Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/yAf64LYZblmORV4TFayIu5I9tsg.roa
File: yAf64LYZblmORV4TFayIu5I9tsg.roa (raw, json)
Hash identifier: PChFsIcc9WpyOAs/eJ2+LewkJkcVPrYEid0dOmr5eUs=
Subject key identifier: C8:07:FA:E0:B6:19:6E:59:8E:45:5E:13:15:AC:88:BB:92:3D:B6:C8
Certificate issuer: /CN=2f1e253977bf583e0e420ec977a8ecf4ed154dbe
Certificate serial: 01856EC222BFF9A5DA673FB0E237352396C3
Authority key identifier: 2F:1E:25:39:77:BF:58:3E:0E:42:0E:C9:77:A8:EC:F4:ED:15:4D:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/yAf64LYZblmORV4TFayIu5I9tsg.roa
Signing time: Sun 01 Jan 2023 19:14:54 +0000
ROA not before: Sun 01 Jan 2023 19:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208294
IP address blocks: 185.220.101.0/24 maxlen: 24
2a0b:f4c1:2::/48 maxlen: 48
2a0b:f4c1:1::/48 maxlen: 48
2a0b:f4c2::/40 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:22:bf:f9:a5:da:67:3f:b0:e2:37:35:23:96:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1e253977bf583e0e420ec977a8ecf4ed154dbe
Validity
Not Before: Jan 1 19:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c807fae0b6196e598e455e1315ac88bb923db6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6e:b7:6a:19:e3:9f:aa:32:82:a4:46:c7:8f:
45:82:2d:6d:cd:2c:c5:de:21:e3:ac:a4:5a:28:82:
a7:b2:e3:d3:21:98:13:f3:c8:39:3b:fb:43:dd:3c:
e8:c2:34:3f:fd:7f:6b:68:c1:99:d2:41:f6:00:77:
1f:f6:35:b9:0c:ea:84:1c:2f:3e:71:74:ce:62:73:
d4:23:76:16:48:fb:6d:16:07:f4:b2:a1:14:a5:7c:
0f:b7:60:f1:c9:bc:dd:be:cf:df:f6:a3:95:6f:4d:
ef:19:ad:59:17:06:07:65:9d:80:9e:58:fc:aa:dd:
a4:cf:a5:b6:ef:30:59:08:fe:1d:36:54:4e:f8:36:
61:e3:37:a2:5c:b5:71:33:74:5c:4a:1e:e6:59:d9:
cd:19:23:52:86:9c:12:6a:91:65:6b:ed:69:bb:a9:
fd:d3:c8:bb:da:12:cc:8e:c0:93:ff:84:84:3a:f5:
89:cb:90:82:69:75:f1:15:1b:e4:57:f4:fb:70:21:
1e:ca:36:c5:15:de:69:83:a4:65:26:23:ce:54:3e:
c3:9c:92:98:d7:34:68:d0:56:82:bb:1d:8c:73:ae:
f1:32:1a:14:92:34:80:77:de:a7:49:4c:c8:30:60:
e4:aa:79:66:a8:08:1d:42:1e:5a:6b:76:54:57:7b:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:07:FA:E0:B6:19:6E:59:8E:45:5E:13:15:AC:88:BB:92:3D:B6:C8
X509v3 Authority Key Identifier:
keyid:2F:1E:25:39:77:BF:58:3E:0E:42:0E:C9:77:A8:EC:F4:ED:15:4D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/yAf64LYZblmORV4TFayIu5I9tsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.101.0/24
IPv6:
2a0b:f4c1:1::-2a0b:f4c1:2:ffff:ffff:ffff:ffff:ffff
2a0b:f4c2::/40
Signature Algorithm: sha256WithRSAEncryption
60:11:15:4f:70:1b:8f:4d:2b:1d:2c:26:f1:14:9f:fa:c3:e6:
59:7c:3b:56:25:21:00:7d:e8:ae:a2:8d:0c:f0:23:7e:1b:29:
fb:b2:9c:05:db:5e:d4:49:94:a7:c3:ba:5a:01:2d:fe:d4:a8:
10:84:1c:a6:81:78:c7:4d:af:b9:a7:53:69:5a:e9:74:53:0b:
17:31:6d:0f:9c:c0:25:51:66:af:1b:4e:f8:5b:f1:5f:31:d8:
5e:8f:a7:9a:16:f2:20:b1:ea:9d:11:ae:14:2a:0a:4f:59:02:
96:e4:5b:ac:55:1a:3f:47:48:b4:e8:4f:fe:ab:11:79:20:ad:
0d:b0:74:43:0e:49:20:87:b3:1e:da:d5:e4:dd:1c:97:4b:85:
df:69:5e:47:4c:cf:d7:bc:0f:cb:d7:fa:eb:52:83:27:8c:b1:
66:1f:4e:cb:4b:6a:34:c7:66:37:8e:1d:fb:28:01:2a:9d:3e:
89:99:55:e4:c4:74:59:54:30:8a:9f:85:1f:10:67:93:bf:83:
dd:4a:19:3c:d1:f2:9b:f8:98:73:8e:08:62:c5:f6:e2:d8:32:
29:0e:f8:56:32:65:44:c8:01:ea:58:79:7e:99:ff:53:f3:ac:
91:da:d8:fb:f9:dc:bf:08:78:92:9e:99:4d:fc:cb:dd:0a:71:
f4:8c:69:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:00 2024 by rpki-client on console-fra.rpki-client.org