Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/syif_dxic6Ipy6jod-TapNkRDnM.roa
File: syif_dxic6Ipy6jod-TapNkRDnM.roa (raw, json)
Hash identifier: VCIeLpXCXA4vIscR0Djsyxuz44v3O4on6ahuLje0PaM=
Subject key identifier: B3:28:9F:FD:DC:62:73:A2:29:CB:A8:E8:77:E4:DA:A4:D9:11:0E:73
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018E410623740437A696BC28DBB07366BCE2
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/syif_dxic6Ipy6jod-TapNkRDnM.roa
Signing time: Fri 15 Mar 2024 07:31:44 +0000
ROA not before: Fri 15 Mar 2024 07:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 91.245.184.0/22 maxlen: 22
193.36.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 03 Apr 2024 13:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:06:23:74:04:37:a6:96:bc:28:db:b0:73:66:bc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Mar 15 07:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3289ffddc6273a229cba8e877e4daa4d9110e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:0b:e0:33:e9:31:5e:70:a4:97:c0:04:0d:
35:84:ac:3b:b8:63:cd:34:38:3e:d0:ba:56:ab:d3:
3f:f6:82:02:36:ee:85:bc:e7:ec:d1:2e:51:37:a2:
28:a1:19:ac:28:34:26:0c:9f:b6:37:a8:0b:fb:34:
73:0c:13:47:05:5e:02:09:95:4a:2b:22:a6:38:18:
2e:32:00:a9:13:6f:1f:a8:8d:49:85:27:7b:2d:83:
0f:79:f7:2f:d7:e1:f6:78:c0:5a:2d:a9:1a:e7:d5:
ea:41:36:a1:d9:cb:8d:f1:7b:ed:f6:f7:0d:4d:59:
ae:e8:09:37:16:3b:ef:1e:d3:b3:69:6e:ad:b5:36:
62:4b:1c:fb:fc:ea:31:87:3e:be:dd:68:12:fb:04:
bc:27:e0:97:24:3b:e9:2a:03:7b:2f:e8:24:a5:00:
f8:cf:31:37:d1:3c:37:5b:ee:54:7e:3d:0e:38:d4:
88:6c:7d:be:06:7c:31:8f:da:40:d6:d1:49:ee:8d:
c1:bb:1c:b1:f4:a1:24:c9:41:28:22:fc:76:44:b7:
f5:d4:b8:0a:73:e2:5b:a3:4d:aa:ca:26:13:4f:f3:
24:e9:56:cf:1c:1d:d9:ae:53:27:ff:f6:cb:f2:56:
4d:3a:63:e1:29:71:7b:45:91:fe:aa:9d:dc:2c:1c:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:28:9F:FD:DC:62:73:A2:29:CB:A8:E8:77:E4:DA:A4:D9:11:0E:73
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/syif_dxic6Ipy6jod-TapNkRDnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.184.0/22
193.36.208.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:3f:1a:b8:5e:ba:e9:9b:0a:1e:a1:e8:1c:69:6d:76:6c:33:
f1:fc:e5:a0:82:44:77:85:7a:82:3c:f6:4e:3d:ed:e4:f5:0e:
69:23:7f:f6:aa:85:31:03:55:d3:86:96:c2:1a:7d:da:99:48:
30:43:55:41:13:e9:51:5c:02:49:ed:d8:05:2e:84:38:3b:36:
ca:35:bb:95:9f:dc:ac:60:4e:c6:40:2b:91:52:9f:51:a7:49:
c1:ee:1b:c8:6f:62:33:d6:1a:e0:27:44:b1:d2:17:8d:c1:63:
f1:4d:d9:21:f3:35:b2:3a:13:e0:c2:0f:aa:2f:91:30:7b:a8:
53:8c:d7:ee:36:4c:55:c1:ba:81:1f:15:c7:a1:7d:a9:01:e5:
4d:ab:7c:b2:8f:18:98:89:1a:50:43:0e:fc:58:96:76:ae:88:
2d:fb:67:e2:7a:2c:3f:66:78:be:02:e5:9d:cd:5c:cf:5f:9a:
2c:66:09:a1:13:4a:9c:b2:9a:fe:e9:64:32:38:a2:65:48:46:
63:69:ad:f1:43:19:95:18:aa:6c:4a:e0:36:9d:ea:1a:54:f2:
0e:c6:40:ff:0e:d7:ca:9e:38:ce:7a:bf:36:a2:2d:d6:c4:17:
ae:c9:19:19:14:bd:b8:9d:e1:11:4b:db:5c:12:c0:9f:35:8e:
79:07:d4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org