Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/yZDfXEG4OeTT0tW4k9Hg6_FUmAs.roa
File: yZDfXEG4OeTT0tW4k9Hg6_FUmAs.roa (raw, json)
Hash identifier: 0tMM/ZJBrttC9xGNhreuTAnBM5Uy8uyf+dvf8yzXmEY=
Subject key identifier: C9:90:DF:5C:41:B8:39:E4:D3:D2:D5:B8:93:D1:E0:EB:F1:54:98:0B
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 01857246C3A8F51A17C979BB7BD91849C75D
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/yZDfXEG4OeTT0tW4k9Hg6_FUmAs.roa
Signing time: Mon 02 Jan 2023 11:38:38 +0000
ROA not before: Mon 02 Jan 2023 11:38:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.115.217.0/24 maxlen: 24
45.140.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jan 2023 14:36:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:c3:a8:f5:1a:17:c9:79:bb:7b:d9:18:49:c7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 2 11:38:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c990df5c41b839e4d3d2d5b893d1e0ebf154980b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:99:ca:9c:dd:d2:16:13:d5:76:62:60:e7:94:
02:1b:8f:66:9f:97:07:54:b8:85:b3:82:b0:13:44:
2d:c8:fe:82:29:c3:38:cc:0b:b9:b0:1f:dc:3c:69:
8d:3e:b4:b9:d1:e6:cd:46:ff:dd:57:dc:38:a1:df:
48:e4:3e:98:4d:3a:19:cf:1b:1d:ff:97:cb:63:be:
fb:e7:96:99:19:e5:1b:7c:f3:ce:c1:07:97:e2:5e:
53:cf:39:f8:1e:55:ba:bf:48:13:05:ff:5c:e3:71:
bc:60:7e:34:cd:2e:c4:f9:27:51:a6:bc:37:c9:f1:
6f:52:74:9b:15:56:e0:83:e4:26:39:ea:5f:dc:80:
15:f3:bf:3b:77:e6:8f:01:4f:0c:d5:c4:10:a5:75:
2c:5f:83:e9:ab:3b:ba:10:7d:ec:a1:03:63:9f:d7:
2e:34:cc:90:38:52:c6:4b:36:2f:e5:48:a5:ca:e1:
2c:62:83:91:bc:a4:b6:67:4f:7c:db:72:b1:73:5f:
7c:b1:ac:e9:48:19:de:cb:8b:f0:32:de:1b:49:c7:
f4:03:91:0f:aa:88:07:1a:ac:35:fd:4a:17:0e:bf:
7d:7c:b4:d1:21:9c:7a:37:3d:46:60:9b:84:d6:21:
e6:82:d7:ba:66:69:72:3d:75:4b:83:37:d7:74:cc:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:90:DF:5C:41:B8:39:E4:D3:D2:D5:B8:93:D1:E0:EB:F1:54:98:0B
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/yZDfXEG4OeTT0tW4k9Hg6_FUmAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.211.0/24
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:f2:e3:6f:03:22:bc:17:67:80:70:33:49:5d:b9:47:8f:bc:
b7:69:77:c6:0c:47:08:9d:83:b5:b6:4b:6a:30:db:93:1a:8d:
31:c7:67:39:f5:5d:65:d3:4a:7a:b0:05:83:28:55:e0:fd:e3:
71:55:9a:35:19:e6:a2:98:68:c4:82:d8:ef:6f:84:f2:60:00:
45:36:80:14:9c:c4:7d:4a:b3:fe:65:a0:d0:10:4b:6c:b7:c8:
f3:6e:75:8d:42:b6:31:3b:86:f5:c2:71:30:4b:37:50:ec:fa:
3d:73:80:b7:04:aa:c8:ed:0f:13:0f:28:70:9f:73:f1:cb:a5:
80:7e:ef:91:ae:45:08:d4:15:87:42:35:d2:6c:7a:17:92:dd:
47:63:ae:8b:67:b0:4d:3e:34:06:35:28:80:ce:dd:cb:7c:d6:
9e:ad:05:f5:d4:f7:3a:5d:97:1c:04:78:c8:76:d6:ab:b3:f5:
a4:dd:dc:71:b4:ce:e2:96:f7:77:c8:eb:62:1e:84:8a:de:15:
dc:75:9c:19:0b:f0:d2:a2:b2:f8:32:3d:95:06:f3:64:72:44:
85:6b:92:14:3c:b6:d6:e6:21:63:de:b9:69:73:79:23:cd:46:
29:88:c9:35:08:5b:80:53:c3:83:9f:51:19:04:37:de:5b:94:
af:cd:28:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:57 2024 by rpki-client on console-ams.rpki-client.org