Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/YqsFmJ2O-mgJ0SfdVqRLqZfnKzI.roa
File: YqsFmJ2O-mgJ0SfdVqRLqZfnKzI.roa (raw, json)
Hash identifier: D4zRk+qvhdV6sSlz3qPeeNgyX/6KCmXNMH2v/EYBpx8=
Subject key identifier: 62:AB:05:98:9D:8E:FA:68:09:D1:27:DD:56:A4:4B:A9:97:E7:2B:32
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 0185730CC88D717F2FD3803FCE255D396054
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/YqsFmJ2O-mgJ0SfdVqRLqZfnKzI.roa
Signing time: Mon 02 Jan 2023 15:14:55 +0000
ROA not before: Mon 02 Jan 2023 15:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 195.62.33.0/24 maxlen: 24
87.237.52.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:c8:8d:71:7f:2f:d3:80:3f:ce:25:5d:39:60:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Jan 2 15:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62ab05989d8efa6809d127dd56a44ba997e72b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:22:e1:9c:83:f7:ee:9e:34:00:e7:79:ea:
d4:91:be:84:9d:9c:c8:3b:97:db:03:3e:62:da:61:
de:be:e4:54:c2:6c:fc:b6:96:bc:d6:b1:52:f3:50:
55:02:c1:ce:48:0c:58:cf:ad:94:64:6f:1f:a1:28:
19:88:cb:00:97:37:45:b1:09:0c:3e:7e:48:f5:30:
fc:9f:06:ac:75:ec:79:34:ce:09:d6:07:ce:ab:ea:
0c:8b:91:2b:9b:97:91:45:ac:95:3b:91:b8:36:5c:
cc:83:2b:67:bf:ed:89:88:7a:28:b4:3f:60:8a:78:
a8:f2:3f:05:e9:c8:18:c9:30:79:e7:3a:50:4e:a5:
3c:fc:bd:9b:74:c8:05:d7:b6:ff:ff:e2:a0:80:26:
41:87:f5:37:4b:62:59:2d:d5:d7:43:9f:8e:96:80:
c3:82:9d:35:b1:77:92:f2:6d:b5:bd:5b:26:dd:39:
27:41:22:de:fc:93:38:cb:11:76:1f:23:34:ae:8b:
2c:63:2c:47:17:56:eb:90:5b:1a:be:c2:40:f1:0b:
3c:f3:54:a2:16:89:0c:c1:0c:af:a7:1f:6e:5a:82:
9d:28:c5:75:9e:9e:19:6d:0c:35:2c:4d:95:6e:5a:
82:8d:c9:79:69:99:7a:f6:ea:93:de:fa:f7:3e:1f:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AB:05:98:9D:8E:FA:68:09:D1:27:DD:56:A4:4B:A9:97:E7:2B:32
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/YqsFmJ2O-mgJ0SfdVqRLqZfnKzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.52.0/22
195.62.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:6e:5b:99:fb:bb:e7:c2:62:f8:52:0c:07:3d:f4:b8:a2:0f:
72:ef:8a:05:59:bd:dc:86:0c:5c:1a:31:87:9c:08:95:d6:65:
7f:44:99:80:4e:7a:99:5b:eb:d0:37:d3:f0:10:06:94:f0:b5:
d7:30:12:89:ad:57:1d:dc:1a:ca:cb:d8:ca:74:2d:2f:9e:24:
47:6d:99:06:0b:8f:a3:3c:1b:c7:40:73:58:54:cb:cc:0a:cd:
0e:e2:e4:85:04:a0:47:69:af:fe:af:bd:58:09:41:98:c5:50:
1d:23:c0:ee:2b:cd:50:e2:44:f1:e8:f4:8d:1b:fa:4d:a7:51:
af:a7:f7:25:0c:cb:73:fb:51:b4:b4:f8:75:68:81:a2:cf:e6:
2e:08:d4:98:35:73:ce:a9:3b:f8:cb:15:87:78:66:39:45:9f:
ca:02:4f:ec:f7:4e:c6:10:a9:5a:5d:b2:5f:55:e1:2c:22:3c:
1d:8a:5e:a3:07:e0:77:d3:e3:30:59:1a:be:eb:92:56:f4:16:
ee:53:5a:bb:e6:b4:a4:10:23:2f:c9:b1:53:70:3b:8a:a2:e9:
9c:83:23:11:9d:ad:92:03:08:c5:6d:a6:ec:c1:b7:32:ad:c4:
6c:d8:43:c2:4e:bf:d8:98:1e:32:81:14:ea:2e:48:74:02:7f:
be:53:61:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:41 2024 by rpki-client on console-ams.rpki-client.org