Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/yIlmji4JjyZkNuS3_t6ABf0Ux9Y.roa
File: yIlmji4JjyZkNuS3_t6ABf0Ux9Y.roa (raw, json)
Hash identifier: C8Irgyz9ESFy13tG7FWP1wRwEKeqmx5Jsw+LkVPjL+E=
Subject key identifier: C8:89:66:8E:2E:09:8F:26:64:36:E4:B7:FE:DE:80:05:FD:14:C7:D6
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0187E586FC819F46D073906B2622E3B48D7C
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/yIlmji4JjyZkNuS3_t6ABf0Ux9Y.roa
Signing time: Thu 04 May 2023 06:50:41 +0000
ROA not before: Thu 04 May 2023 06:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.115.217.0/24 maxlen: 24
45.140.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Sep 2023 08:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:86:fc:81:9f:46:d0:73:90:6b:26:22:e3:b4:8d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: May 4 06:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c889668e2e098f266436e4b7fede8005fd14c7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c9:da:d6:b3:ff:35:44:fd:94:3d:64:66:29:
c4:c0:7d:cc:04:24:ab:6c:1d:1a:f0:58:11:49:96:
b3:08:c7:7b:34:77:c0:52:d5:24:8f:67:49:c7:48:
97:8f:2c:89:07:a1:61:82:36:75:21:d5:20:10:b2:
31:b7:42:f0:f8:ee:49:8d:72:44:f9:f5:d3:d7:21:
4c:46:e6:98:8d:3f:01:57:41:a7:61:b3:cf:bc:35:
3e:84:72:8f:c8:ce:f0:e7:79:95:d0:a6:aa:be:53:
b5:b2:b0:42:36:50:84:d7:1b:b3:a5:81:54:1e:ee:
d2:e9:0d:42:c0:45:78:eb:dd:02:fb:a0:9c:3a:ec:
ed:79:0d:12:b3:a1:86:71:76:4e:19:fc:5e:2d:98:
cc:2b:47:e6:30:9b:17:f0:80:28:e6:69:ef:1b:64:
b0:05:ff:23:07:dd:db:62:db:1b:39:b5:6a:ab:12:
be:dc:02:ef:10:cf:43:1a:44:fc:c3:2c:94:91:c7:
e0:b2:99:c9:b5:ec:b3:c9:12:74:8b:30:17:04:86:
7e:13:f7:ad:b0:6f:a7:bb:95:d8:db:44:3f:bd:48:
36:8c:23:a4:66:41:64:3c:b8:1e:9d:02:59:a7:8b:
fb:94:07:96:71:6d:cc:4d:08:40:28:1a:c1:e1:f5:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:89:66:8E:2E:09:8F:26:64:36:E4:B7:FE:DE:80:05:FD:14:C7:D6
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/yIlmji4JjyZkNuS3_t6ABf0Ux9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.211.0/24
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
23:11:65:9e:51:87:37:05:e5:cd:f5:a3:c5:56:61:6e:e9:83:
25:b5:da:89:8a:2d:2a:6d:e3:8a:ab:f2:49:fb:a4:30:0a:18:
77:3f:23:c8:d6:40:85:d5:23:e3:f4:74:23:6a:0d:21:83:30:
1a:1f:b7:cb:a5:41:4f:36:e8:44:cb:8f:02:fc:dd:ce:16:1f:
1a:08:14:74:98:33:44:80:29:b1:f2:3b:ad:16:97:cd:b9:50:
5a:38:9a:49:f2:a8:72:23:f1:30:32:5e:e0:fb:44:a0:89:66:
79:30:8c:d5:bf:c5:f4:48:88:d4:11:d4:98:9d:f0:86:1f:e3:
39:26:33:d2:99:97:d3:94:17:03:e9:54:f8:30:4d:f4:2e:09:
09:6c:56:7e:8a:07:40:88:0d:6d:07:b1:2b:0b:19:58:35:a2:
2c:eb:92:bb:77:e2:84:96:71:3a:53:f0:a7:a7:47:59:bc:e8:
43:75:84:47:b6:3f:6b:32:96:85:bd:ca:70:27:16:8e:39:55:
70:6e:18:ed:0f:0c:21:f9:1b:b7:b7:50:e2:07:49:e4:81:94:
05:a6:12:f8:89:30:81:37:77:df:e5:30:68:65:14:1a:86:e6:
92:8c:db:5e:5c:92:e0:51:35:bc:80:4c:6b:8d:a9:41:04:f5:
92:18:30:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:00 2024 by rpki-client on console-fra.rpki-client.org