Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/YlnhUddZaYpDzp8arEJNlDBs8wo.roa
File: YlnhUddZaYpDzp8arEJNlDBs8wo.roa (raw, json)
Hash identifier: EXNptvlmtduBiAHI61QPP8b1qmtvH4WMS6U0X9gGQEQ=
Subject key identifier: 62:59:E1:51:D7:59:69:8A:43:CE:9F:1A:AC:42:4D:94:30:6C:F3:0A
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 01857079B22F1D716DB8167F1E01F51F2628
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/YlnhUddZaYpDzp8arEJNlDBs8wo.roa
Signing time: Mon 02 Jan 2023 03:15:01 +0000
ROA not before: Mon 02 Jan 2023 03:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 185.76.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:b2:2f:1d:71:6d:b8:16:7f:1e:01:f5:1f:26:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 2 03:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6259e151d759698a43ce9f1aac424d94306cf30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:e1:88:44:df:39:ee:c4:00:bf:06:41:7e:
a7:90:55:c9:13:47:43:ef:aa:79:5f:47:31:be:9c:
c5:6c:e8:63:41:94:2b:be:1f:06:eb:01:81:3b:09:
26:dd:49:1c:d1:04:0a:b5:21:1e:fe:86:31:8a:2e:
ce:9e:27:eb:98:7c:77:c4:39:d3:21:3e:79:cf:32:
eb:ec:1e:55:2a:d5:eb:e3:f8:fa:62:74:d8:d3:f2:
d7:c7:6e:1e:a4:78:41:ae:4e:9c:cc:86:c0:ed:8c:
da:b5:c2:0e:69:e2:0f:1f:b7:05:9b:3f:2e:81:b1:
f4:04:14:d7:f6:2c:fd:46:b7:95:eb:bd:01:4d:1c:
cd:ce:af:e5:e1:e7:21:aa:a6:a8:86:09:10:e1:d7:
00:89:9d:a8:9e:51:1e:09:d5:ef:bb:19:0b:ac:9e:
97:3b:95:95:59:b2:a9:4f:d1:37:fc:03:55:8c:1b:
4f:15:c5:34:56:38:69:58:87:ee:0a:90:a0:f0:56:
69:98:cc:c3:95:33:73:4c:c1:99:c4:26:9f:f8:cf:
e1:90:26:ef:b3:a0:96:e7:a6:1b:e0:3a:fb:a2:d7:
58:1c:22:3a:11:00:b5:db:08:6d:37:ed:b8:9c:12:
62:81:be:b3:a2:29:8a:b6:4c:d1:49:9e:a4:c0:29:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:59:E1:51:D7:59:69:8A:43:CE:9F:1A:AC:42:4D:94:30:6C:F3:0A
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/YlnhUddZaYpDzp8arEJNlDBs8wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.36.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:86:2b:68:2d:4c:29:57:1e:41:a4:b4:69:ba:86:6a:12:cc:
47:18:c8:fa:a3:a8:91:34:f6:cf:4f:fc:94:1f:57:f0:c9:4b:
c2:11:d0:ac:2e:97:05:86:f8:b0:3a:89:2b:4a:f9:df:2f:ff:
03:52:f6:88:21:c5:0f:f8:d1:48:7e:26:8d:bb:ff:11:4c:5b:
12:c9:fb:0a:c8:4d:e2:d3:0c:62:2f:50:0a:2d:06:60:8d:91:
a2:3a:3a:7d:31:98:00:7b:35:9e:d9:02:5f:d0:2e:e5:7c:a1:
6f:b0:11:c7:0a:a6:93:40:c2:67:9f:28:96:14:5e:fb:6a:01:
71:ea:e5:e5:45:bc:f8:b6:7a:07:7c:62:d5:69:b5:3c:d9:00:
2e:cb:65:68:b4:ac:e1:cf:54:7e:f1:61:33:1e:bd:4a:d8:f2:
5b:83:58:26:fa:10:56:2a:d7:38:84:54:95:cf:55:59:68:8f:
b6:c5:68:5c:d5:ea:11:f6:ba:64:ca:a3:d8:16:b4:38:a6:33:
bf:30:2c:0e:0a:27:e4:2e:77:e1:eb:52:4d:a8:5e:34:04:dc:
5a:e4:fc:31:25:2f:2d:cf:28:a4:13:07:6b:4e:f7:d0:2e:f4:
b8:11:5d:69:5b:98:66:41:44:26:79:e2:b7:fb:d3:89:ef:3c:
be:1c:58:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:10 2024 by rpki-client on console-ams.rpki-client.org