Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/YzUuYMqcTzoeaHxoulDRCujnllg.roa
File: YzUuYMqcTzoeaHxoulDRCujnllg.roa (raw, json)
Hash identifier: pk2s7JINk61/VhiS5xe/NCfqx3pKZeIpCtI/vNI4ELQ=
Subject key identifier: 63:35:2E:60:CA:9C:4F:3A:1E:68:7C:68:BA:50:D1:0A:E8:E7:96:58
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 01856E265494737C1606C962971D5D2DAD65
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/YzUuYMqcTzoeaHxoulDRCujnllg.roa
Signing time: Sun 01 Jan 2023 16:24:43 +0000
ROA not before: Sun 01 Jan 2023 16:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54145
IP address blocks: 193.151.172.0/22 maxlen: 22
206.190.220.0/22 maxlen: 24
2a0d:e8c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:54:94:73:7c:16:06:c9:62:97:1d:5d:2d:ad:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Jan 1 16:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63352e60ca9c4f3a1e687c68ba50d10ae8e79658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:96:94:37:b5:77:3e:c9:af:ac:ff:2b:3b:
c9:f6:f1:16:68:74:4a:67:05:c3:9f:79:2a:72:a9:
a3:e6:aa:b0:bc:0a:bd:62:e4:5c:a5:e9:8e:4e:99:
d7:2c:a8:d2:23:24:a5:1f:b3:a7:79:0e:79:08:47:
12:44:6f:77:45:91:a1:9a:48:03:9b:bb:50:a6:eb:
d3:9f:0c:89:8a:cc:5b:03:c6:76:85:51:18:9d:dd:
ae:79:76:bd:da:42:e4:eb:6e:d7:62:41:8f:b8:43:
6a:9b:c3:75:c9:de:49:7b:80:d5:6d:47:6a:9c:a0:
49:d6:0c:80:74:2e:64:89:5f:a7:22:a8:9d:7a:c3:
05:7e:96:ee:2e:6c:5e:95:8e:c8:0f:35:30:5e:f7:
57:58:f4:87:96:29:5c:1a:80:b3:ac:57:26:5f:52:
3a:09:e5:82:52:05:9a:7f:84:0a:fb:59:38:f5:52:
d9:08:0f:f0:37:27:12:ea:6d:9b:6d:b7:c5:de:85:
f3:ab:18:0f:2c:2a:c2:09:f0:f3:51:d0:eb:9d:cc:
47:b2:cf:14:a0:df:e3:b7:c8:a0:5a:6f:be:98:e1:
ab:2c:f4:31:15:b4:06:7b:7f:9f:d6:9e:47:4c:2e:
e6:4b:b6:3e:aa:d7:55:0e:6b:b9:2f:3f:58:9f:68:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:2E:60:CA:9C:4F:3A:1E:68:7C:68:BA:50:D1:0A:E8:E7:96:58
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/YzUuYMqcTzoeaHxoulDRCujnllg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.172.0/22
206.190.220.0/22
IPv6:
2a0d:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
01:7e:69:6f:05:5c:38:7b:81:af:1c:9f:a2:ad:98:ee:41:37:
c2:71:54:e4:a0:49:cd:27:46:ef:e2:60:8c:49:42:73:fe:82:
47:a4:2e:ec:4e:19:6e:d6:42:a9:58:5f:7e:be:0b:f4:96:d0:
c1:3a:90:f5:68:85:ca:42:49:64:91:c1:bb:38:a9:6a:bb:aa:
88:81:a6:a6:bf:a8:55:b3:7e:bc:87:df:da:c7:96:1e:88:b0:
23:63:b3:ee:e2:4b:99:54:a3:59:0d:ab:45:3e:ef:2b:7c:79:
32:dc:a6:0e:0c:4b:b8:2e:d6:e2:63:0d:98:d9:71:b1:72:32:
6b:0c:8c:41:e9:1e:99:8e:7d:b8:70:da:8f:3f:04:4e:a4:a6:
fd:a6:cd:3a:3a:c7:8c:25:00:84:4a:0f:6d:6d:e3:ba:f3:e3:
5c:50:39:0c:6b:10:e6:c0:ae:25:03:86:f0:7c:ea:d6:78:c4:
69:bd:1c:f2:85:f8:a8:4e:75:47:a0:a7:fe:91:fa:ab:f9:db:
95:78:35:b2:26:42:10:5a:43:d7:1a:88:fb:a4:86:ef:c0:6f:
21:ab:3c:1c:25:ca:9d:a3:1a:c6:b5:c3:17:11:31:1e:47:0a:
db:dc:29:b2:c4:d1:6a:dd:b0:67:1a:a3:77:a7:ea:92:e4:e9:
da:81:f3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:17 2024 by rpki-client on console-ams.rpki-client.org