Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/y4SS9qOoCOnjq-2fBIlXIrnGbH8.roa
File: y4SS9qOoCOnjq-2fBIlXIrnGbH8.roa (raw, json)
Hash identifier: CALrNGctsKAs+zfB2J8sqmXS3puJ/QcOtT52uIw6DAE=
Subject key identifier: CB:84:92:F6:A3:A8:08:E9:E3:AB:ED:9F:04:89:57:22:B9:C6:6C:7F
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0185724717192E62E451DDA4A2141B022E3A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/y4SS9qOoCOnjq-2fBIlXIrnGbH8.roa
Signing time: Mon 02 Jan 2023 11:38:59 +0000
ROA not before: Mon 02 Jan 2023 11:38:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205553
IP address blocks: 146.185.234.0/24 maxlen: 24
5.188.63.0/24 maxlen: 24
5.188.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 12:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:17:19:2e:62:e4:51:dd:a4:a2:14:1b:02:2e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb8492f6a3a808e9e3abed9f04895722b9c66c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:44:b4:84:03:6a:bf:40:7d:b2:18:ba:29:
c1:a1:0d:05:31:44:63:da:5b:1c:de:5e:b8:88:65:
2e:8b:ff:ba:ed:be:12:5b:fa:23:e6:4f:73:f0:29:
b7:f9:6a:2f:28:49:77:c9:9b:9c:98:b2:73:f0:e4:
aa:3f:6a:33:4a:4f:f6:e3:d1:f7:2b:f9:35:7a:8a:
9c:bd:18:f1:66:a7:f7:62:71:38:f9:3f:8d:77:a7:
68:73:aa:a0:65:89:47:53:b2:ea:01:5c:7d:d8:f6:
75:1c:91:e2:d2:71:66:17:51:1a:ca:95:29:4c:e2:
74:45:86:01:04:fb:4f:64:b3:61:5e:8a:2f:e1:26:
c1:73:45:70:5f:92:2e:ec:8f:b8:26:16:15:11:d3:
bf:11:c9:40:e9:3d:a3:25:8e:98:6e:90:2c:90:9a:
13:bc:0a:67:21:b2:f0:68:7f:77:ff:13:f8:ce:df:
b3:90:44:b1:71:8f:8c:a7:24:c2:77:9a:52:48:f5:
e0:df:89:bd:92:2e:42:7e:ac:71:1d:43:84:fa:ba:
7a:57:23:e1:98:af:8d:1e:06:df:ce:25:3e:30:d7:
c4:a8:3d:62:5c:3e:a6:5a:5b:81:58:91:a4:5f:a4:
da:9e:47:1b:d5:a0:a0:4c:44:db:06:67:0b:70:85:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:84:92:F6:A3:A8:08:E9:E3:AB:ED:9F:04:89:57:22:B9:C6:6C:7F
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/y4SS9qOoCOnjq-2fBIlXIrnGbH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.63.0/24
5.188.167.0/24
146.185.234.0/24
Signature Algorithm: sha256WithRSAEncryption
81:50:7d:39:54:31:30:df:a7:7e:03:9d:0a:71:1c:94:ca:a7:
a3:1b:09:e3:ea:7f:04:91:8e:49:d7:b0:8b:c7:93:e6:63:3a:
e1:75:3e:6e:0a:f4:4c:a8:8f:9f:b4:08:4d:f6:c2:8d:39:82:
5c:eb:c5:27:84:2f:92:94:87:ac:ba:04:14:06:39:e7:c1:24:
c7:de:5c:79:f8:0c:1a:a3:e4:dc:f8:92:77:29:c8:a3:88:ef:
e7:a1:be:b7:82:30:c8:2c:2d:69:31:49:45:99:8f:d2:20:b5:
99:6f:61:b7:fd:97:eb:06:1d:59:97:75:9c:2e:34:c9:10:ff:
77:11:23:bf:52:0d:70:a1:36:b3:b5:4b:4a:9c:e0:a0:22:ad:
98:96:93:6b:b8:02:c8:13:c0:a5:57:a4:7b:67:0e:3a:ce:14:
0b:f4:f7:b4:32:65:ee:21:31:8f:1e:e7:c9:c3:c0:2e:c0:16:
38:e5:dc:e1:fa:1e:e3:2c:95:ba:58:e9:76:e6:4c:52:3b:43:
82:f8:e2:b0:3a:0e:bf:14:cc:f2:b3:3f:d8:fc:4d:5b:64:c9:
3e:91:c5:a4:8b:b5:14:be:09:fe:f8:17:03:47:36:c3:47:12:
e4:17:80:f0:76:4b:ac:af:78:09:08:c0:3a:6c:7b:c7:b3:34:
af:b5:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:29 2024 by rpki-client on console-fra.rpki-client.org