Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/YdonuRLMWjYNHeXgx1AKFvYF8-k.roa
File: YdonuRLMWjYNHeXgx1AKFvYF8-k.roa (raw, json)
Hash identifier: Vk9bQVX1RIi9NLXa9+lFIRYJIkF9xL3uxAYTFa3VH2Y=
Subject key identifier: 61:DA:27:B9:12:CC:5A:36:0D:1D:E5:E0:C7:50:0A:16:F6:05:F3:E9
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DCB1C3B318667A5A6A59995895CA3
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/YdonuRLMWjYNHeXgx1AKFvYF8-k.roa
Signing time: Sun 01 Jan 2023 20:55:01 +0000
ROA not before: Sun 01 Jan 2023 20:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.255.54.0/24 maxlen: 24
62.133.34.0/24 maxlen: 24
2a0b:4080::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:cb:1c:3b:31:86:67:a5:a6:a5:99:95:89:5c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61da27b912cc5a360d1de5e0c7500a16f605f3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:c3:51:aa:a3:3c:a2:c0:75:be:c9:29:db:
7f:ff:53:5c:32:a0:f4:a8:03:09:2b:0b:15:56:91:
f3:1a:46:01:f1:92:26:7e:db:00:73:a8:3e:c8:3d:
6e:de:af:58:2c:a8:12:77:ee:d1:20:d8:cc:f0:39:
4b:3f:4b:ac:92:dd:00:42:61:f8:42:4a:a9:24:47:
0b:30:c4:3d:69:23:84:6b:4a:b6:dc:f5:32:7c:df:
be:f0:16:b2:5d:a0:cc:13:c9:fb:c2:86:f8:a6:fb:
74:7c:3d:2f:3b:a5:dc:7b:ac:9f:e6:fa:4e:cc:dc:
28:d2:57:42:75:02:86:f4:3f:66:16:c4:a5:7f:d6:
8c:54:62:7a:02:7b:f2:83:01:87:f2:79:75:7f:a0:
2b:c2:11:f4:d0:04:8c:55:68:d5:8d:c1:73:6c:a0:
dc:6b:0f:0b:90:bb:1c:29:cd:63:1b:2a:52:bd:79:
16:cb:af:f5:4c:eb:2f:26:6f:f5:d8:76:8e:cc:3f:
74:a4:d2:56:f0:46:c9:91:fb:1d:e8:66:c2:46:a4:
14:12:0c:af:49:25:9d:88:f3:b4:43:5e:80:e0:99:
80:7a:6b:cd:2b:de:f1:2b:b6:58:2d:7e:ed:bb:a5:
5e:89:5c:1c:b0:3d:2e:f1:5e:af:b7:ab:88:16:81:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DA:27:B9:12:CC:5A:36:0D:1D:E5:E0:C7:50:0A:16:F6:05:F3:E9
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/YdonuRLMWjYNHeXgx1AKFvYF8-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.133.34.0/24
185.255.54.0/24
IPv6:
2a0b:4080::/32
Signature Algorithm: sha256WithRSAEncryption
80:48:0c:5e:90:f9:8a:05:96:e4:9c:1b:63:7e:c4:65:b2:0b:
86:36:ea:4f:61:d0:5d:5d:3f:7e:70:8c:9e:7b:b4:7e:47:ec:
63:2b:81:d8:3b:c7:29:8d:84:4f:7e:d3:ec:ee:92:ac:fe:ef:
3b:1f:8e:d5:13:76:61:c9:81:0e:be:78:47:0a:6e:aa:80:f1:
e2:75:da:24:9c:18:7e:e5:31:0b:e9:e6:e7:fc:45:86:74:14:
e6:c3:81:7f:73:98:80:75:58:05:02:10:b7:62:2e:8f:1a:51:
74:03:9b:29:14:af:4f:dc:d9:80:fb:d1:ba:5c:64:91:31:57:
39:66:e1:0a:46:ad:60:68:3a:ff:95:d0:11:df:88:ec:74:11:
13:38:ef:48:a2:e8:f1:31:d3:a5:e5:8f:82:fe:7e:ca:e6:03:
3c:f0:86:5b:ac:f6:a1:09:69:69:6f:3b:b9:b9:e7:a6:90:f7:
35:cc:21:9e:a2:a5:56:f0:4a:80:77:5e:5b:82:fb:fd:68:03:
83:56:ea:09:d1:53:3d:92:8a:3e:d7:e0:c6:61:ad:6a:da:98:
cc:3b:7e:d7:51:73:56:8c:87:f0:5e:ca:9c:08:b1:d5:65:f3:
9f:d5:f2:f7:f4:37:dd:13:cc:16:a6:b4:28:90:00:75:ca:c5:
89:59:67:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 01:45:18 2023 by rpki-client on console-fra.rpki-client.org