Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/NYYCtffSfvuZnYt-_E0GGSXfkYM.roa
File: NYYCtffSfvuZnYt-_E0GGSXfkYM.roa (raw, json)
Hash identifier: bOyrwMLqDWHYZjRt1N6l2IMT22Rkyd3d13st9qtHNyU=
Subject key identifier: 35:86:02:B5:F7:D2:7E:FB:99:9D:8B:7E:FC:4D:06:19:25:DF:91:83
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 01856F94A9772CC5D3976A8CD63242794AB5
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/NYYCtffSfvuZnYt-_E0GGSXfkYM.roa
Signing time: Sun 01 Jan 2023 23:04:51 +0000
ROA not before: Sun 01 Jan 2023 23:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 45.94.112.0/22 maxlen: 22
185.251.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:a9:77:2c:c5:d3:97:6a:8c:d6:32:42:79:4a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Jan 1 23:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=358602b5f7d27efb999d8b7efc4d061925df9183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:17:c3:ed:b4:7a:06:11:1d:f4:f8:48:24:de:
a7:85:d8:fc:5f:22:91:02:fb:42:de:cf:2e:67:0b:
6a:b5:ec:63:fc:7b:92:78:51:d9:f0:40:62:27:48:
ad:a6:c7:06:0e:63:ac:45:a4:5d:e3:2b:0a:7d:f1:
12:56:6f:92:70:f4:22:16:23:b6:1b:a9:1b:56:37:
8b:74:62:d3:4d:47:90:6f:93:d4:fb:0f:4b:04:a3:
39:2d:7b:0e:17:7c:bc:47:3f:63:4d:08:f9:01:d8:
33:5d:cf:17:e4:a8:7f:24:0f:ad:a2:6a:f9:21:90:
2b:1d:e8:05:ab:f2:08:a1:f9:c0:94:1e:97:25:88:
a4:0f:a7:ed:cb:fa:7e:49:ae:76:ab:59:fe:e3:4c:
45:c4:1d:62:eb:50:20:eb:a3:f4:a1:8f:da:51:a3:
71:0e:39:d0:d5:95:81:49:5b:bf:d3:af:2e:b9:56:
05:48:1e:b5:45:76:f1:c5:70:37:15:b4:26:fb:f7:
15:24:1f:f7:19:fb:04:23:79:7a:8a:e4:58:77:95:
d5:a0:18:88:47:32:5f:28:50:be:5b:e8:8b:a7:be:
e8:24:3d:aa:1c:4b:a6:91:bf:7c:8e:9f:19:94:9a:
ec:c7:55:2e:43:29:7e:a2:c8:eb:4d:1f:23:79:de:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:86:02:B5:F7:D2:7E:FB:99:9D:8B:7E:FC:4D:06:19:25:DF:91:83
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/NYYCtffSfvuZnYt-_E0GGSXfkYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.112.0/22
185.251.21.0/24
Signature Algorithm: sha256WithRSAEncryption
94:01:d7:64:c1:a8:96:6f:6e:f4:f3:55:ae:f5:e1:f6:4f:e8:
29:ae:fd:2d:c6:14:6e:6d:96:c0:2e:43:a9:8f:4d:3c:b2:77:
78:b4:45:97:10:0e:02:3b:92:19:9e:71:85:a6:29:29:1b:42:
e1:ba:ac:07:54:71:26:85:22:64:77:d1:08:34:0b:59:6c:21:
ab:78:63:87:19:c8:26:04:1b:3b:20:d8:cd:50:52:8c:1d:93:
ef:9f:7d:73:06:d6:3a:00:85:6d:75:3d:fa:26:b2:eb:e0:d0:
6d:f3:ef:d0:b4:29:a8:09:39:07:c2:c2:09:d5:48:59:cf:11:
fa:ee:a2:f2:56:4b:fe:2d:8a:32:e8:50:0c:ad:a6:1d:b0:02:
ab:8a:f8:af:68:ee:ec:61:be:44:e3:58:b6:f8:71:d3:a1:40:
88:1b:eb:84:e7:fe:12:bf:e1:5e:6b:81:49:79:bd:91:a8:6e:
21:1d:47:52:58:41:91:cc:3f:53:45:a8:27:2c:a7:fd:31:1f:
59:b8:7c:e0:8b:ca:fe:52:ec:e7:fd:d7:6a:4f:14:c0:c0:41:
10:4b:95:fe:23:8a:d9:36:95:f8:50:fb:e6:4a:bd:82:0e:5a:
5a:6e:74:8b:60:1b:bc:5e:ea:2a:b1:46:79:24:78:94:73:01:
13:ae:e5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:58 2023 by rpki-client on console-fra.rpki-client.org