Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/YTzXTN1AkfGKVf9YuOPqx20lgWE.roa
File: YTzXTN1AkfGKVf9YuOPqx20lgWE.roa (raw, json)
Hash identifier: zbai/IEPd3qVhmFmDDJOmLemGI9HlhONMCHFFh+ed+E=
Subject key identifier: 61:3C:D7:4C:DD:40:91:F1:8A:55:FF:58:B8:E3:EA:C7:6D:25:81:61
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 0185720C64B13FF54812D3F2FBBDEB307B51
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/YTzXTN1AkfGKVf9YuOPqx20lgWE.roa
Signing time: Mon 02 Jan 2023 10:34:52 +0000
ROA not before: Mon 02 Jan 2023 10:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209273
IP address blocks: 212.15.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Jun 2023 10:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:64:b1:3f:f5:48:12:d3:f2:fb:bd:eb:30:7b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Jan 2 10:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=613cd74cdd4091f18a55ff58b8e3eac76d258161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:cf:8d:98:c8:65:9e:e6:01:29:12:1e:79:
65:85:ca:e2:25:3f:95:e9:9d:70:74:c6:aa:77:c6:
37:08:df:63:43:4a:b6:05:db:8c:57:d9:54:23:e5:
cf:28:aa:13:1e:f1:e1:4f:1b:f5:50:3f:6e:b5:3d:
b3:b1:49:31:fe:94:dc:e4:18:c3:77:78:09:34:72:
04:6d:3b:80:46:bf:a9:f2:1b:65:d0:83:10:e9:a4:
0f:44:da:60:ea:df:07:9e:34:53:e6:cc:30:54:5b:
6f:11:29:8c:a5:1b:0d:ee:81:10:23:78:43:bb:e8:
59:46:60:49:6d:f1:b9:67:b1:7b:ef:68:3b:c1:b4:
97:e9:13:50:fa:f9:70:22:d0:75:0d:30:d5:05:83:
ed:66:57:62:34:00:3b:98:94:39:74:c1:0f:39:30:
9b:13:7a:c3:b8:03:03:f2:7d:e1:ce:b4:7b:39:cf:
78:f6:13:26:1c:ea:57:c4:06:48:e6:7b:4e:62:f0:
c6:2f:46:68:2a:f1:eb:17:be:41:f9:d1:64:47:15:
9f:8f:76:ed:a3:02:e4:78:39:89:2f:ff:1e:53:17:
1d:31:c0:ce:41:6e:33:54:44:06:e3:00:b4:e1:95:
47:b7:20:a2:4c:3a:e2:d8:3a:11:7b:7b:8e:99:7d:
d6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3C:D7:4C:DD:40:91:F1:8A:55:FF:58:B8:E3:EA:C7:6D:25:81:61
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/YTzXTN1AkfGKVf9YuOPqx20lgWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.80.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b3:c0:5c:8e:f4:5e:0d:69:f8:d6:15:51:c1:57:a2:07:cf:
bc:3e:4a:0b:3a:9a:8d:73:19:af:31:a4:b7:75:43:d5:ea:55:
4b:dc:bd:05:af:6e:13:5b:ad:59:1a:f9:cc:83:ce:8c:e5:6e:
ac:f3:4c:29:6a:d5:41:de:f5:4a:d5:7b:9a:6f:27:84:a8:10:
25:a9:86:d2:09:fc:36:9d:20:d4:a3:18:cc:77:31:34:9e:84:
38:6b:33:d3:91:cb:f5:57:c5:dd:83:ec:51:9d:3a:2e:76:04:
a4:98:53:e2:fd:d8:de:09:06:c8:b4:87:20:11:b2:cc:c0:4b:
6b:e0:50:3c:b6:68:47:e1:7e:f8:d2:5a:ae:7b:d5:88:65:72:
06:d1:ad:54:f6:72:c4:37:73:e0:31:0e:b2:c4:b1:df:87:13:
ba:41:20:a6:35:84:b3:08:65:45:2b:f0:f9:1a:68:9d:8c:b2:
27:c1:69:31:c8:2a:dd:ff:78:73:46:d4:d4:90:8c:9b:a5:61:
a1:b5:df:61:c4:48:e0:b6:c0:3c:ec:8f:d5:00:09:8a:de:a1:
6d:cf:7b:f3:1a:65:29:69:b4:91:4b:b4:08:a0:ab:ad:6f:f9:
31:06:66:dd:76:c2:56:a0:7e:05:f2:02:a2:bb:cf:5d:42:15:
b5:9d:d8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:57 2024 by rpki-client on console-fra.rpki-client.org