Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/sytUUz8oUIPHaYLob_cSeimzK6g.roa
File: sytUUz8oUIPHaYLob_cSeimzK6g.roa (raw, json)
Hash identifier: tBCor23pDL0vyvxtpLlsi9yChPGF9sO9KJAFkCvA4rc=
Subject key identifier: B3:2B:54:53:3F:28:50:83:C7:69:82:E8:6F:F7:12:7A:29:B3:2B:A8
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 01856E38A18C7A53D25B92AD1BF8A9C3BF3A
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/sytUUz8oUIPHaYLob_cSeimzK6g.roa
Signing time: Sun 01 Jan 2023 16:44:43 +0000
ROA not before: Sun 01 Jan 2023 16:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12963
IP address blocks: 94.247.224.0/21 maxlen: 21
94.247.224.0/23 maxlen: 23
185.192.216.0/22 maxlen: 22
194.183.160.0/24 maxlen: 24
194.183.160.0/19 maxlen: 19
213.160.128.0/19 maxlen: 19
2a00:9880::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:a1:8c:7a:53:d2:5b:92:ad:1b:f8:a9:c3:bf:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 16:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b32b54533f285083c76982e86ff7127a29b32ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:91:be:8b:1a:bc:82:80:f3:52:bb:9f:9f:
b9:57:b3:65:ab:47:cf:91:ce:6c:52:06:4a:fd:d4:
70:d0:ff:ce:26:4e:2a:b9:94:e2:c3:8d:71:00:46:
24:9b:7d:61:02:78:af:14:65:00:28:ac:bf:24:15:
fc:79:f3:28:53:5e:bd:aa:e6:15:0c:a1:16:5d:fd:
05:8c:d0:5b:02:f5:a7:84:26:eb:f7:71:1f:71:9e:
34:21:39:29:88:33:2b:36:7f:01:22:9c:e4:58:7e:
39:f0:4e:55:4a:1a:2d:5b:1d:80:d9:b2:fa:a5:42:
51:0e:86:8b:3e:89:28:44:08:56:b4:aa:72:a7:9a:
51:60:51:58:15:fb:6e:ad:df:14:53:f7:68:4c:23:
12:a0:4c:6f:47:e8:7c:8a:62:0f:a6:a7:19:49:1f:
81:44:33:25:62:f8:88:ad:82:01:4e:bb:a6:7b:c7:
a6:00:8f:87:74:df:e9:10:8e:1b:82:30:78:58:63:
95:61:50:77:68:0d:e1:73:0b:88:47:e6:6e:4b:90:
01:b5:a5:46:21:bd:3d:79:56:9c:29:1c:b4:10:cd:
f3:24:10:6c:e1:bf:85:68:d8:13:a2:d1:ec:6e:6c:
b7:c2:e2:d5:bd:5a:46:d1:54:15:73:c4:5d:30:f3:
fb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2B:54:53:3F:28:50:83:C7:69:82:E8:6F:F7:12:7A:29:B3:2B:A8
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/sytUUz8oUIPHaYLob_cSeimzK6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.224.0/21
185.192.216.0/22
194.183.160.0/19
213.160.128.0/19
IPv6:
2a00:9880::/32
Signature Algorithm: sha256WithRSAEncryption
c8:84:0f:d9:4c:2e:c4:67:79:ec:e1:a0:f7:0c:17:72:b4:5f:
73:b2:2d:7f:7d:f4:76:fe:aa:3e:a7:b9:72:0c:03:45:93:65:
d3:16:02:40:80:70:f2:cb:17:3f:b4:66:1c:ca:96:13:b0:78:
d8:e9:60:e0:72:ea:16:a2:6c:65:16:f2:cb:26:ec:2f:7c:de:
66:af:0a:fe:30:04:be:bb:1a:2b:ee:ed:87:7a:a2:f2:55:d4:
c9:0b:66:db:c4:79:75:9e:d7:eb:2e:bc:5c:76:32:30:3f:85:
8f:8a:60:17:d9:53:ac:94:ad:0a:59:88:d9:9b:ff:b1:0d:07:
7b:95:c2:f1:42:03:29:b8:ce:40:4e:1b:28:4c:ed:82:78:0d:
8d:cb:29:45:80:ae:7a:3d:7e:1a:9f:47:4a:46:94:42:6e:bd:
a3:d7:20:e6:ac:be:03:07:b3:2f:ad:a7:7b:a8:f1:74:9d:27:
06:ee:37:25:52:a4:d7:87:e8:7f:94:f8:f4:f8:e4:f0:36:cc:
37:50:61:0a:96:b7:90:94:f1:45:dd:20:e9:b8:38:2b:34:24:
e2:d4:cc:57:93:1d:46:f6:50:01:37:65:f0:b6:08:2e:94:9d:
f5:eb:8b:ff:4a:ca:25:31:cf:b7:80:67:de:a6:43:b5:57:2b:
a6:53:45:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:36 2024 by rpki-client on console-ams.rpki-client.org