Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/YypgtrlwPdZLRT8UNnrmod8fZKE.roa
File: YypgtrlwPdZLRT8UNnrmod8fZKE.roa (raw, json)
Hash identifier: oaKp9KVxEIGwicYv9WAmeqK1f54VryyNmpv6Yyv5zS4=
Subject key identifier: 63:2A:60:B6:B9:70:3D:D6:4B:45:3F:14:36:7A:E6:A1:DF:1F:64:A1
Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial: 0185708CA65A3174A37588A142C475AF1374
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/YypgtrlwPdZLRT8UNnrmod8fZKE.roa
Signing time: Mon 02 Jan 2023 03:35:43 +0000
ROA not before: Mon 02 Jan 2023 03:35:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62216
IP address blocks: 95.174.80.0/21 maxlen: 21
185.144.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:a6:5a:31:74:a3:75:88:a1:42:c4:75:af:13:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Validity
Not Before: Jan 2 03:35:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=632a60b6b9703dd64b453f14367ae6a1df1f64a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:07:c7:7d:7a:56:be:4b:e6:20:60:40:a4:00:
03:74:05:2f:8c:47:2a:bc:42:b2:cf:07:fc:fe:50:
bb:24:ce:17:9c:0d:c4:8b:ec:6b:14:f2:bb:11:22:
33:8f:df:49:a5:26:b3:7f:8c:a1:19:14:5f:3b:ad:
4a:a1:08:ec:a5:73:67:77:67:d9:13:34:25:b6:93:
ab:cd:be:b8:51:5b:ad:34:a2:b4:75:c8:b6:43:18:
a7:1a:ee:8a:73:cb:d9:6b:a8:19:4b:89:7f:29:5d:
37:86:e5:bf:70:1a:3f:4c:00:47:d2:d7:a2:7b:9e:
e7:48:38:63:43:31:aa:e9:8f:ec:57:9b:9b:4c:d7:
ad:cb:91:5c:24:52:4d:79:9b:38:b3:58:48:85:e3:
30:61:7d:cf:e7:f3:6c:3e:e7:aa:1b:23:50:2e:a5:
5f:73:fe:28:4d:85:42:c7:18:44:ce:10:e8:8b:67:
cb:20:b5:38:1e:74:91:4e:16:61:a6:57:ba:93:6b:
45:3f:89:bf:b1:14:9a:fc:a5:33:c2:42:38:0d:d0:
ef:31:92:ca:5d:cf:75:7d:78:d1:bb:b8:c9:6d:4e:
24:ab:cd:01:59:a4:dd:8f:0f:ed:93:d8:de:9b:8f:
d5:6d:19:8e:96:46:0e:6f:a1:0d:19:35:b9:6f:d5:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2A:60:B6:B9:70:3D:D6:4B:45:3F:14:36:7A:E6:A1:DF:1F:64:A1
X509v3 Authority Key Identifier:
keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/YypgtrlwPdZLRT8UNnrmod8fZKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.174.80.0/21
185.144.16.0/22
Signature Algorithm: sha256WithRSAEncryption
60:c3:02:96:48:fc:52:53:3f:c8:ac:c0:f6:d6:a5:6d:b4:6f:
9d:42:2b:b5:3c:8e:32:dc:5e:5a:f4:29:c2:86:d7:36:1a:34:
4a:76:75:2a:b3:e7:4b:3a:0c:8a:e3:d7:73:5a:9a:d6:9b:3f:
c1:ea:90:ff:4e:aa:b2:9e:35:0c:c8:b8:d7:4f:5b:d2:cd:79:
25:08:56:2a:85:78:d0:c6:3a:5f:13:80:7a:88:31:55:94:a5:
46:78:00:29:d0:39:cb:cb:36:fb:c2:7a:81:a6:de:41:d0:79:
8d:ba:76:6e:bd:a1:4d:79:3a:f4:33:59:b3:3a:20:95:44:bb:
a7:d3:3f:bd:8a:1f:fe:b7:f2:6d:2d:e4:11:de:09:2a:19:de:
45:96:7c:a2:a8:68:86:d4:cf:49:cf:5d:26:46:a2:3f:8c:8e:
d1:ba:bc:ca:61:e1:3c:07:9d:87:59:a1:57:15:62:2a:b1:4e:
a5:6b:b0:19:af:4e:7f:18:8c:53:54:f1:d8:13:07:4f:32:7d:
8c:66:09:cc:7a:5c:db:e1:d7:c7:ff:49:0d:49:55:87:b8:4d:
59:97:fa:96:03:3b:80:51:a6:ad:25:f0:e7:dc:1a:6f:97:1b:
dc:9e:f6:c8:10:4d:74:e1:5b:17:1d:de:2a:bd:00:9c:a2:a8:
dc:b8:c9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:26 2024 by rpki-client on console-fra.rpki-client.org