Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YykA1yL8VxMWbgbO3aCa9TaBvMI.roa
File: YykA1yL8VxMWbgbO3aCa9TaBvMI.roa (raw, json)
Hash identifier: rnYd9F8q0fee1QT83tPNJBUQP/DW2dF7/CFcjWcOWbg=
Subject key identifier: 63:29:00:D7:22:FC:57:13:16:6E:06:CE:DD:A0:9A:F5:36:81:BC:C2
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0185F2D374CD76235E7A1081716BAC99B4CC
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YykA1yL8VxMWbgbO3aCa9TaBvMI.roa
Signing time: Fri 27 Jan 2023 10:43:42 +0000
ROA not before: Fri 27 Jan 2023 10:43:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206654
IP address blocks: 194.180.238.0/24 maxlen: 24
194.213.10.0/24 maxlen: 24
45.88.124.0/22 maxlen: 22
2a0f:fa00::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 21 Aug 2023 19:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:d3:74:cd:76:23:5e:7a:10:81:71:6b:ac:99:b4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 27 10:43:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=632900d722fc5713166e06cedda09af53681bcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:56:a5:2b:d6:25:d7:47:e0:12:eb:c6:c2:85:
57:26:87:ee:a6:0d:6b:de:25:71:ff:21:ea:82:48:
1d:da:4a:d3:89:ad:05:ab:fd:de:ec:0b:51:13:9d:
40:ec:46:a5:15:22:ea:3d:68:4a:37:bc:aa:5d:54:
da:21:b7:c1:2a:04:be:4d:3f:8a:ab:92:f8:19:f8:
33:69:2e:8a:f7:a8:5b:26:88:d8:51:5e:f2:c0:b1:
cc:08:47:4e:67:24:17:ee:ba:83:01:3c:b2:80:5c:
2b:85:eb:18:5b:94:8b:68:a6:90:12:ed:88:1c:d9:
54:79:69:d6:77:3e:6e:c7:58:93:66:88:d2:8c:9a:
f8:eb:7c:1e:d6:ca:0f:df:17:47:72:4d:1e:d1:d5:
cd:42:94:2d:e3:39:79:2d:8b:5b:33:21:8e:36:21:
3a:fb:b7:65:fe:f2:4c:72:de:07:12:b1:8f:f3:de:
cc:db:8b:9d:66:90:f2:de:5b:54:4f:b1:a0:4b:b1:
1a:5c:9d:6e:bb:98:3b:79:f2:57:30:10:50:19:a3:
1f:5a:2b:0e:d8:7e:97:1e:a9:5f:ca:2a:36:e1:27:
7f:22:8e:54:4e:9e:6d:9f:65:df:d1:dc:3a:b7:29:
d6:ea:be:11:2d:44:7a:b0:60:8b:7b:23:70:23:bb:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:00:D7:22:FC:57:13:16:6E:06:CE:DD:A0:9A:F5:36:81:BC:C2
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YykA1yL8VxMWbgbO3aCa9TaBvMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.124.0/22
194.180.238.0/24
194.213.10.0/24
IPv6:
2a0f:fa00::/29
Signature Algorithm: sha256WithRSAEncryption
44:9a:f5:12:d7:dc:d5:78:21:76:50:42:b4:b8:4c:08:91:e7:
d6:d2:fa:a6:1e:5a:58:5a:e1:20:dc:2a:bb:be:1a:76:dc:56:
94:16:89:a1:3d:ee:93:5d:1e:bf:0f:30:c4:ff:5c:33:27:cf:
82:2c:8b:5e:58:b2:37:94:0a:45:80:57:11:e1:cb:b3:8a:7b:
79:6d:0b:d7:b6:40:1a:15:12:ca:1c:90:ca:10:5f:a0:40:c7:
62:1e:5c:b0:38:d7:2a:61:5c:57:c7:0e:34:2f:1b:ee:d5:98:
ba:1a:a8:b2:bf:7b:a3:ab:a7:cd:02:56:08:87:ca:85:ab:85:
ae:aa:aa:15:54:51:f3:57:d2:62:0e:c5:42:ba:a4:a9:d4:0c:
e6:8a:e6:c3:58:81:2e:d0:27:45:8b:6b:e4:31:31:88:04:10:
29:c6:df:db:32:f4:11:22:02:0b:50:12:4c:d3:26:8d:31:91:
53:df:6e:e7:f3:dc:f1:68:71:b3:88:1b:4a:ed:0c:02:f0:2f:
dc:20:27:82:e7:cb:0e:32:72:b0:48:cd:7f:0d:92:2c:22:01:
da:e1:6e:0a:39:8c:04:ec:09:30:3e:3a:a5:8e:12:7b:22:31:
09:2f:d6:5d:b1:5c:7d:a5:0f:19:b2:e5:1a:fc:6f:6f:64:3f:
9d:f0:81:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org