Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/y_l28Ets-RtKEW_7X_UDc2qrIus.roa
File: y_l28Ets-RtKEW_7X_UDc2qrIus.roa (raw, json)
Hash identifier: OcY8FRuWe/8CcqQIcuGew23kjdfegF7CRI/+GkVKhF0=
Subject key identifier: CB:F9:76:F0:4B:6C:F9:1B:4A:11:6F:FB:5F:F5:03:73:6A:AB:22:EB
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 0187B7CDF78E68DB2F07F861F076D534A669
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/y_l28Ets-RtKEW_7X_UDc2qrIus.roa
Signing time: Tue 25 Apr 2023 09:45:41 +0000
ROA not before: Tue 25 Apr 2023 09:45:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209523
IP address blocks: 185.97.140.0/24 maxlen: 24
185.97.140.0/22 maxlen: 22
185.97.141.0/24 maxlen: 24
5.198.192.0/19 maxlen: 19
2a02:e58::/32 maxlen: 32
2a02:e58:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 09 Nov 2023 13:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:cd:f7:8e:68:db:2f:07:f8:61:f0:76:d5:34:a6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Apr 25 09:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbf976f04b6cf91b4a116ffb5ff503736aab22eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8b:47:0e:fd:5f:77:51:de:16:45:5d:0c:3e:
06:f7:8b:7b:9d:f6:93:7c:db:54:ce:50:9b:88:5e:
70:1a:71:1d:8d:f8:5b:e1:5d:17:55:f9:14:95:51:
f0:4a:97:b6:b3:a8:99:83:23:4d:ff:fa:8b:6f:a8:
01:af:7c:51:4c:ae:4f:58:69:1e:c2:21:26:0e:d0:
a0:94:5f:bf:3c:b4:56:aa:df:4b:6b:1c:db:ef:29:
45:a5:81:e8:71:9f:26:0f:88:84:fc:85:0b:c2:ee:
8d:d0:61:ae:67:cf:a5:25:f6:92:46:73:90:a0:77:
7c:60:41:97:95:12:83:1e:34:1f:c3:cc:f5:a6:e4:
53:73:39:26:74:70:b3:ed:e4:37:8c:fd:05:7e:3b:
55:b0:13:ec:65:ff:fe:ee:9c:4c:25:25:ca:1d:1f:
d4:c1:ed:37:84:55:13:a6:94:0f:a6:e2:ad:a3:e4:
80:72:db:43:c2:03:f8:fd:d8:0c:64:11:77:85:79:
fd:91:93:a2:a4:5d:c0:ad:04:dd:e4:e3:32:82:00:
94:d5:83:39:02:83:77:b5:c3:22:c6:b2:03:97:9b:
e9:6e:c6:d3:60:55:9a:97:ce:f5:79:59:07:9a:b7:
d0:d3:f4:e7:da:9a:f0:ce:82:cf:51:1b:74:ab:92:
6c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F9:76:F0:4B:6C:F9:1B:4A:11:6F:FB:5F:F5:03:73:6A:AB:22:EB
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/y_l28Ets-RtKEW_7X_UDc2qrIus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.192.0/19
185.97.140.0/22
IPv6:
2a02:e58::/32
Signature Algorithm: sha256WithRSAEncryption
5b:f8:3c:32:5a:37:3b:6a:74:a6:34:47:10:61:7f:26:af:63:
90:71:97:47:78:cf:bb:08:13:39:96:08:a9:9a:5a:ed:10:30:
3f:50:54:af:8e:f6:77:ce:73:91:2a:46:a6:b4:5f:3b:24:a8:
ba:13:1b:33:8d:12:0a:0c:74:dc:32:36:ff:45:35:01:d9:4c:
e6:a8:90:91:29:d5:df:a5:c5:09:31:97:fb:b5:b8:a2:76:ed:
b3:bf:b4:60:51:c5:3a:e6:ae:96:4b:c8:6a:39:5c:25:77:79:
f1:23:01:60:a7:7e:ab:63:91:88:76:6f:84:5f:aa:87:ac:10:
d3:66:6a:03:c5:af:b9:cc:66:e7:42:4b:f5:9b:df:3a:8f:fe:
7b:65:d8:7a:7d:44:9a:01:83:4c:f3:33:88:d6:ec:40:91:61:
68:4a:db:75:86:47:1c:4a:20:e8:a0:3a:be:3e:bc:6c:73:c6:
59:d2:dc:9c:48:3f:b7:b3:76:8d:e2:56:d3:15:fb:db:2c:1c:
21:b1:26:73:47:ea:51:43:86:73:e7:6a:fa:92:ad:92:18:38:
52:b9:51:39:56:99:20:24:44:ad:a0:66:37:f5:b9:94:e3:e8:
90:6b:19:07:7f:a1:79:b9:18:18:23:f1:4f:c9:b5:c2:3d:93:
29:f2:45:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:40 2024 by rpki-client on console-fra.rpki-client.org