Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/Y1UUvEjlQrX_Nb7y9Ov3q7XvTg8.roa
File: Y1UUvEjlQrX_Nb7y9Ov3q7XvTg8.roa (raw, json)
Hash identifier: QNCKB2ZluA7nMx6Vc6LWJ6j+iP/YRpDgOiMWIlJkcGo=
Subject key identifier: 63:55:14:BC:48:E5:42:B5:FF:35:BE:F2:F4:EB:F7:AB:B5:EF:4E:0F
Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial: 018AF4A029AE129CA17263ADA3261F947887
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/Y1UUvEjlQrX_Nb7y9Ov3q7XvTg8.roa
Signing time: Tue 03 Oct 2023 08:20:51 +0000
ROA not before: Tue 03 Oct 2023 08:20:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212650
IP address blocks: 185.190.88.0/24 maxlen: 24
92.61.172.0/22 maxlen: 22
92.61.168.0/22 maxlen: 22
92.61.168.0/21 maxlen: 21
2a10:6540::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 24 Oct 2023 11:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:a0:29:ae:12:9c:a1:72:63:ad:a3:26:1f:94:78:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Validity
Not Before: Oct 3 08:20:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=635514bc48e542b5ff35bef2f4ebf7abb5ef4e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:3b:98:80:df:a4:8d:a7:33:1a:0a:00:aa:
e6:4c:12:b1:4f:b2:e9:88:dd:a0:1a:2b:73:3a:88:
19:04:72:76:bb:47:cd:75:28:25:a7:f0:44:68:ca:
81:06:6f:ba:f8:0d:08:f9:4e:1f:9d:6c:b5:8b:c2:
8e:c6:54:31:3e:3d:ef:fe:29:26:de:f7:16:5a:12:
4e:e2:0e:da:96:c7:06:95:25:aa:f3:1d:87:31:a3:
97:cf:4f:93:3a:74:f9:d9:53:b3:9c:da:0c:56:81:
50:ed:22:90:e1:f2:b3:ce:1f:5c:42:6a:bd:35:a3:
fa:76:db:dc:bf:5d:ca:a9:80:fe:20:b4:84:0c:12:
f6:09:d0:46:28:60:ac:26:5e:15:9e:c9:58:75:d7:
fe:80:ce:83:af:ec:48:82:2b:00:29:db:97:b9:a0:
3b:40:33:60:ce:3f:c4:b3:77:1f:db:76:52:33:31:
25:f0:49:e3:2d:58:6e:01:42:ec:fa:4a:40:a9:b6:
fd:6c:d8:2f:25:83:fb:76:f5:97:30:82:69:96:f7:
75:21:25:35:0a:b5:1e:bc:97:b6:c8:e7:2a:66:5c:
9a:76:8c:6d:23:ac:ee:ab:ec:b9:93:a1:e1:60:18:
73:7a:eb:81:6a:9f:b7:e6:c6:01:62:31:4e:4f:9a:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:55:14:BC:48:E5:42:B5:FF:35:BE:F2:F4:EB:F7:AB:B5:EF:4E:0F
X509v3 Authority Key Identifier:
keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/Y1UUvEjlQrX_Nb7y9Ov3q7XvTg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.168.0/21
185.190.88.0/24
IPv6:
2a10:6540::/29
Signature Algorithm: sha256WithRSAEncryption
39:79:d8:78:22:a2:ce:76:5d:3f:6d:90:dc:ba:f2:72:0c:a9:
40:91:a1:0c:8c:1c:87:d0:f5:0d:c5:10:5f:4c:d4:9c:e4:f0:
86:84:55:76:97:bf:62:09:fa:17:fb:a9:47:30:16:a0:96:21:
2a:5c:f0:8d:40:66:1b:61:c0:6c:f4:5d:87:67:95:2a:87:89:
44:a5:1c:b2:90:78:7e:04:4e:c0:59:41:97:e8:07:da:f5:e2:
de:38:89:f2:4c:b0:31:55:e9:96:33:39:7b:62:ca:21:ca:b0:
b6:fc:7e:cd:1b:e6:3f:d6:61:97:66:cf:04:c0:0b:90:45:bc:
45:f7:6a:e2:05:5b:c6:a5:c0:c9:34:b3:f9:7f:c0:95:7b:60:
34:a1:33:6b:7f:e7:6a:f8:25:3b:16:00:b8:35:fa:7e:b9:31:
67:63:7b:81:1b:df:de:65:d8:34:fe:dc:c9:08:ad:88:3c:7e:
1e:80:60:50:76:93:28:06:19:76:32:45:a2:0c:f5:44:54:b4:
bb:10:e6:2b:36:e5:14:ea:26:e7:c0:a8:80:c9:8e:a7:08:d9:
3c:39:91:c5:ea:e9:17:3e:5f:c9:5b:8a:1e:44:0c:27:3c:7d:
bc:37:f5:07:7e:15:9a:0f:6e:5f:e9:b0:4d:ba:93:a9:bd:0e:
41:bd:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:37 2024 by rpki-client on console-ams.rpki-client.org