Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Yix7SMmUzOo3HKbtqyjZzvP1d_U.roa
File: Yix7SMmUzOo3HKbtqyjZzvP1d_U.roa (raw, json)
Hash identifier: tzT+NgBlt9/V76cmrD8DVUrLbOddvPdc0JoZerJ1EUg=
Subject key identifier: 62:2C:7B:48:C9:94:CC:EA:37:1C:A6:ED:AB:28:D9:CE:F3:F5:77:F5
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 0185700274B5B32A649D1A7B753F7E41CDE1
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Yix7SMmUzOo3HKbtqyjZzvP1d_U.roa
Signing time: Mon 02 Jan 2023 01:04:47 +0000
ROA not before: Mon 02 Jan 2023 01:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13174
IP address blocks: 213.87.0.0/19 maxlen: 19
213.87.32.0/21 maxlen: 21
213.87.44.0/22 maxlen: 22
213.87.48.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:74:b5:b3:2a:64:9d:1a:7b:75:3f:7e:41:cd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 01:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=622c7b48c994ccea371ca6edab28d9cef3f577f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:18:21:80:59:30:ea:65:9c:ae:25:94:26:0a:
c6:17:91:94:f9:80:fd:81:f7:25:4e:a0:aa:83:e9:
9c:54:e6:46:61:44:cd:ef:f5:6e:3e:6d:2b:6c:a6:
03:68:93:c9:cf:3b:7f:74:2a:34:ef:72:9d:63:77:
10:e3:2d:f2:6a:68:6c:84:1e:0b:81:2d:63:4f:cb:
c3:07:39:62:98:8e:cf:a0:c7:b8:6f:a7:78:20:2d:
fe:11:eb:8a:2b:e3:ce:53:1d:02:f8:fd:28:9d:b2:
0d:18:2b:fc:1f:25:4e:da:ca:f9:02:7a:aa:4c:fe:
39:04:c6:9f:c4:f4:11:f5:b0:3b:2d:63:0f:38:fc:
67:c4:5a:89:b5:ed:59:a3:85:be:19:67:de:57:3e:
9a:3b:b0:da:3a:29:b8:15:fa:21:50:f4:ce:b1:01:
4d:dc:3d:12:08:e2:d5:1b:33:de:70:fe:a2:a0:24:
fa:d1:a1:20:c5:aa:c9:00:5e:7e:fd:09:c3:86:58:
21:65:67:22:43:f1:e7:2f:d2:05:9f:1c:65:75:fa:
2b:e8:d9:dd:f6:85:f6:f7:4c:59:07:c9:ec:ff:a6:
a2:a9:3a:fd:15:58:37:a9:f9:50:5d:3d:8e:ce:a7:
6a:31:a8:47:4a:64:6b:df:d0:66:a8:40:87:02:a1:
40:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2C:7B:48:C9:94:CC:EA:37:1C:A6:ED:AB:28:D9:CE:F3:F5:77:F5
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Yix7SMmUzOo3HKbtqyjZzvP1d_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.0.0-213.87.39.255
213.87.44.0-213.87.55.255
Signature Algorithm: sha256WithRSAEncryption
50:86:86:a8:77:4f:e9:04:9f:b8:3f:74:02:15:94:ea:b4:7e:
99:88:5a:84:5d:32:f8:17:3b:80:49:96:95:0d:2c:7a:af:06:
5a:d7:a0:0f:7b:32:b6:32:07:58:bd:0f:10:61:57:db:c6:48:
ef:47:c0:63:8d:86:a8:42:ca:7a:49:ba:48:bf:75:73:a2:ab:
33:07:00:4d:00:ef:72:47:6c:3b:12:48:f2:3f:61:8b:6e:fc:
6f:9d:e8:9e:8b:67:e6:8a:36:98:79:c7:cc:00:75:3d:82:95:
ff:c7:69:f9:3d:85:96:68:12:0f:a7:fb:9e:d8:2e:c5:29:48:
70:1a:82:62:ba:5f:f3:ab:4c:b7:16:b4:66:f3:49:00:82:87:
a3:22:94:7f:2b:e2:eb:b4:be:97:03:5b:fb:c2:44:cb:e5:67:
fc:8c:11:78:ff:b2:bb:7a:e9:7c:4a:c6:aa:b4:3a:a4:41:e9:
26:72:b0:06:68:da:59:61:dc:a0:3b:a9:1b:bc:a3:3e:d4:ea:
ac:b3:7f:af:0d:54:73:99:d7:cf:5d:24:36:23:33:87:1a:db:
ff:e8:cf:38:6d:17:b6:70:a8:06:a7:51:da:42:4d:d8:a4:46:
10:d0:f6:3d:63:75:93:cc:80:44:55:03:b7:c9:e8:2d:d1:5d:
c7:d7:d4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:41 2024 by rpki-client on console-ams.rpki-client.org