:df:b4:86:74:93:f1:b3:9b:e7:
dc:b0:7e:36:23:08:89:21:46:a5:6b:a7:70:e6:03:c3:bf:13:
b0:5b:c6:9b:e4:5d:85:6f:fd:a9:da:42:4f:2a:8f:76:6b:b8:
ae:a5:d6:2f:c5:ce:ec:59:1e:4a:15:36:80:18:6f:1d:f8:0c:
bc:16:d8:dd:52:b0:bc:97:f8:43:40:1f:df:62:40:1e:17:1f:
06:ec:97:e3:59:f0:8b:88:42:c9:43:39:ef:0b:70:7b:bc:c6:
22:fe:98:f8:05:ba:f8:c5:74:88:01:3b:c4:70:c4:b7:b6:74:
f9:a0:2b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:55 2024 by rpki-client on console-ams.rpki-client.org