Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YwFksah3dBPDQzKmxjzaArKJTNs.roa
File: YwFksah3dBPDQzKmxjzaArKJTNs.roa (raw, json)
Hash identifier: VG+OFGM/yAOvGiElD0L07ztCYTF6j8EQU/nBiRya62g=
Subject key identifier: 63:01:64:B1:A8:77:74:13:C3:43:32:A6:C6:3C:DA:02:B2:89:4C:DB
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CC56E166E9C81303652FF12952806BF2F
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YwFksah3dBPDQzKmxjzaArKJTNs.roa
Signing time: Mon 01 Jan 2024 14:29:35 +0000
ROA not before: Mon 01 Jan 2024 14:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213382
IP address blocks: 93.186.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 21:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:16:6e:9c:81:30:36:52:ff:12:95:28:06:bf:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=630164b1a8777413c34332a6c63cda02b2894cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:1c:4e:bc:8c:18:08:a9:1e:18:f2:d2:d2:
54:26:23:b6:fe:fe:12:08:3c:7d:eb:ee:77:b6:9f:
ae:42:b0:f4:69:98:31:7b:2e:86:ef:c1:b2:41:8d:
0b:dc:ec:af:56:1e:09:3e:b7:51:9a:19:80:d0:4c:
d0:08:67:36:2a:85:69:04:f7:7a:c1:7b:ca:04:1d:
c5:21:ea:25:57:4c:9d:26:1b:c9:51:4a:1a:24:b6:
70:91:8a:aa:89:2c:f9:fc:c1:b5:fc:5d:80:c3:32:
a6:b8:a8:21:a3:61:74:24:51:f4:a8:97:59:ae:a7:
ca:a7:d6:0c:cb:b2:1e:ca:35:e0:c3:da:42:02:6b:
49:e3:6d:22:71:0d:0a:3e:8d:95:f3:fb:dc:79:43:
c4:b1:be:b7:ba:15:3a:cc:bc:63:1d:81:05:3a:eb:
1f:bf:0b:34:46:65:70:e7:67:9d:19:f0:ce:1a:05:
b3:4b:f1:d8:c9:65:4f:9e:14:8e:7a:04:2d:26:9c:
3f:65:b3:39:ab:dd:5c:e3:1d:d0:97:e4:ec:52:97:
7b:11:77:8b:45:bb:2e:12:76:ad:aa:72:4f:70:8d:
0e:11:f1:ef:f4:20:f9:e0:6a:ce:77:7c:24:4f:06:
b7:f1:5a:e3:61:a7:3a:e2:8b:9c:c0:c5:57:96:b6:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:01:64:B1:A8:77:74:13:C3:43:32:A6:C6:3C:DA:02:B2:89:4C:DB
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YwFksah3dBPDQzKmxjzaArKJTNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:cf:d6:71:d8:1c:ac:d8:c6:ef:48:af:18:70:c5:21:1b:7f:
1d:5b:a9:58:9b:61:12:72:9a:ab:18:77:35:04:24:46:b7:0a:
88:26:b5:a0:7a:e6:2d:fe:ad:b0:31:10:ad:72:8d:6d:d2:94:
61:81:f2:a6:64:d2:36:54:d9:54:aa:b1:f2:ac:70:05:fa:b3:
66:b1:13:ac:55:e8:77:c9:dd:cf:cd:21:f9:ca:9d:ec:35:08:
8f:6c:cf:cc:a4:74:f1:ab:f3:f5:5d:1e:48:35:7f:b1:70:95:
64:19:1c:93:d4:db:31:4a:32:9e:16:a5:0b:2f:38:9f:7b:f5:
d4:a4:47:d3:55:08:44:e8:57:d3:f0:33:a7:3c:4b:03:7f:71:
40:32:79:2c:36:2b:d5:84:2f:4e:22:61:90:9b:77:f5:96:d1:
c6:80:91:77:27:7e:96:c8:2e:37:96:80:c8:da:b3:84:de:01:
f5:25:58:77:4f:fa:48:87:89:f5:e2:d8:3c:f2:71:66:87:71:
01:a9:81:53:55:e5:9f:37:bb:40:db:b7:2e:b9:ae:7a:2d:3f:
bd:a3:fc:7f:4d:6f:a1:63:2e:1a:26:31:b6:42:e5:c9:15:cb:
86:ec:e1:66:23:f8:31:cd:8c:cc:c7:8a:c9:73:e2:9d:3e:d8:
43:99:48:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org