Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YFyGmsMwpXGm7jeQudNDVLVn7v4.roa
File: YFyGmsMwpXGm7jeQudNDVLVn7v4.roa (raw, json)
Hash identifier: WinbhibdyeUwYyoPeOBnHJUPLCMKYWo3uvvv3LX27JU=
Subject key identifier: 60:5C:86:9A:C3:30:A5:71:A6:EE:37:90:B9:D3:43:54:B5:67:EE:FE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A1749C62D87E70F4E5ED5619E31292416
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YFyGmsMwpXGm7jeQudNDVLVn7v4.roa
Signing time: Mon 21 Aug 2023 08:50:25 +0000
ROA not before: Mon 21 Aug 2023 08:50:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 83.219.96.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:49:c6:2d:87:e7:0f:4e:5e:d5:61:9e:31:29:24:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 21 08:50:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=605c869ac330a571a6ee3790b9d34354b567eefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:b2:ed:62:0f:2e:6f:56:86:13:2b:a6:55:
e9:b3:46:eb:aa:31:d8:e9:fe:f5:0a:a4:37:45:73:
85:d9:e4:98:78:62:ff:c5:80:79:22:37:d9:44:20:
d9:3e:f7:d7:28:0b:0c:9b:9a:ce:ab:64:93:9f:19:
2a:68:75:ed:6b:01:d9:24:5f:e8:1d:4b:72:8e:ce:
9e:4c:6f:bf:4d:ca:af:71:2f:3b:8f:28:b9:f3:f0:
f3:8f:f9:ff:81:a1:75:e1:2e:b0:d6:e4:77:11:df:
4b:b1:84:c2:85:18:de:7b:4c:f0:95:31:b9:42:34:
2b:58:88:8b:ba:3d:b9:ff:cb:a5:6f:a8:6a:66:a4:
57:df:13:b1:b2:16:06:b1:1c:ee:a3:db:5f:dd:b7:
67:da:ae:bf:03:26:b9:d8:dc:81:76:ed:33:51:83:
1b:f3:6f:34:fb:f4:28:63:12:2e:86:c8:c7:5b:eb:
40:0d:49:df:7c:91:7e:6a:00:0c:7f:65:e6:d3:21:
ba:5e:17:ad:bc:df:2b:6c:05:ff:3b:e7:43:a0:46:
88:c3:7b:da:2c:9b:63:01:42:d0:d0:98:a7:df:bb:
6b:2a:6c:35:74:88:17:22:0f:95:ad:03:2d:c8:40:
38:9d:43:b1:94:31:28:49:22:41:46:a8:06:cb:2f:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5C:86:9A:C3:30:A5:71:A6:EE:37:90:B9:D3:43:54:B5:67:EE:FE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YFyGmsMwpXGm7jeQudNDVLVn7v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.85.0/24
83.219.96.0/24
Signature Algorithm: sha256WithRSAEncryption
48:07:61:f3:70:2f:18:46:d2:62:d0:e3:e3:2d:59:17:c0:d2:
64:be:29:a2:5d:56:04:ad:e9:99:44:ce:4d:fd:0b:28:44:5a:
7f:43:0d:bf:96:bf:98:3f:f0:75:77:5a:04:83:4e:db:8e:68:
91:00:b3:6b:58:e0:77:7a:03:ce:84:f2:cf:1c:24:3f:75:82:
f9:09:bb:50:e9:a0:f5:6d:36:a7:79:47:5c:1d:5c:04:9d:9f:
ad:15:ef:0c:99:f8:21:ef:28:58:7c:f5:de:1c:7c:52:83:17:
ee:48:ee:c5:99:64:67:f3:73:39:f7:f0:10:cf:2d:ba:e9:a6:
cd:ad:d7:fd:57:c7:73:57:bf:a3:a4:8e:e3:c0:a6:4c:3d:02:
2b:50:78:24:7d:79:47:17:32:06:22:42:17:4a:58:bb:16:cd:
c8:47:8f:92:85:27:68:fc:e8:04:df:09:6c:c2:e9:47:31:b6:
39:e5:7c:d1:1d:7b:46:91:9d:c3:21:78:bb:82:ea:c9:c5:b3:
b6:18:2e:b2:c5:ec:5e:1e:12:6b:9f:99:a9:35:85:76:94:4b:
49:8d:54:87:1b:50:81:94:07:05:75:72:9c:8e:68:3b:8d:c9:
af:d5:6c:a3:1e:27:b1:9f:2a:ba:44:6e:f1:cb:93:83:57:52:
1d:c5:56:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:11 2024 by rpki-client on console-ams.rpki-client.org