Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/CyygwN16fnGQheD_T54458lzr3I.roa
File: CyygwN16fnGQheD_T54458lzr3I.roa (raw, json)
Hash identifier: QdpldNJuBGwPmDwdkBPhlSh8F70mv12NO+gOmZmE6gA=
Subject key identifier: 0B:2C:A0:C0:DD:7A:7E:71:90:85:E0:FF:4F:9E:38:E7:C9:73:AF:72
Certificate issuer: /CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Certificate serial: 018570F0AA6280278D190638F9EF4EDF8348
Authority key identifier: 07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/CyygwN16fnGQheD_T54458lzr3I.roa
Signing time: Mon 02 Jan 2023 05:24:58 +0000
ROA not before: Mon 02 Jan 2023 05:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29596
IP address blocks: 87.239.88.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:aa:62:80:27:8d:19:06:38:f9:ef:4e:df:83:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Validity
Not Before: Jan 2 05:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b2ca0c0dd7a7e719085e0ff4f9e38e7c973af72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:4a:4d:6c:0a:f7:2b:71:f2:93:96:07:05:
d6:b3:e5:9f:79:e9:67:56:b1:8d:df:53:6c:01:0e:
69:5a:f4:f8:0c:c1:29:95:0e:26:e6:c0:bc:ca:94:
3e:e7:6f:ea:d1:ef:ac:c5:fb:e9:df:53:0d:e2:83:
2a:6b:e8:50:23:a7:f8:df:c8:c8:31:4f:d5:0b:7e:
ea:30:72:01:8a:8d:f5:00:ee:68:c3:32:ed:b5:bf:
1a:0b:75:d6:72:40:9e:82:3b:6c:54:26:43:52:cd:
f4:a1:20:cc:ea:67:bb:66:a8:00:18:60:3b:e9:fb:
dc:d5:77:76:2f:cd:95:ed:c7:46:2f:9b:f5:28:39:
0e:ff:7d:6d:4e:ff:48:cd:31:37:df:d4:94:a2:4f:
8f:21:9a:7b:2b:c6:31:9d:88:94:0f:34:ec:cf:5a:
4c:57:5e:8d:e9:e5:c2:24:c2:7c:39:ab:c5:c9:4f:
07:4a:6f:f3:f2:da:3d:6c:03:19:03:ee:cc:c1:05:
50:b1:e9:6f:0a:73:0c:4b:08:00:bc:c9:0c:f0:f0:
7a:57:f5:b2:6d:58:35:36:63:84:ef:07:14:24:d7:
1d:96:57:72:1a:80:62:21:06:f3:98:7d:9e:1f:ef:
e4:29:85:95:95:17:02:97:25:77:37:b2:7c:a1:28:
a4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2C:A0:C0:DD:7A:7E:71:90:85:E0:FF:4F:9E:38:E7:C9:73:AF:72
X509v3 Authority Key Identifier:
keyid:07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/CyygwN16fnGQheD_T54458lzr3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.88.0/21
Signature Algorithm: sha256WithRSAEncryption
70:f9:08:fe:4f:f1:e6:97:c1:d8:53:91:25:53:1e:01:1f:ff:
de:1b:bf:04:fd:3e:c7:82:fa:c2:65:92:fc:e4:82:5a:1e:28:
01:e5:36:16:39:b7:2c:b3:a7:b1:19:b1:5e:b9:1b:ec:55:ee:
f3:eb:68:ff:5c:b5:22:8a:de:49:60:4e:31:d6:39:7d:de:1c:
26:c2:58:c8:aa:16:9d:63:65:99:c6:52:fe:af:ac:b8:dc:06:
d4:a3:46:da:1b:99:0f:bc:49:b6:79:21:16:e4:92:23:31:09:
4d:6f:a1:63:4d:f1:fc:f0:3f:67:5d:58:cf:eb:7b:87:d5:a8:
dd:d8:d7:c5:ae:dd:1c:2c:7e:5a:0f:e2:ec:66:b6:4a:ef:ca:
cc:9c:19:4e:42:93:62:77:e4:6d:b4:47:0c:51:e8:41:e4:c9:
61:8f:eb:98:80:a4:76:90:8e:82:4b:c6:6c:49:d7:c4:02:c7:
2d:eb:b2:a6:8a:e3:50:2d:a3:b4:e2:14:5d:34:08:d7:0d:4e:
bc:da:2e:20:56:c7:c8:99:90:8d:c0:bd:0b:df:a6:4e:8c:02:
0b:1f:5f:aa:f5:09:39:85:3d:25:57:c9:0b:4b:12:5e:b8:02:
c1:ac:4f:be:81:4e:bb:5d:67:e7:e0:88:e0:a6:1b:89:c7:92:
3d:69:78:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:42 2024 by rpki-client on console-ams.rpki-client.org