Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Yihndl1dym_D7kA-7TvWf8FlZCk.roa
File: Yihndl1dym_D7kA-7TvWf8FlZCk.roa (raw, json)
Hash identifier: SDYChT29zsb2T0gPcfaVrXfU4SVz3UayBsLB4fdWRXo=
Subject key identifier: 62:28:67:76:5D:5D:CA:6F:C3:EE:40:3E:ED:3B:D6:7F:C1:65:64:29
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0187D8FCDF28F82AB59921311185C950BD9F
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Yihndl1dym_D7kA-7TvWf8FlZCk.roa
Signing time: Mon 01 May 2023 20:24:23 +0000
ROA not before: Mon 01 May 2023 20:24:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 188.255.141.0/24 maxlen: 24
212.69.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 08:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d8:fc:df:28:f8:2a:b5:99:21:31:11:85:c9:50:bd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 1 20:24:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=622867765d5dca6fc3ee403eed3bd67fc1656429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:50:89:1d:bc:ee:fe:6b:c1:22:22:8e:78:
d1:9c:f5:36:40:8d:9d:72:1d:4e:76:9f:4a:4a:94:
3a:f0:b6:de:24:5b:34:df:f9:3e:b4:1c:10:c7:3f:
b6:89:5b:86:ff:05:a0:92:dd:22:28:63:65:a4:c2:
6b:cf:a4:79:b7:35:91:98:47:6f:f4:63:97:a4:8f:
d2:d5:0c:d2:90:b0:94:7e:c3:60:8b:54:5e:9f:18:
95:b4:f5:64:8a:d6:8a:12:90:ba:33:70:cf:b3:58:
3b:3a:8b:20:65:00:89:38:83:50:1e:6f:6e:0a:74:
2f:cf:0f:19:4d:4f:fd:72:f3:66:d8:8a:fe:4a:36:
25:b8:1c:d7:df:b0:cd:f5:da:33:6f:24:f6:5b:5f:
dd:6c:ea:c9:37:6e:13:00:a5:57:fc:00:bf:a9:4d:
b9:a9:62:64:e2:51:bf:59:e7:20:a3:eb:af:3c:d5:
b6:0c:e6:49:57:fa:aa:ac:46:50:a9:c2:b3:ff:2c:
68:f2:81:7e:91:eb:44:4b:48:4a:d2:41:de:b4:29:
9b:cf:bf:c7:4a:84:f6:a0:fb:b9:d2:43:ef:01:2e:
4d:5f:e1:37:53:b0:1c:e4:5a:34:f2:66:80:f8:a4:
c6:17:56:0d:31:4e:47:fd:44:64:7d:3c:ea:4e:bb:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:28:67:76:5D:5D:CA:6F:C3:EE:40:3E:ED:3B:D6:7F:C1:65:64:29
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Yihndl1dym_D7kA-7TvWf8FlZCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.141.0/24
212.69.10.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:04:a6:13:24:98:e7:9a:5f:04:d3:83:6f:3d:e7:ef:87:92:
42:7a:88:1b:e9:27:84:25:64:a3:17:cf:db:95:7e:9a:61:84:
85:2b:c4:ee:66:da:93:08:7e:a6:31:8d:6e:13:e3:c5:a4:7d:
bb:cb:78:fa:9c:88:dd:32:34:b0:ca:6e:95:16:e0:67:ee:dc:
d4:2d:8c:9f:36:a8:ba:10:27:8d:d4:3e:48:cc:8f:44:7d:af:
3a:e3:44:d5:6f:f7:f0:79:4a:13:1c:6f:9b:fb:a3:b7:b8:8c:
84:bf:a4:02:43:2d:5d:cb:58:d0:2b:d0:94:d1:7a:82:0a:79:
3a:43:bd:a3:2b:55:41:03:26:04:e9:cc:7c:67:d7:ce:be:e0:
8f:68:60:7c:14:a9:c7:98:d5:6c:e5:47:f9:9c:59:1d:e1:ee:
22:88:c2:18:c5:5d:4b:8e:9c:ad:6a:f9:f7:4b:4d:a9:e5:51:
70:80:5f:b4:1d:3f:54:2b:c9:a8:b2:72:f2:a7:24:a3:54:62:
32:63:d4:87:1d:06:16:4f:f3:81:c1:d6:9d:2d:30:b5:04:aa:
e3:d6:88:83:cd:5b:c4:dc:ea:c2:97:ca:d4:5d:2c:9a:08:ff:
06:55:bd:9b:2d:7a:49:35:28:c5:81:ad:ff:f3:36:13:a5:ed:
7a:26:fa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org