Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/yWJNlAyoBUwhZT6GzypxfcCyZWo.roa
File: yWJNlAyoBUwhZT6GzypxfcCyZWo.roa (raw, json)
Hash identifier: uI+zkqG5fgAiSejxagQbRU393ksfaE96IECpw4zNXVo=
Subject key identifier: C9:62:4D:94:0C:A8:05:4C:21:65:3E:86:CF:2A:71:7D:C0:B2:65:6A
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 018B65EB876197B5FB7FAFC7BE8B924796D8
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/yWJNlAyoBUwhZT6GzypxfcCyZWo.roa
Signing time: Wed 25 Oct 2023 08:20:16 +0000
ROA not before: Wed 25 Oct 2023 08:20:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207348
IP address blocks: 45.142.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:65:eb:87:61:97:b5:fb:7f:af:c7:be:8b:92:47:96:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Oct 25 08:20:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9624d940ca8054c21653e86cf2a717dc0b2656a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:60:fb:8d:6c:de:18:e5:15:9f:cf:83:7d:
6f:de:42:7e:0e:39:d4:19:d6:8d:cf:a4:9a:b1:78:
9c:54:05:a5:af:2f:f8:44:f5:93:de:26:f0:c3:45:
4f:4a:66:67:ee:c8:41:d6:47:08:4f:f0:02:ca:f2:
01:4f:fb:20:43:47:8f:bb:b5:d2:ca:38:22:0b:ac:
e3:df:ab:c2:e9:bc:51:55:62:27:1c:5b:2d:6f:de:
05:c3:66:2c:48:83:18:d8:fa:a4:0a:7f:cc:c0:7b:
fd:65:cb:02:c2:a5:42:8d:dc:47:eb:17:e0:3b:45:
ed:98:4d:a6:8a:61:3f:77:04:38:cf:84:46:6f:1f:
67:fd:42:3b:81:f1:f9:26:5d:66:8e:8d:f0:a6:47:
f8:09:9b:42:6e:1a:94:78:ad:e8:b3:e8:00:51:a9:
8d:4b:8d:ca:f5:8c:d5:6d:09:86:81:73:a4:37:2c:
b1:b5:e8:c3:ae:0d:f8:10:51:07:37:3a:1f:00:d2:
eb:10:c4:04:2c:d9:c5:5a:7f:c9:2f:87:08:53:52:
11:8b:d5:66:9b:0b:bf:56:c4:6f:42:96:e3:8b:51:
60:0c:c4:02:c8:b2:bf:e5:15:44:48:88:88:60:4c:
ed:06:82:1e:4f:2b:b1:fc:af:3f:ed:7e:90:ef:5f:
d6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:62:4D:94:0C:A8:05:4C:21:65:3E:86:CF:2A:71:7D:C0:B2:65:6A
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/yWJNlAyoBUwhZT6GzypxfcCyZWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.8.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:bc:39:2d:b1:36:c1:ff:b4:4f:11:76:ac:b9:c2:93:c6:e2:
8d:73:14:40:6d:66:d8:2b:22:ac:f1:3e:b2:fa:7f:b0:07:43:
bb:a3:85:e5:ad:70:17:29:d2:a8:0d:eb:9b:58:e3:8c:fc:4a:
ed:03:38:cb:3f:7a:5c:cf:c2:73:59:eb:3f:02:7c:75:85:cb:
9b:c5:2b:95:49:fb:f5:f7:26:5a:78:db:2f:96:3c:5a:99:30:
db:29:27:ed:56:b4:68:86:f2:9c:06:86:3c:ad:2d:4c:72:e3:
a0:38:3f:39:38:07:cb:dc:99:94:8e:bb:62:97:3a:19:0c:98:
52:b5:da:5c:b6:d6:3b:67:b7:a6:f0:0b:a4:11:f9:fb:06:2b:
bc:da:89:ce:91:d0:47:bb:f9:95:da:f0:7f:39:36:89:80:71:
dc:10:2c:07:bd:13:9e:c3:4e:30:b3:3d:9b:4f:29:e8:4f:57:
60:30:20:c0:e3:9f:39:db:ee:1d:60:cd:d2:3f:98:f2:70:35:
e8:c0:0d:a2:a6:d1:f8:4d:e2:2b:dd:4d:4c:f2:69:c7:ce:2f:
da:f1:68:71:e6:a7:74:ac:05:71:08:f2:fb:c8:ed:2f:ee:45:
ce:72:b8:bb:4a:6f:d2:ef:56:15:a5:34:8f:c2:82:63:c4:f5:
45:0a:b8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:11 2024 by rpki-client on console-fra.rpki-client.org