Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/ryOK_uvg2pWbFecjWDhREJW2598.roa
File: ryOK_uvg2pWbFecjWDhREJW2598.roa (raw, json)
Hash identifier: hqHwj28J6cr1KMDChlaw3+tLMPz2sGLxRRsiQnWJUEM=
Subject key identifier: AF:23:8A:FE:EB:E0:DA:95:9B:15:E7:23:58:38:51:10:95:B6:E7:DF
Certificate issuer: /CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Certificate serial: 018570399B62D63A8C90A06F4BAF97365CF3
Authority key identifier: 07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/ryOK_uvg2pWbFecjWDhREJW2598.roa
Signing time: Mon 02 Jan 2023 02:05:01 +0000
ROA not before: Mon 02 Jan 2023 02:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50698
IP address blocks: 159.253.232.0/21 maxlen: 22
185.116.76.0/22 maxlen: 23
109.202.64.0/19 maxlen: 20
2a06:4400::/29 maxlen: 30
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:9b:62:d6:3a:8c:90:a0:6f:4b:af:97:36:5c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Validity
Not Before: Jan 2 02:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af238afeebe0da959b15e7235838511095b6e7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:37:6e:76:50:61:b4:20:5d:ea:c7:31:01:
88:7d:5a:ed:20:1e:50:70:ba:df:15:81:a4:92:65:
af:e4:f4:9a:59:cf:64:78:72:2e:4e:4b:10:0f:9e:
33:c9:ab:69:e1:cf:f4:93:8d:8d:fa:cf:25:6c:95:
6d:57:91:73:c7:f2:2e:0e:e7:1c:2a:61:12:59:bf:
24:63:63:ff:18:f4:bf:8a:bb:b5:fe:44:4a:61:2c:
04:0c:31:21:4f:96:9c:f6:69:00:5d:99:64:7f:41:
7d:fb:a5:8a:42:e5:4b:e2:e6:92:2f:8d:03:80:e2:
ec:4e:a4:d1:c8:51:7d:8f:e5:c3:dd:ab:8e:75:52:
ff:91:87:e8:1b:07:2d:22:96:c2:0d:92:60:4b:46:
36:ec:ea:fe:cf:6f:64:ee:b3:ef:33:28:7f:1f:98:
9a:f8:c5:a6:af:06:df:b4:ff:53:7e:ea:f8:a5:74:
25:bf:c0:d5:c8:98:52:a0:22:db:9e:3e:13:ff:85:
88:f1:33:17:2b:83:5f:a2:66:02:9c:1f:6f:0c:33:
fb:f0:c5:ca:0c:9c:bc:c1:fa:c0:85:94:22:54:ba:
44:44:b5:4f:64:a0:3a:ea:7e:38:fe:50:b1:8c:e4:
f4:fe:82:99:27:e0:54:34:d6:3d:3f:ea:7c:53:94:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:23:8A:FE:EB:E0:DA:95:9B:15:E7:23:58:38:51:10:95:B6:E7:DF
X509v3 Authority Key Identifier:
keyid:07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/ryOK_uvg2pWbFecjWDhREJW2598.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.202.64.0/19
159.253.232.0/21
185.116.76.0/22
IPv6:
2a06:4400::/29
Signature Algorithm: sha256WithRSAEncryption
d2:58:09:6f:01:65:f1:be:4a:61:b6:2b:96:21:a0:80:11:c4:
7e:41:9d:94:65:87:0d:d8:43:bb:6d:35:f8:a1:08:1a:2c:87:
30:b1:a5:cc:cd:d0:09:cc:5e:36:14:0f:c0:9e:15:1e:c4:92:
de:61:05:55:1f:92:15:81:f0:d8:ec:80:04:a0:94:4b:4b:df:
5c:1b:65:55:91:6d:75:5f:19:d9:c1:a4:46:bb:31:fd:a6:ad:
64:63:ee:9b:71:54:c5:23:b7:7e:16:a9:87:28:ac:37:72:ba:
c2:5e:1b:54:b5:1d:02:c3:67:84:af:8f:79:b1:8f:e7:8d:1e:
31:f5:15:eb:c1:73:e5:a6:76:d8:29:a7:52:f3:16:03:46:5d:
aa:54:8b:03:18:30:89:4e:6f:10:13:23:fc:95:ba:24:87:e1:
34:67:1d:84:5e:a0:aa:f9:80:68:ea:3b:af:13:86:3b:9c:f4:
e0:54:b0:c0:2f:79:3a:a8:1d:22:fa:b3:ad:5f:b6:03:f8:a0:
38:f7:50:81:24:cf:69:da:8b:bf:a5:1a:6d:bc:6e:91:a2:8e:
ae:3a:18:87:a5:4a:02:0f:57:83:54:dd:0b:69:eb:c1:47:f8:
89:65:96:2e:fe:b0:1f:77:61:8c:d0:ce:e8:c5:a6:b8:46:92:
5b:89:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:23 2024 by rpki-client on console-ams.rpki-client.org