Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/yiLWE-N9rYIpAkYwQWLi88tAaG4.roa
File: yiLWE-N9rYIpAkYwQWLi88tAaG4.roa (raw, json)
Hash identifier: IUUC8jUQ9z25ht1UISroayQSwzNsyzy4xu/H0sFvFzA=
Subject key identifier: CA:22:D6:13:E3:7D:AD:82:29:02:46:30:41:62:E2:F3:CB:40:68:6E
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 01856D5CEDDF8B9ED08EA6D0DB76BADC7472
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/yiLWE-N9rYIpAkYwQWLi88tAaG4.roa
Signing time: Sun 01 Jan 2023 12:44:44 +0000
ROA not before: Sun 01 Jan 2023 12:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15982
IP address blocks: 213.244.231.0/24 maxlen: 24
213.244.230.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 17 May 2023 09:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:ed:df:8b:9e:d0:8e:a6:d0:db:76:ba:dc:74:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Jan 1 12:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca22d613e37dad82290246304162e2f3cb40686e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:84:69:eb:e2:30:b9:7c:49:cb:19:5d:fa:
bf:1e:b4:f6:69:fb:5b:ad:a2:59:76:87:bd:81:75:
de:36:65:6c:9f:99:64:1a:61:8c:bd:e8:26:82:a0:
b4:c3:fa:bf:45:f4:3f:20:35:da:f7:84:98:17:fa:
6f:e6:66:d5:86:e7:ab:a0:b9:59:25:6e:a4:f0:94:
56:c5:d8:a7:a4:98:f2:27:4f:cd:21:1d:9d:ca:a6:
88:0e:02:87:2f:32:8b:8c:3b:6a:38:de:a0:fa:69:
af:cc:77:04:1e:46:8f:76:1d:dc:ea:2a:cb:94:4d:
fc:c1:76:86:f7:43:5e:e7:9d:79:39:94:7d:0c:cf:
f1:89:4b:45:1e:06:92:cc:3a:04:cb:62:31:8a:7d:
9b:f2:63:68:01:86:3c:5f:80:cd:5b:58:db:f5:be:
51:9f:27:70:1c:d4:23:ce:e2:4b:03:bd:59:38:0c:
71:36:46:44:15:14:4b:9f:16:43:b4:57:d0:07:6f:
19:10:5f:cb:f7:12:c0:a8:64:82:e5:d0:f4:d0:a6:
28:bd:4f:0c:03:70:b2:52:1a:c5:23:5a:e3:9a:26:
7a:5a:84:54:30:65:4a:a3:7a:8b:1b:f9:57:c8:21:
e9:d2:23:e3:4d:b4:7e:a2:0b:5c:d0:76:21:f2:f9:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:22:D6:13:E3:7D:AD:82:29:02:46:30:41:62:E2:F3:CB:40:68:6E
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/yiLWE-N9rYIpAkYwQWLi88tAaG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.244.230.0/23
Signature Algorithm: sha256WithRSAEncryption
39:b5:ec:1d:67:02:08:68:70:ca:b0:2b:b6:12:95:2a:05:f3:
b0:28:06:dc:c0:bf:52:cf:ee:f2:c4:b5:a4:b3:e3:bb:8b:b0:
36:f6:42:07:37:86:f5:cd:03:a4:ff:9a:ae:43:56:19:ee:26:
19:0b:e0:dc:59:07:77:4d:55:8e:c1:73:be:a4:9d:0b:dc:be:
af:78:87:8e:f4:6e:83:24:86:4f:a0:4c:a7:1e:1b:08:e4:a3:
81:f4:e5:5e:57:34:39:a3:3b:47:a7:88:06:eb:fe:d8:07:1d:
ac:49:ee:0e:ff:c3:a6:52:a6:f9:82:70:9b:8e:04:f1:fc:10:
98:0c:e6:28:56:77:be:a8:d8:cb:01:c6:3d:f2:d2:15:47:be:
b2:ad:08:4e:0c:4d:2d:48:61:51:c0:aa:f9:f8:44:15:7b:db:
cb:94:03:0a:d5:ac:3a:30:7d:44:bd:bc:82:05:30:f8:d9:47:
33:5e:48:23:e9:e0:4a:51:f4:7e:91:20:12:60:2f:fc:b9:a7:
4f:67:4f:de:7f:50:7e:d4:92:f8:f8:a4:7c:e9:d6:57:69:e0:
3d:65:53:62:a5:e7:50:46:03:af:a5:2e:7e:f0:16:15:06:35:
6a:ae:96:11:a4:17:2e:c2:84:ca:2a:60:a0:6f:62:d6:f0:0b:
65:af:2e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:20 2024 by rpki-client on console-ams.rpki-client.org