Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/e6y84PYPYTXyQgt3lTs-PLOCook.roa
File: e6y84PYPYTXyQgt3lTs-PLOCook.roa (raw, json)
Hash identifier: ycyZUlqAjG4UFNQAyFgtFNN/4CeEekV68a74AMIhPAc=
Subject key identifier: 7B:AC:BC:E0:F6:0F:61:35:F2:42:0B:77:95:3B:3E:3C:B3:82:A2:89
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F0FF4F08CA28BCB1F7A8FD0A688318
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/e6y84PYPYTXyQgt3lTs-PLOCook.roa
Signing time: Mon 02 Jan 2023 10:04:57 +0000
ROA not before: Mon 02 Jan 2023 10:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199952
IP address blocks: 94.76.154.0/24 maxlen: 24
5.154.19.0/24 maxlen: 24
84.232.18.0/23 maxlen: 23
178.156.86.0/24 maxlen: 24
178.156.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:ff:4f:08:ca:28:bc:b1:f7:a8:fd:0a:68:83:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bacbce0f60f6135f2420b77953b3e3cb382a289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:0b:cf:3f:04:ce:31:c7:0c:50:6c:eb:21:
97:be:9e:d7:a0:d1:fe:c0:b7:f8:a4:be:0b:dd:b5:
c6:94:a3:15:bd:79:14:03:80:b6:db:c9:3a:5a:01:
f9:a3:fb:f3:4d:f6:31:b1:cc:b9:96:e3:70:9a:20:
82:8c:09:d1:b9:19:2b:0b:b5:16:79:32:a1:51:df:
a7:c2:03:00:9c:5b:51:da:1a:70:c1:45:db:e6:8d:
30:bc:b3:18:56:af:21:38:d7:3b:d6:f1:6d:d4:89:
f8:c1:bb:c7:7a:ff:b1:89:8c:d3:6f:c7:b0:5d:04:
8b:19:ab:83:d5:5a:52:46:c3:72:21:8e:de:6b:b7:
86:7a:16:43:68:79:11:fc:1c:6e:81:04:fa:d8:c4:
7a:d6:50:e5:c6:43:28:5c:57:7d:21:ed:fb:49:bb:
80:1c:9f:30:dd:1f:a9:ed:95:6a:ec:65:17:fe:29:
ab:dc:45:bc:d4:2a:00:dc:a4:4c:ba:e5:8f:59:ca:
22:e5:8f:f7:77:96:33:23:d6:b1:c8:7d:6b:d9:0f:
fb:44:cc:43:63:21:d2:f9:7e:a7:b2:bd:5e:e2:fb:
9b:d0:56:60:22:ae:b0:9c:a1:3f:c3:d8:9e:7b:94:
84:b3:01:3b:ad:25:39:f6:bb:36:52:3c:c0:bc:9e:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AC:BC:E0:F6:0F:61:35:F2:42:0B:77:95:3B:3E:3C:B3:82:A2:89
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/e6y84PYPYTXyQgt3lTs-PLOCook.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.19.0/24
84.232.18.0/23
94.76.154.0/24
178.156.86.0/24
178.156.91.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:83:96:b1:f0:7b:9f:8d:26:c0:d6:ff:e6:a0:60:f4:70:18:
1e:f6:15:17:98:6f:4f:61:e4:48:4f:76:c6:91:93:f3:47:3d:
20:27:e5:a1:45:ec:37:4e:d9:54:eb:a6:57:28:25:da:4d:08:
7c:d8:a4:e1:00:2c:ee:58:55:17:79:cf:67:00:c6:3a:4e:83:
a8:19:7c:51:97:1c:35:1c:8b:eb:ac:19:75:6c:8e:58:6e:8e:
2f:bf:0e:fa:c8:10:15:18:e8:5c:77:fb:07:e1:78:6a:95:35:
97:7e:d6:75:a6:5d:46:ea:41:e7:09:97:ac:85:f7:87:a3:6d:
a3:b8:0b:35:29:6d:ea:c5:58:51:13:47:66:21:9f:95:db:34:
d1:04:0c:13:85:90:57:4a:4b:e7:12:97:73:8a:26:12:18:ab:
98:0e:38:d2:65:90:9c:9b:47:41:80:c9:76:1e:e3:bc:aa:b4:
4b:7e:62:12:65:04:76:67:7b:8e:78:7d:0a:5f:e4:55:9e:4a:
3c:5e:ba:60:e2:29:b4:34:53:cb:51:27:22:c3:9e:c7:45:6d:
17:98:b6:53:07:de:62:12:62:54:ea:bb:00:93:1e:91:fd:95:
d2:aa:60:f4:aa:8e:26:af:01:e8:8a:84:fa:f6:f9:1d:2d:34:
05:99:25:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:36 2024 by rpki-client on console-fra.rpki-client.org