Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/YP7077vS4P0Nv6TtbfP8sJuFacE.roa
File: YP7077vS4P0Nv6TtbfP8sJuFacE.roa (raw, json)
Hash identifier: dxpuer0PDxVBdnkkIh/8bTHaFKRwgZzPpy3O1S/1HhY=
Subject key identifier: 60:FE:F4:EF:BB:D2:E0:FD:0D:BF:A4:ED:6D:F3:FC:B0:9B:85:69:C1
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 01857295C74596127C0964EAA90AEEA5C9B3
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/YP7077vS4P0Nv6TtbfP8sJuFacE.roa
Signing time: Mon 02 Jan 2023 13:04:56 +0000
ROA not before: Mon 02 Jan 2023 13:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22351
IP address blocks: 81.199.218.0/24 maxlen: 24
81.199.171.0/24 maxlen: 24
81.199.170.0/24 maxlen: 24
81.199.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:c7:45:96:12:7c:09:64:ea:a9:0a:ee:a5:c9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 2 13:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60fef4efbbd2e0fd0dbfa4ed6df3fcb09b8569c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:23:6c:1d:46:0c:05:1e:67:56:fa:a3:bc:
47:3d:2d:5a:93:a5:d7:f9:06:55:e3:67:b3:f5:2e:
10:5c:7e:b6:e0:19:90:4f:c3:d6:09:e1:47:34:c8:
56:d5:58:31:bf:c6:58:15:e8:24:5f:0e:3a:b7:aa:
40:7a:0d:56:e7:fe:c2:72:5b:82:39:24:7c:ef:2a:
e7:35:d3:72:f4:2e:43:ce:41:65:ff:f7:91:c3:b6:
c4:4b:e6:d5:0e:91:b5:b7:23:c8:08:be:60:9f:51:
92:17:04:bd:6a:93:a2:59:bc:74:01:27:4a:da:0b:
23:15:6b:61:28:cd:c0:ed:36:14:fb:3d:5b:fc:c4:
8d:e6:63:c2:d1:75:64:8b:0d:9e:98:a4:da:d9:f8:
78:ac:29:f3:7b:02:93:f0:50:33:61:3e:93:7f:5b:
30:e2:c2:5e:2d:eb:8e:45:84:ca:1b:51:ad:1c:3e:
82:9e:06:3f:84:2b:aa:92:3d:84:92:a2:ed:be:25:
30:41:c4:07:e6:63:2d:53:5a:80:aa:4f:2e:45:05:
e5:38:33:30:62:fe:2a:17:5d:75:56:11:39:df:ad:
09:79:fa:6b:2e:16:8e:aa:cb:07:25:bf:d9:2f:99:
e1:33:8a:c6:ae:13:e3:64:ed:4e:8e:38:5b:a6:ea:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FE:F4:EF:BB:D2:E0:FD:0D:BF:A4:ED:6D:F3:FC:B0:9B:85:69:C1
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/YP7077vS4P0Nv6TtbfP8sJuFacE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.169.0-81.199.171.255
81.199.218.0/24
Signature Algorithm: sha256WithRSAEncryption
65:82:cf:13:d9:b4:3b:63:4d:13:6c:97:1b:6d:15:68:73:5d:
31:68:f7:c3:ef:3f:6f:bd:3d:b5:97:09:4f:a1:c8:ba:e3:be:
9b:d6:46:6b:05:51:c5:c5:b2:bf:89:ef:ab:55:86:28:17:e6:
bf:23:50:81:50:08:77:fa:ee:ef:66:b6:a7:0e:04:65:75:82:
46:90:7d:3c:68:37:5a:5c:e8:2a:8f:6f:55:18:95:d4:77:a1:
6b:4a:ec:ca:37:57:6e:1b:8f:a5:ad:f1:73:67:5b:6c:78:d2:
d8:20:78:02:bc:00:b5:51:8e:50:66:51:dc:d5:fd:46:4d:06:
17:f1:c4:80:ed:99:27:b1:66:da:3a:70:9c:82:8d:0f:c7:55:
d1:6e:92:5c:cc:41:d4:83:e1:32:02:65:d2:47:26:cc:84:24:
48:b9:29:34:44:67:9c:72:0c:ce:3f:26:2f:4d:a6:29:06:26:
06:33:82:75:91:bb:2d:6c:fd:32:62:51:7d:58:15:64:61:ad:
75:d5:b1:8a:db:77:f5:62:50:15:f9:17:a6:b1:b9:cc:5e:66:
9f:d6:c3:f3:50:4c:54:ea:41:62:80:89:fc:ff:b9:84:7c:83:
48:4f:f8:13:d6:96:2e:1a:ed:47:3b:b4:8c:a8:ed:d9:c6:44:
f7:f1:25:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:50 2024 by rpki-client on console-ams.rpki-client.org