Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/YVFqpMb5qEqSa0quy-9f3h-zsPc.roa
File: YVFqpMb5qEqSa0quy-9f3h-zsPc.roa (raw, json)
Hash identifier: ZcdYaq1O+agez3st1a9JVZFVMQRcBh89YlXw83xA1Dg=
Subject key identifier: 61:51:6A:A4:C6:F9:A8:4A:92:6B:4A:AE:CB:EF:5F:DE:1F:B3:B0:F7
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 018964317A2B7EEC659AEC51A286649D1AC5
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/YVFqpMb5qEqSa0quy-9f3h-zsPc.roa
Signing time: Mon 17 Jul 2023 14:11:51 +0000
ROA not before: Mon 17 Jul 2023 14:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31727
IP address blocks: 185.113.188.0/22 maxlen: 22
185.113.188.0/24 maxlen: 24
185.113.190.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 17 Jul 2023 16:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:31:7a:2b:7e:ec:65:9a:ec:51:a2:86:64:9d:1a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Jul 17 14:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61516aa4c6f9a84a926b4aaecbef5fde1fb3b0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:28:de:40:46:01:55:4e:2d:16:59:39:2c:
43:a7:b1:4c:5a:83:6b:08:68:8e:7e:46:a0:2b:87:
c7:d7:2b:f5:a9:ec:e3:d9:77:b2:f6:70:9f:1b:1d:
06:5f:ae:d8:a8:de:73:4a:8d:a9:12:77:b1:a7:3a:
90:f7:8b:f7:8e:8b:82:0a:f5:95:1d:5c:3f:66:ec:
8f:53:06:a1:e9:5f:67:0c:74:e3:0f:f2:bd:47:46:
01:c9:08:33:58:d9:c2:67:c9:6d:56:6e:ce:3a:93:
e2:82:de:15:12:68:26:94:ee:d8:10:f4:e3:12:20:
06:f0:80:d9:5e:7b:08:cc:6f:33:b3:a8:3b:8a:e2:
f6:19:95:94:96:5b:58:62:ea:52:c6:12:28:12:ae:
3c:7e:b8:69:c9:4c:6b:43:44:de:46:00:ca:96:74:
48:4d:c3:58:02:7b:a3:76:86:b9:25:b3:23:03:53:
f2:f0:8e:ed:ac:cb:ef:f3:bd:92:f7:99:26:dc:62:
f9:65:1f:50:d6:51:e0:b5:b5:f0:13:0c:ec:d3:5e:
44:6c:36:61:d3:2b:ea:72:71:6b:de:bb:00:27:71:
cc:4c:4f:b7:0c:89:20:33:77:2c:8c:37:fb:ed:80:
b5:16:e5:ff:2b:11:33:49:e5:35:b0:9d:8c:0c:5e:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:51:6A:A4:C6:F9:A8:4A:92:6B:4A:AE:CB:EF:5F:DE:1F:B3:B0:F7
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/YVFqpMb5qEqSa0quy-9f3h-zsPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:30:68:76:81:50:a1:ce:6a:39:31:e4:07:d3:1d:42:3b:ce:
31:69:db:51:c8:3b:c8:b3:79:f0:9f:19:b0:26:ca:f5:53:b6:
e5:d2:ae:b3:f1:99:4b:e5:fc:62:19:43:43:2c:e6:33:4d:dc:
1d:89:e2:84:e2:b5:5c:43:55:58:b8:31:08:d6:a6:ee:95:7f:
d2:76:3d:f2:54:23:71:e2:1b:7a:ff:65:2e:d8:10:c6:44:82:
f7:90:14:9f:a5:94:8c:7f:92:f1:79:87:9d:1a:34:56:6f:ad:
fb:d2:ec:8f:b0:1a:5f:58:f8:62:bd:fd:34:d1:31:de:f3:30:
43:fb:93:cb:a3:4f:9d:eb:1d:84:1a:e2:6c:59:b9:52:bb:4a:
49:36:79:c1:f6:b6:d5:7b:6d:70:6c:e9:bc:7a:16:7b:5d:46:
37:c2:d9:52:e2:f7:79:6a:8f:93:ec:1a:87:6a:f4:4e:39:64:
56:60:6c:8d:e8:2f:1f:57:86:b6:c4:6a:da:95:86:19:63:8f:
af:8d:cc:3d:8b:51:eb:bd:5d:b5:be:67:7e:ba:cd:c4:eb:52:
e6:e7:ac:11:c5:9e:37:6b:42:ac:79:c8:3b:e3:2e:6b:bc:80:
8f:dd:9c:d8:10:5d:93:91:96:a6:a3:a1:30:94:23:a4:84:ff:
60:bd:aa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:02 2024 by rpki-client on console-fra.rpki-client.org