Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/Y66c0t5htRn9nC5YP3BQ-hfYcow.roa
File: Y66c0t5htRn9nC5YP3BQ-hfYcow.roa (raw, json)
Hash identifier: Khjyo4iVn/eAd89PDAktjfzLyvJIyplAaRTkL410Lf0=
Subject key identifier: 63:AE:9C:D2:DE:61:B5:19:FD:9C:2E:58:3F:70:50:FA:17:D8:72:8C
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 018B74CC1E8E5539998E3F5B26CB1E5291F7
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/Y66c0t5htRn9nC5YP3BQ-hfYcow.roa
Signing time: Sat 28 Oct 2023 05:40:16 +0000
ROA not before: Sat 28 Oct 2023 05:40:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48108
IP address blocks: 176.116.0.0/24 maxlen: 24
94.247.137.0/24 maxlen: 24
185.235.230.0/24 maxlen: 24
31.222.227.0/24 maxlen: 24
2001:678:e30::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 Nov 2023 04:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:74:cc:1e:8e:55:39:99:8e:3f:5b:26:cb:1e:52:91:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Oct 28 05:40:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63ae9cd2de61b519fd9c2e583f7050fa17d8728c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:45:03:86:08:02:fa:8b:fa:c2:64:81:c1:
0c:f3:82:40:c6:51:09:ed:58:52:19:0e:7a:87:7e:
0c:46:69:13:5f:48:9d:22:de:25:e9:b0:1e:07:30:
f9:14:8a:bd:12:00:9d:5e:3b:15:75:fe:ed:6f:c0:
c0:a0:71:a2:a9:ae:d5:5b:ee:40:82:9b:39:7f:c1:
d7:8e:d8:92:b4:fa:81:b5:a9:11:27:cb:f4:6a:5e:
09:76:9f:ec:19:5b:2b:eb:26:b1:f6:76:8b:31:08:
20:e4:86:44:3a:d6:bf:47:9e:7f:41:49:57:da:ea:
1f:73:a5:6e:64:93:b8:70:53:80:42:9e:a7:5c:8e:
6e:fe:1b:a3:60:e9:a1:03:9e:18:9b:9a:7f:81:45:
a7:5d:56:56:5b:59:42:9e:7d:a7:ac:63:c0:20:09:
b0:d5:a8:94:32:2b:1e:78:b6:b5:be:f7:a8:68:72:
ef:4e:e8:05:22:32:bb:9b:9b:b2:cf:e6:85:6d:af:
ca:51:90:64:26:2c:75:e7:7f:b0:8f:2e:d4:55:55:
f3:7e:dc:1b:f9:29:8c:03:f5:69:74:f2:3f:32:49:
6f:45:b7:fd:c9:6d:2e:7e:45:b3:25:01:0a:6b:50:
c5:c7:a5:53:3e:4c:c9:21:7b:d5:0f:ee:44:a7:b5:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AE:9C:D2:DE:61:B5:19:FD:9C:2E:58:3F:70:50:FA:17:D8:72:8C
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/Y66c0t5htRn9nC5YP3BQ-hfYcow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.227.0/24
94.247.137.0/24
176.116.0.0/24
185.235.230.0/24
IPv6:
2001:678:e30::/48
Signature Algorithm: sha256WithRSAEncryption
9e:9e:92:c6:2c:34:e9:d0:bd:6f:cd:c0:6e:13:cb:89:9c:3f:
3f:ec:70:1a:d3:1f:20:32:39:e4:96:b1:57:97:0a:18:fd:78:
0d:ae:68:b0:71:d3:42:2f:38:f3:e1:fc:20:eb:53:d2:f9:e0:
84:e3:45:cb:20:bf:87:cc:6d:2b:1f:94:33:f5:67:4e:f9:9e:
60:e9:b3:25:12:66:d3:3a:e2:6d:a2:b1:e1:1e:93:f5:50:a0:
b4:fe:1e:6a:70:e1:ef:b8:0e:55:4e:95:35:ac:46:25:f2:6d:
08:5a:d7:b8:72:4d:ec:ba:8a:6a:f4:b0:f5:c8:32:40:7c:bd:
7d:bd:6f:ab:77:24:2c:12:17:60:b8:92:84:77:e3:df:ac:51:
d5:ff:80:aa:1a:31:46:86:2e:45:0f:80:33:ab:57:db:b2:29:
d8:03:42:c1:27:51:8a:e2:d1:75:97:9b:f5:57:87:b1:8e:07:
e7:aa:7d:8f:a6:61:b1:54:62:66:62:80:72:ce:03:7f:66:ab:
a3:f9:92:14:7d:58:2f:8d:0c:ff:36:00:0b:12:fd:cb:4c:e2:
bd:d1:b3:d8:d1:31:1b:e6:4e:a4:a8:f3:8d:98:cd:aa:9e:53:
da:1e:5c:42:77:62:02:89:5f:84:ec:d2:d5:a3:7a:c7:20:f6:
29:8e:10:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:47 2024 by rpki-client on console-ams.rpki-client.org