Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/_y2Y1HCzlg5Uh7f1gebLm4QsPds.roa
File: _y2Y1HCzlg5Uh7f1gebLm4QsPds.roa (raw, json)
Hash identifier: LOqpoik5fLmtbs83Gm1MvylxF5RuWe7fswXg7VfHP3c=
Subject key identifier: FF:2D:98:D4:70:B3:96:0E:54:87:B7:F5:81:E6:CB:9B:84:2C:3D:DB
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018C540A7554BF05B84BA8932E6A0665D754
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/_y2Y1HCzlg5Uh7f1gebLm4QsPds.roa
Signing time: Sun 10 Dec 2023 14:03:40 +0000
ROA not before: Sun 10 Dec 2023 14:03:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 37.34.88.0/21 maxlen: 24
46.20.210.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:54:0a:75:54:bf:05:b8:4b:a8:93:2e:6a:06:65:d7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Dec 10 14:03:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff2d98d470b3960e5487b7f581e6cb9b842c3ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:7b:b6:74:2e:bd:da:b2:5f:72:e0:98:22:
3a:cf:16:5e:e2:9e:7e:25:54:fc:92:b7:16:e6:ad:
77:59:13:9b:21:6e:06:c1:52:f9:1c:5f:b6:95:f7:
2f:bb:cc:e6:fc:44:4c:7a:5b:0d:83:87:c4:90:5e:
68:64:7d:28:1e:88:ac:78:9b:12:83:ee:55:a8:56:
23:a9:6f:47:86:ea:fa:6c:97:80:b6:cc:1c:22:c7:
25:e5:9a:58:15:df:79:e4:0d:64:7f:a2:56:fb:ac:
b9:25:ad:b8:19:87:8e:2e:d3:de:f9:c3:af:ad:c6:
e0:56:b5:6b:b2:57:67:46:9a:90:ac:37:db:42:c0:
67:50:0b:43:f5:13:39:ee:bf:23:7c:1a:ba:e4:df:
89:c3:1b:b5:2b:8e:a9:ac:d8:8d:2a:3d:4b:3b:e7:
e8:6c:5c:79:be:75:1a:10:4c:16:d6:bb:f3:a6:ae:
da:88:a8:1d:d7:58:d0:b6:ec:64:34:b0:af:f9:e7:
c5:04:33:87:44:1b:80:d9:cf:3b:6b:82:ee:2a:75:
99:ba:aa:58:75:8c:dc:d7:4d:75:f1:7d:46:6a:67:
6e:cd:9e:7c:f5:1d:62:63:35:f9:87:d2:fa:fe:ff:
89:46:66:20:03:ac:1e:3e:84:d6:7e:81:e8:89:a1:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2D:98:D4:70:B3:96:0E:54:87:B7:F5:81:E6:CB:9B:84:2C:3D:DB
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/_y2Y1HCzlg5Uh7f1gebLm4QsPds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.34.88.0/21
46.20.210.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:66:a4:61:73:83:eb:45:e4:84:e3:13:22:96:e9:66:d5:c7:
77:39:d0:9b:e9:65:88:15:5f:3b:14:cb:3e:27:16:e6:f9:50:
d0:e2:b4:ec:49:11:b8:7d:5d:98:b4:2a:7a:b5:49:46:7d:bc:
5b:56:a7:f2:08:67:12:6e:d4:1f:6c:a1:7d:f9:5b:c9:fe:65:
ef:01:ac:16:71:3b:8e:f5:ad:21:4d:a7:e0:bd:c0:65:41:65:
e3:20:97:bf:b2:b2:e0:92:e0:11:fa:a5:66:d3:ff:bb:41:61:
7c:b6:a7:37:23:b4:f5:37:39:4b:d2:5f:8c:c8:fd:6b:32:96:
ec:a1:67:e8:ee:a7:bc:dd:94:b7:79:e6:68:36:70:d5:b4:0b:
73:7b:c3:9c:25:08:fd:2e:72:84:1e:0b:78:87:74:10:1f:25:
3b:61:4c:50:75:0a:7c:ca:57:bc:01:8f:d0:cd:bb:30:98:26:
d6:da:31:a7:c9:f2:d5:49:36:f1:b5:be:b7:8f:7c:d9:f3:cb:
66:d3:db:12:b0:f3:47:7d:df:63:09:20:6c:c8:e6:30:64:50:
7f:1f:d8:12:58:bb:33:b0:97:d9:34:ee:29:f6:b4:13:34:3d:
b4:5f:15:2d:57:ea:ea:0b:75:27:a4:30:84:52:3d:ca:93:ba:
29:24:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org