Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/YuRXeSX_1niielIR2Ndcb-59KEc.roa
File: YuRXeSX_1niielIR2Ndcb-59KEc.roa (raw, json)
Hash identifier: 5l+lCj6eLkvKvoZlawVQ9OTvdrFhCRcXlrF195QCppM=
Subject key identifier: 62:E4:57:79:25:FF:D6:78:A2:7A:52:11:D8:D7:5C:6F:EE:7D:28:47
Certificate issuer: /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial: 0185BF78218C7C626964149190AE63DC9F7C
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/YuRXeSX_1niielIR2Ndcb-59KEc.roa
Signing time: Tue 17 Jan 2023 11:23:19 +0000
ROA not before: Tue 17 Jan 2023 11:23:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31257
IP address blocks: 176.116.160.0/21 maxlen: 21
176.116.160.0/20 maxlen: 20
176.116.168.0/21 maxlen: 21
176.116.177.0/24 maxlen: 24
176.116.178.0/23 maxlen: 23
176.116.182.0/23 maxlen: 23
176.116.180.0/22 maxlen: 22
176.116.180.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 29 Jan 2023 03:36:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:78:21:8c:7c:62:69:64:14:91:90:ae:63:dc:9f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
Validity
Not Before: Jan 17 11:23:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62e4577925ffd678a27a5211d8d75c6fee7d2847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:31:29:3b:f9:d0:02:0d:1a:88:20:29:76:47:
a6:47:0e:6d:d6:7d:80:1d:4c:ff:19:0a:fa:9e:07:
44:6e:fc:9c:82:37:d5:92:ae:5c:eb:99:a4:7e:af:
50:74:75:dc:ef:0c:03:56:8a:e7:26:35:6b:13:66:
e6:a3:12:ff:43:1f:47:41:94:2a:8f:bb:3b:f6:4c:
6a:4f:10:a4:80:1c:e7:29:06:ea:7c:dc:e8:b0:bb:
03:07:41:0d:d0:61:2c:1f:97:9e:3b:fa:bd:2b:81:
56:a8:9c:03:21:1a:0e:e9:15:96:a1:98:40:cf:2f:
68:eb:a9:41:63:b7:fe:1e:f9:fe:d2:64:70:23:02:
17:5a:4d:fc:bd:dd:9e:e4:e6:93:2d:f8:ed:a5:bb:
70:e7:9a:1f:cf:2b:44:22:07:93:84:09:6a:52:8e:
81:23:6a:db:19:2d:8d:16:c7:99:03:8e:dd:21:8b:
53:68:cd:13:ff:6e:c4:d5:c6:17:71:3e:86:e6:2c:
7a:5c:df:f4:43:47:a0:18:87:e5:a6:55:06:bc:d9:
71:70:8b:94:f8:27:12:e2:6d:8b:fb:74:22:69:3c:
9f:b7:db:db:61:3c:91:dc:88:d7:79:1e:2f:74:5a:
d8:5a:9d:5e:be:2b:cf:88:f6:d0:fd:81:21:7b:24:
82:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E4:57:79:25:FF:D6:78:A2:7A:52:11:D8:D7:5C:6F:EE:7D:28:47
X509v3 Authority Key Identifier:
keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/YuRXeSX_1niielIR2Ndcb-59KEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.160.0/20
176.116.177.0-176.116.183.255
Signature Algorithm: sha256WithRSAEncryption
7c:f9:40:eb:27:ed:02:29:9e:45:9e:4d:a6:31:3f:8b:ee:d2:
90:d5:80:5b:fc:6f:2a:9a:79:69:79:a8:a3:6f:97:ae:89:d8:
eb:d3:09:d4:da:b2:97:11:0d:8d:a0:32:df:ea:b9:df:17:fa:
1a:84:67:95:0c:87:98:fd:c7:f0:1e:71:da:75:25:11:54:f1:
f3:61:06:bf:7e:19:5e:1d:99:64:c6:92:fd:53:a8:f8:40:b0:
e0:2f:ff:35:89:61:cf:ae:95:af:e1:f2:89:01:81:b1:29:bd:
34:46:78:b3:66:5e:ff:74:6a:35:6c:7e:d7:58:2f:f2:2d:34:
10:2c:29:2c:19:92:f7:85:65:90:b1:2a:48:65:db:05:9a:2f:
b6:7f:34:19:db:0d:60:2c:91:3a:1c:00:ac:83:da:66:0e:c1:
75:48:5a:70:b9:6a:38:dc:e6:67:17:d9:86:0c:61:ca:2f:f6:
11:5f:55:ec:9b:3f:a6:68:9c:ea:2a:33:4c:15:20:5c:18:6a:
18:19:71:e5:b1:d6:dc:58:b6:fe:5d:26:52:5e:9b:2c:05:65:
8b:77:04:70:d1:b9:20:c5:84:e8:5d:c4:6f:c8:a4:12:84:33:
25:1f:b6:45:89:b3:68:5e:cc:d5:9e:b1:a9:6f:48:39:4b:bf:
97:78:42:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:58 2024 by rpki-client on console-fra.rpki-client.org