Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/Ye2ZEVw_KrKpT9gHNI9o9V_nHzc.roa
File: Ye2ZEVw_KrKpT9gHNI9o9V_nHzc.roa (raw, json)
Hash identifier: 26UgXiuyjjuWiqqwoXWaVMQ+gxlEwqRMnYynAdwVB3k=
Subject key identifier: 61:ED:99:11:5C:3F:2A:B2:A9:4F:D8:07:34:8F:68:F5:5F:E7:1F:37
Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial: 01856F42B30DB75B42CB58BD7B334A1B97E6
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/Ye2ZEVw_KrKpT9gHNI9o9V_nHzc.roa
Signing time: Sun 01 Jan 2023 21:35:20 +0000
ROA not before: Sun 01 Jan 2023 21:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202004
IP address blocks: 45.11.60.0/22 maxlen: 22
185.56.208.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b3:0d:b7:5b:42:cb:58:bd:7b:33:4a:1b:97:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Validity
Not Before: Jan 1 21:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61ed99115c3f2ab2a94fd807348f68f55fe71f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:09:0c:f5:56:c9:4c:56:89:d9:f8:61:70:
92:bf:a6:ec:bd:89:34:6f:2c:f5:89:85:28:0b:19:
16:61:67:c3:b7:b8:ad:89:28:cf:6f:d5:16:1c:07:
7e:1e:a7:0e:51:16:59:82:7d:ef:f0:e6:3d:d1:90:
d1:f5:8b:50:d3:33:ed:bf:c5:c6:45:27:75:ba:09:
40:86:e7:fe:8b:4f:8f:53:ac:0e:db:3d:fe:a8:00:
d2:51:23:cc:47:82:16:98:ec:8d:f7:6f:4a:f6:18:
d3:f2:4e:54:19:73:0e:2d:c5:b2:fe:09:68:91:ad:
c5:96:a9:c5:80:ad:dd:c5:46:7d:8f:a4:c3:13:01:
27:03:ae:6e:60:8e:7c:ae:d5:3c:ff:3b:5d:a6:b2:
81:e0:c4:c0:3e:ab:ae:00:1e:33:6e:a9:45:ec:6d:
a6:a0:ad:c7:37:77:61:98:c9:2e:29:5e:9c:3e:42:
2b:92:e6:ca:53:01:29:68:1d:d2:c4:cf:54:92:28:
00:ba:a1:40:14:b9:be:dc:94:4e:f4:11:bf:fe:67:
16:25:06:5a:62:b6:3f:51:9f:cf:5e:49:33:f8:13:
16:03:69:6b:00:4a:7e:d3:b3:c0:1b:ec:95:37:e6:
57:ec:15:c7:e2:17:c9:81:bb:6c:77:63:d3:8c:41:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:ED:99:11:5C:3F:2A:B2:A9:4F:D8:07:34:8F:68:F5:5F:E7:1F:37
X509v3 Authority Key Identifier:
keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/Ye2ZEVw_KrKpT9gHNI9o9V_nHzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.60.0/22
185.56.208.0/22
Signature Algorithm: sha256WithRSAEncryption
63:42:b0:a5:c1:40:8a:12:67:79:6c:d5:3f:8d:04:56:c6:3c:
39:fe:5b:01:b8:b0:80:0d:d1:2b:36:52:bd:82:62:84:01:cf:
c9:b4:00:66:38:c0:86:02:a7:ad:d3:b8:17:d4:c3:e7:ad:3d:
b6:51:dc:de:d5:9d:dc:d1:e6:d8:1c:b6:a0:ef:99:25:82:2c:
ae:6a:2c:d8:5d:a3:7a:3d:24:85:43:09:fa:73:6b:48:42:1c:
a9:dd:c7:5f:f9:63:4a:7a:30:44:f7:c0:48:74:4a:e0:4e:ea:
c3:96:08:1d:fa:ea:5a:1e:75:24:ba:e0:8c:4c:73:27:64:75:
75:6c:93:d3:b6:12:46:2c:25:2a:c4:e2:a5:5b:da:d8:3d:fc:
5f:e5:d6:68:7e:db:7c:02:89:44:c1:7a:ef:ef:6e:9c:3a:85:
97:03:6b:d1:79:81:c1:8e:03:e3:35:ad:8d:c1:0b:a8:50:33:
d1:a9:c8:1e:dd:6c:cf:10:04:17:13:50:d0:29:75:82:44:1f:
88:1f:c8:2c:ba:c6:76:36:ca:a3:72:3c:c7:1e:08:37:d6:7d:
91:2e:49:32:19:f1:cc:20:fd:33:f0:b9:32:0d:42:ae:db:2f:
23:fd:f5:f0:72:30:63:67:50:91:e4:4c:c7:84:9e:76:9e:fc:
d1:2e:ee:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:00 2024 by rpki-client on console-fra.rpki-client.org