Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/yzaVN121BOJEPVtdIzjMFNKlSLA.roa
File: yzaVN121BOJEPVtdIzjMFNKlSLA.roa (raw, json)
Hash identifier: 4dsdIOowvBgYBQZ8muyPmdzHHKmgJhb+bmswiWJaQMY=
Subject key identifier: CB:36:95:37:5D:B5:04:E2:44:3D:5B:5D:23:38:CC:14:D2:A5:48:B0
Certificate issuer: /CN=2a0254bae699a6c6fcb67ee4ba3b01d02f18099d
Certificate serial: 0185707072F08B0FC4AE0532C5C6648ECA3E
Authority key identifier: 2A:02:54:BA:E6:99:A6:C6:FC:B6:7E:E4:BA:3B:01:D0:2F:18:09:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/yzaVN121BOJEPVtdIzjMFNKlSLA.roa
Signing time: Mon 02 Jan 2023 03:04:55 +0000
ROA not before: Mon 02 Jan 2023 03:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206668
IP address blocks: 185.179.124.0/24 maxlen: 24
185.179.125.0/24 maxlen: 24
185.179.127.0/24 maxlen: 24
185.179.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:72:f0:8b:0f:c4:ae:05:32:c5:c6:64:8e:ca:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0254bae699a6c6fcb67ee4ba3b01d02f18099d
Validity
Not Before: Jan 2 03:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb3695375db504e2443d5b5d2338cc14d2a548b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:d9:49:2d:6a:2c:5d:82:56:f0:28:17:61:
25:1e:78:c1:9b:d4:c2:b6:18:e6:aa:8a:e8:2f:a2:
08:b5:4a:6f:11:b9:bf:cf:8f:05:a3:ec:5c:ee:c2:
6a:be:c6:13:7c:1d:fe:29:8b:81:b6:24:1d:0e:0e:
8d:34:a9:6d:04:08:3e:8f:13:a4:c3:d5:9c:95:39:
d8:07:59:3f:36:2a:51:9f:66:1f:6a:73:c5:cb:4c:
f1:6d:97:b6:05:48:88:80:74:5f:f4:39:88:4a:47:
ca:08:82:60:30:60:a7:4c:42:50:bf:92:f8:8c:61:
b6:36:0e:9a:82:14:17:81:6d:78:7a:6c:c5:05:75:
f5:bf:67:6c:9b:d3:af:0d:23:7c:06:19:7a:9e:bb:
58:53:2d:22:d7:7e:b2:72:19:07:87:39:0e:21:a4:
12:1c:60:54:b5:03:f7:1a:79:9c:20:98:89:28:69:
1c:35:01:c4:b3:18:4f:1f:00:00:93:92:de:2d:48:
7d:4c:71:0b:11:5f:5e:26:6f:dc:11:33:f5:c1:fa:
5b:14:88:65:77:0b:86:75:93:79:1c:84:01:4c:ce:
b7:0b:27:f5:ff:24:dd:63:5f:cb:06:d9:54:f7:59:
38:6b:96:64:47:3d:f2:14:f5:2e:78:70:f5:5f:e4:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:36:95:37:5D:B5:04:E2:44:3D:5B:5D:23:38:CC:14:D2:A5:48:B0
X509v3 Authority Key Identifier:
keyid:2A:02:54:BA:E6:99:A6:C6:FC:B6:7E:E4:BA:3B:01:D0:2F:18:09:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/yzaVN121BOJEPVtdIzjMFNKlSLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:7a:eb:ba:05:81:69:c4:63:5d:99:17:74:84:d1:71:91:15:
fa:5d:14:8d:00:ed:ce:15:28:af:42:b5:a8:31:46:cb:d2:1d:
6c:65:06:88:2b:5f:0a:6c:71:b4:7b:c6:db:57:04:ec:9c:cf:
6b:49:c9:72:8e:e1:82:71:48:1e:8f:6c:92:9e:0b:af:21:da:
58:aa:e1:74:3b:88:80:93:b3:2b:33:ec:d4:4f:2d:02:40:b8:
ff:83:96:b7:8e:29:d8:18:94:66:d1:ed:4a:6a:65:2f:0b:91:
ac:4f:ca:46:fd:c0:a3:2c:be:dc:47:e6:85:52:30:8d:0f:68:
63:62:a8:0e:ed:0c:11:dc:88:99:64:94:30:46:25:91:98:66:
e5:c0:ba:60:fb:11:53:d7:f9:6c:db:ea:19:62:84:5f:c5:4e:
f4:70:96:53:48:35:6f:db:2b:04:26:4b:5c:20:10:6d:80:9b:
be:70:6a:55:65:78:d8:fa:fd:c8:85:2d:4c:f3:5d:3e:07:9c:
89:09:5b:ef:27:98:16:53:35:48:27:a5:75:b8:fb:28:44:31:
80:26:de:19:77:94:36:20:0a:ba:79:d5:7d:6f:c5:16:a0:d7:
c6:ef:e2:2a:08:a3:54:f1:26:ec:ce:e9:1c:f2:97:fb:5b:44:
63:60:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:08 2024 by rpki-client on console-ams.rpki-client.org