Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/YhNb75t9l2eHRwjYLD5NaeNWnac.roa
File: YhNb75t9l2eHRwjYLD5NaeNWnac.roa (raw, json)
Hash identifier: I1VgjxGgmB6vwcS/5BLL/egzpf4pU8P8u27/dhasZ6Q=
Subject key identifier: 62:13:5B:EF:9B:7D:97:67:87:47:08:D8:2C:3E:4D:69:E3:56:9D:A7
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 018C862CB5B97A9298FC1B8C51B026877718
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/YhNb75t9l2eHRwjYLD5NaeNWnac.roa
Signing time: Wed 20 Dec 2023 07:42:06 +0000
ROA not before: Wed 20 Dec 2023 07:42:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56962
IP address blocks: 91.242.235.0/24 maxlen: 24
212.24.121.0/24 maxlen: 24
2a11:2740::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:2c:b5:b9:7a:92:98:fc:1b:8c:51:b0:26:87:77:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: Dec 20 07:42:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62135bef9b7d9767874708d82c3e4d69e3569da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:37:b1:a4:29:88:0a:29:76:7c:c5:fb:3b:
91:59:5d:34:1a:28:51:8a:4a:69:e5:15:d1:aa:25:
8c:36:06:b0:a0:49:a4:1d:d8:a8:e1:52:6c:48:45:
6f:51:cb:f0:7d:77:21:06:31:0b:31:40:1f:76:a6:
11:ea:36:15:77:26:c9:14:c6:92:06:5f:aa:8d:ad:
1d:76:ee:76:d7:fa:79:2a:f9:fd:a1:25:5f:91:96:
a9:d7:8b:f9:2d:75:36:87:a8:74:31:92:77:5f:80:
a3:c1:93:b1:89:4e:8b:e6:5d:8c:25:0c:6a:36:fe:
34:62:4a:20:83:ed:3e:61:5d:e6:2c:07:25:fd:61:
58:6a:82:3b:e2:bc:c0:19:7d:d5:02:62:80:6d:fd:
3b:e4:fd:8d:69:07:f4:e2:3b:56:ac:94:38:06:47:
21:f5:09:16:6b:52:dc:1e:a0:0d:73:45:e6:75:df:
4b:f8:d1:90:b7:f7:aa:5c:2d:7f:eb:99:e2:d2:1b:
d5:6b:4a:b5:aa:b4:41:6c:e3:40:3d:07:11:f4:d5:
0e:d0:ff:fb:6b:97:9a:84:7b:ac:58:b0:54:4d:a6:
db:de:c5:c2:9f:3d:c2:ab:27:27:d4:5c:b3:cd:e7:
0b:7a:b2:4e:f6:dc:0b:18:11:5a:93:50:f6:5d:f2:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:13:5B:EF:9B:7D:97:67:87:47:08:D8:2C:3E:4D:69:E3:56:9D:A7
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/YhNb75t9l2eHRwjYLD5NaeNWnac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.235.0/24
212.24.121.0/24
IPv6:
2a11:2740::/29
Signature Algorithm: sha256WithRSAEncryption
36:cb:10:23:78:55:50:8b:83:1e:92:03:27:33:0a:49:bf:44:
90:f2:82:94:65:50:fd:3e:3f:29:13:52:c4:64:c6:c6:0f:7f:
17:75:de:13:1f:98:3a:df:e3:e2:a4:d9:cf:5d:c7:a0:08:36:
f9:fe:23:6f:83:49:91:d5:63:a3:6d:97:76:28:d4:8a:39:8f:
7d:fd:d7:6c:5f:64:5e:64:30:c4:2a:95:9b:76:e4:63:03:bf:
8d:c3:90:3a:71:54:29:8c:68:82:e0:1f:f3:71:b8:5c:0a:17:
38:85:0d:6e:f6:9a:8f:3f:3c:51:7a:ff:36:aa:d1:e0:f7:d0:
07:21:48:0e:cd:cc:9b:ee:97:6b:7e:d1:1c:9b:1b:4f:5c:fb:
1d:50:48:ae:56:1f:e3:db:cb:11:01:69:2a:64:91:65:f7:de:
80:2e:4d:a3:8f:d8:8b:12:c9:eb:1e:75:f0:39:29:1b:0e:96:
e7:df:2b:a8:1c:e9:7a:74:66:aa:c5:c0:d8:ac:5f:1a:8e:23:
38:15:60:84:9e:a0:ea:4f:2b:2c:43:d7:df:c4:1c:d4:59:16:
1f:33:1b:76:3f:de:2d:40:2d:6d:7a:0a:1c:f2:77:25:01:13:
cb:fe:c7:19:d3:10:c7:5c:de:72:0e:f3:a1:57:34:ba:1e:cb:
7f:ff:a8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:55 2024 by rpki-client on console-ams.rpki-client.org