Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/Yj9XTooEuIs_n-vNSjIZgFRUqKY.roa
File: Yj9XTooEuIs_n-vNSjIZgFRUqKY.roa (raw, json)
Hash identifier: 0QZF+F9GVXfOgjQQ/V9sI0aRXTVHz155N7mvid6LW9Y=
Subject key identifier: 62:3F:57:4E:8A:04:B8:8B:3F:9F:EB:CD:4A:32:19:80:54:54:A8:A6
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 018FFEAF3A8D131DE2A7438E5E7E4689319B
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/Yj9XTooEuIs_n-vNSjIZgFRUqKY.roa
Signing time: Sun 09 Jun 2024 20:27:27 +0000
ROA not before: Sun 09 Jun 2024 20:27:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210392
IP address blocks: 5.22.202.0/24 maxlen: 24
5.22.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 11:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fe:af:3a:8d:13:1d:e2:a7:43:8e:5e:7e:46:89:31:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Jun 9 20:27:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=623f574e8a04b88b3f9febcd4a3219805454a8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f4:74:c1:92:ed:3f:70:af:a6:9f:d7:2d:9f:
91:92:f2:b5:be:82:28:9e:c8:9f:98:11:2a:3b:14:
e4:de:a4:bb:b6:bb:c5:34:2a:05:f1:23:bc:13:64:
fe:f7:d8:95:f5:59:df:9f:8a:48:4e:0e:d9:cb:60:
86:2f:b0:1b:70:e7:37:11:be:4e:79:3f:1a:14:93:
07:b9:d9:d8:ca:85:82:b5:5d:e1:13:b9:b8:68:36:
33:73:dc:a3:f2:2f:f0:a7:a4:27:bf:61:e5:18:26:
b0:a7:b9:39:62:dd:09:de:29:6b:64:64:fc:92:77:
b4:86:2e:7c:aa:04:37:be:29:39:2b:5b:08:ad:73:
8f:90:cc:35:12:df:66:8d:3f:a6:22:2a:83:6d:98:
0e:b5:8d:35:f5:c7:00:19:d4:ec:d8:79:7f:d1:88:
51:79:10:3f:15:ee:74:e8:59:48:2f:5d:9a:7d:d5:
5f:10:9f:cf:da:a6:f4:5d:f1:17:33:61:f7:8c:05:
f0:e3:a6:91:20:2b:47:a2:c2:38:d5:bb:bc:05:80:
81:c9:e4:97:79:11:04:1c:ce:52:76:aa:9a:b1:f3:
7f:c7:b0:40:54:16:71:d2:a4:ae:c0:59:09:d2:1e:
43:f5:d1:25:1e:06:89:02:2a:93:d3:f3:5d:a1:12:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3F:57:4E:8A:04:B8:8B:3F:9F:EB:CD:4A:32:19:80:54:54:A8:A6
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/Yj9XTooEuIs_n-vNSjIZgFRUqKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.202.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:43:65:39:87:f7:34:c3:bf:6a:00:60:46:3b:ff:4a:f1:b5:
9e:4b:8d:88:96:c9:2b:76:0a:f4:ee:a1:14:ce:63:8d:01:03:
5e:63:83:07:13:78:2a:6a:72:73:cf:b2:31:1d:68:a0:0a:26:
42:f2:91:5f:7b:a5:b8:06:64:6c:d4:95:f4:42:0b:84:6f:6d:
47:44:90:93:8e:0e:75:7a:79:b2:78:8d:82:b8:f3:cc:40:81:
ca:25:cb:07:2c:db:0e:de:25:33:70:08:7b:c1:17:ac:47:7e:
3d:8f:08:9a:40:e1:7c:e9:16:37:c4:66:a3:24:a8:46:68:66:
bf:d1:26:0a:ec:95:57:1d:06:96:47:23:15:c2:45:2d:50:b8:
25:e7:43:d6:19:0e:98:31:e3:d7:00:f7:a4:b4:f1:70:f8:c1:
f6:7d:04:ce:98:f7:e0:a0:cb:e4:27:e0:61:3c:37:0c:c5:c4:
45:77:50:16:b4:07:ab:86:a8:d1:d8:5e:1b:89:ae:44:5c:4d:
14:35:d0:76:b7:a9:62:88:2b:ad:fb:df:73:16:a4:a4:86:03:
98:49:95:17:ec:20:c8:dd:09:76:5a:7c:5c:ce:1d:c6:4f:0e:
9d:7c:f1:8e:35:66:5e:a8:04:9c:5d:42:c6:4a:0e:fa:33:68:
a7:ec:14:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 13:42:03 2024 by rpki-client on console-fra.rpki-client.org