Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/yhzNNl6D_JPRn7hV5WxQqEfry28.roa
File: yhzNNl6D_JPRn7hV5WxQqEfry28.roa (raw, json)
Hash identifier: vdCH0XQCT3Xzp2M+XdJxt9FZ4XO4IWMcQLhlW9AyvQg=
Subject key identifier: CA:1C:CD:36:5E:83:FC:93:D1:9F:B8:55:E5:6C:50:A8:47:EB:CB:6F
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 01856C53AE730E239A6CF9B4208780C2C246
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/yhzNNl6D_JPRn7hV5WxQqEfry28.roa
Signing time: Sun 01 Jan 2023 07:55:01 +0000
ROA not before: Sun 01 Jan 2023 07:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 134.97.16.0/24 maxlen: 24
193.22.4.0/24 maxlen: 24
134.97.3.0/24 maxlen: 24
134.97.2.0/24 maxlen: 24
2001:650:cc02::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:ae:73:0e:23:9a:6c:f9:b4:20:87:80:c2:c2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Jan 1 07:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca1ccd365e83fc93d19fb855e56c50a847ebcb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:84:4c:62:e1:61:5c:51:da:7e:53:cb:12:
2b:90:0c:57:7c:65:27:5a:da:99:e4:1c:99:2b:9e:
2a:a7:de:d9:58:2d:07:c8:da:76:f8:ec:5d:ac:15:
5b:83:e5:e9:17:59:b4:16:59:35:b1:22:0c:5b:60:
73:7c:c8:9a:ed:0d:1d:9f:57:c3:75:c3:74:36:68:
13:80:00:41:e6:48:82:ab:f6:17:dc:b9:6a:79:6a:
e0:cd:3c:a8:ee:9f:59:1a:88:c8:a9:53:cf:09:5c:
d0:1b:ff:9a:c6:35:4c:f4:3e:c9:f8:f0:e7:60:b5:
e9:9f:dd:54:61:af:d3:ce:78:a5:0c:86:2c:03:8b:
bd:f1:1f:2e:4c:58:c8:d5:e1:f3:72:eb:86:f6:e7:
0e:76:96:f8:30:f1:65:60:80:08:cc:c1:82:3d:5f:
2b:06:8e:3a:4a:34:b7:bc:23:00:43:0e:7d:87:c2:
1e:ad:db:58:a1:b1:d4:5e:6b:76:cb:e9:77:6f:60:
7a:2d:8c:ba:a5:37:05:98:b4:1d:e8:3e:65:3a:e7:
07:36:3c:93:e8:1e:83:4e:d4:a1:32:d2:59:4a:00:
f2:d2:5c:ff:04:9d:10:0a:b9:6a:88:00:b8:cb:8a:
9f:2f:6a:12:cb:7f:67:1d:e6:e7:67:2c:9b:a4:32:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1C:CD:36:5E:83:FC:93:D1:9F:B8:55:E5:6C:50:A8:47:EB:CB:6F
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/yhzNNl6D_JPRn7hV5WxQqEfry28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.97.2.0/23
134.97.16.0/24
193.22.4.0/24
IPv6:
2001:650:cc02::/48
Signature Algorithm: sha256WithRSAEncryption
78:f7:93:31:41:b6:c5:04:c4:88:e9:40:79:7c:5b:06:6d:cd:
73:40:a1:ff:64:7e:af:f3:e3:16:08:43:90:b6:6b:fd:60:3d:
df:8b:f9:88:e4:27:4a:80:ac:6d:78:b2:7a:0b:7c:c3:12:40:
6a:0a:e7:96:5d:ca:b9:3f:a7:0c:a4:ba:09:ef:80:28:7a:50:
19:77:54:34:2d:01:b0:49:97:f2:6b:c4:6b:93:32:1d:b4:20:
e8:c2:07:f1:a9:fc:1e:0b:17:b5:07:91:da:df:a2:ad:76:0d:
95:1a:33:49:35:44:3a:7c:48:94:55:e7:4b:05:1f:36:9f:66:
94:09:64:13:cf:2f:13:04:63:12:83:c1:2f:c2:f4:ec:c4:34:
36:3a:0b:69:6d:0a:95:fd:90:75:38:2c:a8:b6:6d:f8:36:23:
3d:f0:cf:6f:16:f7:4c:37:13:08:1c:87:0d:b3:bd:eb:38:3c:
79:1c:4c:26:1a:55:d3:c5:1c:7a:34:e5:6e:47:bf:9a:74:ed:
6e:c5:4b:d3:c0:42:ec:99:81:de:d8:48:1a:6c:9f:ca:c7:ff:
ed:d3:76:1f:6b:ff:d0:35:be:97:11:f3:ca:6c:b2:a1:57:0d:
4a:a1:84:e6:62:ab:20:bd:12:9b:15:f7:20:9e:7e:bf:e4:79:
5e:de:6b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:02 2024 by rpki-client on console-ams.rpki-client.org