Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/YfPEk-e6vTNM-qpGAKaO2acfbdM.roa
File: YfPEk-e6vTNM-qpGAKaO2acfbdM.roa (raw, json)
Hash identifier: LEIamSB+e5bEZfCBDv6QvP3PV5LD4g+xKQ8Q0xxoF2s=
Subject key identifier: 61:F3:C4:93:E7:BA:BD:33:4C:FA:AA:46:00:A6:8E:D9:A7:1F:6D:D3
Certificate issuer: /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Certificate serial: 018C11855B488323548FC55D7AB53C7EDAD9
Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/YfPEk-e6vTNM-qpGAKaO2acfbdM.roa
Signing time: Mon 27 Nov 2023 16:03:21 +0000
ROA not before: Mon 27 Nov 2023 16:03:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205359
IP address blocks: 194.31.99.0/24 maxlen: 24
85.193.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:85:5b:48:83:23:54:8f:c5:5d:7a:b5:3c:7e:da:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Validity
Not Before: Nov 27 16:03:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61f3c493e7babd334cfaaa4600a68ed9a71f6dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:77:c8:b7:d3:24:81:7d:9f:fc:e4:9b:66:b1:
eb:c4:21:bd:fc:a7:ce:25:a4:7c:49:ed:62:03:e4:
e8:4d:69:fe:08:5a:16:42:88:d9:6d:aa:a4:9a:52:
aa:71:3c:3c:cd:2d:0f:15:64:9e:ed:0b:e8:fa:4f:
9d:18:ac:a6:26:4d:52:91:f2:90:b7:9e:cd:55:bd:
8f:a6:f3:4b:fb:f5:7e:ea:7a:d4:09:9e:f6:87:65:
87:c6:bd:21:74:2b:d2:c6:8d:99:05:a1:d7:19:76:
78:6e:c6:87:77:9f:21:02:58:e2:4e:a8:4e:8d:5d:
1e:73:0c:64:0f:18:ec:2c:f3:33:54:c0:de:74:29:
ec:c8:cd:9f:04:ef:b7:ba:04:5f:17:a3:b7:55:ac:
ac:3e:2a:0c:63:77:cf:bb:69:c1:6c:49:89:b7:f1:
0c:69:c6:43:04:f3:13:d1:ec:9e:c1:f8:9f:6c:76:
84:24:9f:09:e3:05:14:7d:e8:ed:2b:05:f3:32:66:
9a:0c:17:11:d1:45:9d:bf:06:17:ff:6f:cf:d2:b8:
b0:7b:f6:8f:3e:aa:0e:99:02:7d:2a:f2:08:d3:45:
a5:df:4e:a2:10:f2:5e:0c:58:20:f7:64:65:82:2a:
95:f4:81:df:a4:c1:8e:82:de:79:00:28:68:44:1e:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F3:C4:93:E7:BA:BD:33:4C:FA:AA:46:00:A6:8E:D9:A7:1F:6D:D3
X509v3 Authority Key Identifier:
keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/YfPEk-e6vTNM-qpGAKaO2acfbdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.76.0/24
194.31.99.0/24
Signature Algorithm: sha256WithRSAEncryption
64:97:0b:6e:5e:eb:3c:4f:f8:ae:bd:f9:13:59:ab:fc:87:6a:
d6:6c:8d:13:ff:28:ef:d3:9b:9f:48:30:b6:c7:2b:09:36:16:
63:2f:8a:1a:c7:e3:ba:ea:dc:54:b8:ad:50:4a:97:8d:92:35:
ae:37:ba:44:d8:2a:7c:1e:f9:f8:a3:0f:b8:40:c5:20:78:4a:
98:34:21:db:cb:a6:07:b2:ea:53:86:7a:55:ee:0d:f8:7a:fa:
63:d3:20:9c:d9:5a:09:6a:9d:d2:7f:09:be:95:ec:23:ee:a3:
3e:b2:39:89:73:fd:01:c4:09:d4:a1:9d:2d:ca:ee:cf:6f:eb:
da:5a:4b:57:ac:91:de:ca:48:71:92:ea:de:47:e4:21:57:50:
dd:0b:e9:78:c1:29:a3:3e:ed:4f:cd:d3:7f:30:df:97:4a:55:
c0:c2:f9:05:2a:ac:b7:56:9d:95:18:f3:a8:06:02:75:de:64:
28:cf:11:9a:60:61:39:04:1f:c3:4e:01:e0:23:86:17:fc:bd:
6d:b5:90:cf:96:ea:37:6e:c5:5d:29:3c:10:fd:f7:eb:66:fc:
2e:a0:2c:a6:c3:ab:f9:ff:1e:f7:7c:9f:50:0f:ff:05:6c:ac:
57:56:17:d7:c0:86:92:a9:a0:78:c9:60:0b:b5:aa:a4:64:bf:
01:22:f9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:42 2024 by rpki-client on console-fra.rpki-client.org