Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/Y7uyCMc0KIYNuEUZjjGNIAlDkLc.roa
File: Y7uyCMc0KIYNuEUZjjGNIAlDkLc.roa (raw, json)
Hash identifier: U7yzDiunkFlraZ3uDbuecBqMyTSmMM/8XmfLoG2RR6Q=
Subject key identifier: 63:BB:B2:08:C7:34:28:86:0D:B8:45:19:8E:31:8D:20:09:43:90:B7
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 0186790726C5E4838063B82E7C1DFE0E2882
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/Y7uyCMc0KIYNuEUZjjGNIAlDkLc.roa
Signing time: Wed 22 Feb 2023 12:09:17 +0000
ROA not before: Wed 22 Feb 2023 12:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.63.34.0/24 maxlen: 24
185.63.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 19:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:07:26:c5:e4:83:80:63:b8:2e:7c:1d:fe:0e:28:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Feb 22 12:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63bbb208c73428860db845198e318d20094390b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:be:7d:c9:2b:b8:4a:41:3e:a6:24:b8:db:
fd:ae:56:d3:a3:7f:ed:17:a9:4a:33:77:23:bc:2e:
f5:97:c0:10:20:74:1a:84:27:06:76:53:a0:bc:b6:
8e:5a:d9:de:7e:4d:d4:3f:2a:f4:5c:92:4e:64:0a:
92:28:23:a9:ea:c6:e4:07:1d:38:ba:2f:a4:85:29:
c6:93:72:4b:8d:19:50:00:a3:53:e0:db:93:c8:c8:
7e:ac:81:e1:2b:8c:43:e7:57:a9:99:da:52:92:d1:
99:c4:31:a1:d6:1e:8f:81:db:e7:43:ae:dc:e6:33:
4a:96:ce:84:3b:4b:93:de:73:ba:8f:48:1f:a1:d6:
2f:82:bc:ad:e7:40:2b:04:5c:f8:8c:92:c8:ff:87:
1e:e6:bf:cb:5c:2d:3f:dd:2c:c1:4d:de:24:70:2e:
3f:aa:3b:bf:9b:d5:77:a7:f1:4b:61:cf:bb:74:8d:
1a:dc:9f:2a:e5:81:47:f0:6a:e8:03:3a:f9:6c:63:
35:76:74:12:c9:4c:9a:36:c9:dd:1a:3c:92:d0:74:
82:35:3d:eb:5a:f9:41:2e:ff:8f:0b:c5:10:95:e9:
ae:64:d0:80:11:99:38:67:48:f9:44:8e:7e:e3:42:
e8:7b:83:51:11:b5:64:bf:15:89:8d:29:96:4d:86:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BB:B2:08:C7:34:28:86:0D:B8:45:19:8E:31:8D:20:09:43:90:B7
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/Y7uyCMc0KIYNuEUZjjGNIAlDkLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.34.0/23
Signature Algorithm: sha256WithRSAEncryption
42:9e:60:36:4c:f5:fd:ea:ab:d5:f7:12:f3:15:79:ed:91:d4:
7c:68:bd:a0:e7:48:da:87:6e:e7:c3:ea:35:95:fd:3b:9c:85:
45:59:ed:e0:00:7c:89:2e:2c:47:12:56:15:0c:89:95:57:87:
5c:06:7e:7e:e7:9b:4b:bc:a4:0c:f0:61:a2:2e:68:c4:00:7c:
da:25:55:3f:89:01:aa:7c:b5:df:b9:71:1d:b3:75:f4:5d:a2:
2d:4c:a8:e0:6b:96:96:c8:09:d4:b5:6c:4b:7d:99:79:95:7b:
a0:49:d7:3d:af:71:08:77:06:ca:04:d6:0e:ba:d0:6e:a3:da:
f5:dc:7b:35:46:68:dc:ed:89:ec:18:50:2e:48:5f:59:15:b4:
54:40:cf:05:1a:1f:a5:b2:2c:9a:c2:9c:2e:b4:dd:e4:34:8c:
2b:4a:85:c1:a2:cb:4b:9a:9a:20:f1:8b:c8:10:2f:4e:6a:c2:
1d:60:40:ca:8b:99:a3:96:f3:b9:30:25:34:b2:11:c5:35:26:
8f:f9:b4:d7:93:01:0e:b4:68:bc:31:0e:e9:e1:2e:6b:eb:f7:
55:55:6f:eb:38:1f:96:ed:ac:a7:73:3a:3c:66:61:df:c4:0c:
3d:1f:ce:8b:d8:f1:37:12:41:15:d1:6e:21:dc:09:09:0a:09:
b6:50:63:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:23 2024 by rpki-client on console-ams.rpki-client.org