Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YZpTlWg901qBTsz8D9IHQrE1AKA.roa
File: YZpTlWg901qBTsz8D9IHQrE1AKA.roa (raw, json)
Hash identifier: cAVuddhdNmesIvr6azKv9k7HnkLWK+M/n3i62zVtmYc=
Subject key identifier: 61:9A:53:95:68:3D:D3:5A:81:4E:CC:FC:0F:D2:07:42:B1:35:00:A0
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018E9D14BA322FE8AD0E8108E18B3E9D7A20
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YZpTlWg901qBTsz8D9IHQrE1AKA.roa
Signing time: Tue 02 Apr 2024 04:32:45 +0000
ROA not before: Tue 02 Apr 2024 04:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12332
IP address blocks: 5.143.112.0/20 maxlen: 20
77.34.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 06:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:14:ba:32:2f:e8:ad:0e:81:08:e1:8b:3e:9d:7a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 2 04:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=619a5395683dd35a814eccfc0fd20742b13500a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:66:d1:07:82:56:89:40:3e:2b:ce:bc:dc:
d8:15:c4:a1:ab:4e:9a:7f:34:bb:14:52:97:10:f1:
ad:e3:5a:39:63:9e:54:06:e0:62:63:4a:be:cd:0a:
79:5d:39:ac:c9:fa:81:ae:ad:77:31:db:ed:10:a0:
b2:71:6d:1b:96:6a:da:cc:c4:6f:cf:c8:72:90:e2:
de:da:ec:25:9f:20:68:b8:d1:84:c9:50:9e:b7:81:
82:89:3c:37:2f:cd:6b:06:e2:43:59:88:6d:97:98:
b6:80:ed:0f:f3:a8:8b:e9:41:f4:19:9f:10:0a:4f:
91:71:34:ce:38:5e:b3:dc:be:3a:af:82:34:84:5e:
f5:2c:a3:f2:0b:c5:50:ed:db:d5:87:34:47:dd:30:
50:00:f9:9f:a4:80:80:16:23:a8:32:6a:1e:41:48:
6d:34:cd:d6:78:ac:9e:23:29:32:d4:ed:d0:bd:f2:
1c:5e:0c:92:14:69:80:0a:1b:1c:ad:d7:7f:df:c6:
39:36:a9:13:71:96:63:4d:5a:a9:ce:2b:08:9e:90:
4d:0c:3f:40:24:89:bb:98:4e:86:5d:f5:91:e1:07:
62:f2:76:55:d0:ac:bb:7a:3c:3f:96:5a:36:55:ee:
81:67:d5:f0:d3:f7:b7:8f:26:d0:43:76:26:e1:ec:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9A:53:95:68:3D:D3:5A:81:4E:CC:FC:0F:D2:07:42:B1:35:00:A0
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YZpTlWg901qBTsz8D9IHQrE1AKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.143.112.0/20
77.34.0.0/15
Signature Algorithm: sha256WithRSAEncryption
03:40:6a:09:dd:ba:4e:06:c9:a6:08:68:b8:77:73:6f:e7:6f:
54:f3:04:60:6c:e1:23:18:a0:5c:b9:bd:2b:05:6d:03:9e:09:
69:b6:13:05:ef:19:c9:a0:0e:c1:b0:a4:60:57:3e:33:6f:5e:
f9:97:0c:58:cb:bb:09:40:8a:76:c4:78:0e:94:d2:68:7f:b0:
7e:69:52:17:b0:87:46:69:03:5c:c4:07:4f:5c:a2:9f:61:24:
27:4f:98:75:3c:ef:94:2a:14:99:29:b9:79:ea:40:12:af:56:
30:91:c7:5e:bd:11:df:f9:ba:fd:40:bc:e9:25:50:d8:f5:d1:
cc:fc:c2:98:9d:c6:cc:a8:12:6f:86:a3:ed:25:77:a1:59:94:
e3:bc:66:ae:5b:2a:f0:35:c9:36:a8:91:da:7c:f3:2b:5d:da:
63:b5:be:95:d3:f9:fe:3d:dc:29:1f:da:7a:3c:58:7d:d4:d7:
77:bc:51:37:97:6e:41:82:f2:52:80:e8:a7:7b:ac:a4:0e:64:
31:66:0f:c4:6d:95:fe:24:99:d0:00:d3:68:69:19:04:c2:d7:
b8:58:10:6d:06:5b:5e:8b:10:a4:21:a4:fb:94:cd:b8:27:0d:
0c:f9:42:13:d0:4e:07:1b:42:a8:81:5c:50:c6:08:51:40:f3:
74:37:1a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:56 2024 by rpki-client on console-fra.rpki-client.org