Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/YezPK99Q_4ZPCO365pJh7HVtAJY.roa
File: YezPK99Q_4ZPCO365pJh7HVtAJY.roa (raw, json)
Hash identifier: +tmBpNHfB6xXox4sZdOiK7oaV2bcroFrYpfDJIqhgN0=
Subject key identifier: 61:EC:CF:2B:DF:50:FF:86:4F:08:ED:FA:E6:92:61:EC:75:6D:00:96
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01856EA6863A714CE2510053DD12B11BCCA8
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/YezPK99Q_4ZPCO365pJh7HVtAJY.roa
Signing time: Sun 01 Jan 2023 18:44:45 +0000
ROA not before: Sun 01 Jan 2023 18:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60362
IP address blocks: 78.142.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:86:3a:71:4c:e2:51:00:53:dd:12:b1:1b:cc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 18:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61eccf2bdf50ff864f08edfae69261ec756d0096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:94:38:3b:d2:52:47:88:41:df:44:00:8d:
8b:56:19:94:73:2a:b6:eb:0f:cc:f3:2f:d9:4e:6c:
b9:5a:f6:ec:f1:a5:97:55:2e:5b:eb:6a:b3:97:86:
94:a2:ab:98:b8:87:67:ac:5a:49:e4:03:45:b2:a8:
8a:19:1c:d5:18:51:13:6b:c2:68:d7:e4:b3:79:11:
2e:08:ee:6b:c2:de:3c:66:9e:28:e3:6c:cb:02:a1:
91:f7:4d:78:f1:fb:fe:b6:20:dd:40:e8:6f:a4:6b:
a1:15:2a:84:78:b6:47:17:8d:e5:26:ef:2b:2e:50:
2e:9f:5b:c4:28:f9:e2:82:3a:ea:98:b1:80:d2:3f:
2c:65:f1:59:69:e4:bb:77:a0:ef:fe:05:36:a8:48:
37:1e:ff:89:f7:da:d9:43:f4:95:ad:28:10:e6:30:
3e:83:73:3d:98:5d:84:65:83:ec:3e:2b:41:79:32:
93:d0:84:e1:89:b1:58:0b:ea:72:35:17:95:df:0d:
43:f8:6e:3d:d4:a8:0e:6d:59:99:50:84:f2:6f:b0:
0d:18:00:84:ee:e2:62:40:89:c8:73:9f:ea:74:ea:
f0:3e:5a:3a:14:c6:04:f1:ea:51:88:34:dc:86:09:
9d:d3:06:5e:82:26:b2:fe:39:bd:2f:fc:59:66:aa:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EC:CF:2B:DF:50:FF:86:4F:08:ED:FA:E6:92:61:EC:75:6D:00:96
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/YezPK99Q_4ZPCO365pJh7HVtAJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.219.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8f:05:e1:82:3d:ac:19:d5:2d:f9:45:d5:e0:69:92:d3:ff:
53:ec:b0:b5:59:57:9b:1a:f9:7b:13:e3:14:87:2c:fe:3f:12:
5f:1f:85:44:68:fd:a2:7b:b9:c2:a0:9c:7c:76:55:02:28:9e:
71:de:f1:5c:f1:88:68:ce:54:44:4d:0b:71:e0:ea:d2:97:7c:
a1:b5:28:b0:a8:1c:33:d8:69:a3:eb:89:d8:0c:49:b7:e3:5b:
ce:69:79:06:cf:11:06:94:fb:eb:1e:af:0d:89:d8:93:42:f2:
de:aa:12:58:e9:e8:f3:2c:a2:11:a3:46:c2:02:c3:a6:6c:eb:
35:ef:f4:dc:cb:10:65:5f:80:b9:cf:5b:6f:f3:e4:84:72:c6:
60:0c:e9:02:c9:59:c5:6a:93:5f:42:87:6f:d9:80:14:9d:67:
14:4f:7c:9d:d9:96:98:b6:c4:1e:99:d4:cf:48:49:92:6d:77:
9d:ba:7b:9a:6a:96:61:20:26:9a:86:df:a7:ea:c7:57:83:bf:
bb:54:4d:23:4f:ac:53:0e:98:c8:fd:0b:e3:0b:6a:44:ba:ec:
40:16:b6:12:6d:88:df:37:37:ca:87:02:71:61:fe:41:0d:c8:
c4:31:e6:c2:c0:a6:64:db:8e:cb:97:00:fe:73:84:b1:64:60:
0c:61:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org