Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yU5wo42tWMeI9UQG9yJWTSdJDNg.roa
File: yU5wo42tWMeI9UQG9yJWTSdJDNg.roa (raw, json)
Hash identifier: Jy0rdZ8Nn0opaE28pTe5bRX5xF6E8uU0CmWRdGGlWS8=
Subject key identifier: C9:4E:70:A3:8D:AD:58:C7:88:F5:44:06:F7:22:56:4D:27:49:0C:D8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018AD0677C4F209D389F7FCDE6AF2841F7F5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yU5wo42tWMeI9UQG9yJWTSdJDNg.roa
Signing time: Tue 26 Sep 2023 07:32:37 +0000
ROA not before: Tue 26 Sep 2023 07:32:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212783
IP address blocks: 81.168.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:67:7c:4f:20:9d:38:9f:7f:cd:e6:af:28:41:f7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 26 07:32:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c94e70a38dad58c788f54406f722564d27490cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:33:41:5b:fd:0d:8d:e3:fb:63:45:61:b2:
9c:26:a3:9d:6c:ea:c3:63:67:37:5b:02:8f:48:30:
c0:89:87:96:f7:77:c6:80:b7:fa:d6:9f:c9:2c:dc:
11:0f:d0:ce:38:1e:09:47:07:74:0d:1a:fb:47:d6:
1a:2b:e9:38:a6:55:32:98:92:8a:21:e2:42:94:ff:
71:3f:a7:01:d1:39:ac:03:19:64:f9:7a:ec:27:75:
b0:02:ef:fa:c3:fa:ee:14:b8:c7:8e:0c:8b:27:10:
f0:d3:23:db:0c:2b:fb:f3:e1:34:be:dc:93:98:99:
e0:2c:b1:52:bc:6e:6a:7a:03:90:d0:25:29:14:be:
af:be:05:84:15:81:cb:8a:72:a1:74:21:57:74:d4:
e6:dc:a7:42:3a:f0:24:3b:6b:0e:5b:19:67:66:ff:
60:35:9c:7a:10:f8:74:c6:a4:83:61:5a:a5:9d:bd:
ef:41:86:90:57:2e:23:6d:63:7d:43:cf:15:ec:c1:
f9:09:9f:0b:6f:fc:49:ec:20:fc:e1:68:46:6e:dc:
41:bd:90:48:17:58:88:98:04:8f:fe:9d:78:c2:b3:
40:d7:40:34:06:2d:b4:c2:ef:7a:89:14:01:cc:22:
23:1c:19:f2:85:0d:bf:ca:2f:fd:8a:90:77:f3:3e:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4E:70:A3:8D:AD:58:C7:88:F5:44:06:F7:22:56:4D:27:49:0C:D8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yU5wo42tWMeI9UQG9yJWTSdJDNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.35.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8c:ce:97:0b:99:2c:79:60:7e:86:51:73:96:74:75:6c:00:
5f:d1:3b:85:cb:60:3f:22:cb:65:e9:10:0c:4d:f8:e7:12:60:
58:7a:52:6d:f9:97:05:42:dd:aa:26:c6:79:fa:74:f8:d2:1b:
cb:a8:d7:71:ef:51:54:7d:d1:9b:61:a2:05:34:3d:e6:e0:4f:
04:75:44:7b:30:dc:fc:57:de:8e:82:e6:20:3d:57:12:95:90:
9e:c9:fe:73:5a:af:8e:71:bb:a1:fc:71:1e:8a:99:54:54:42:
b4:2c:30:09:ed:e9:26:59:66:59:06:84:ce:fc:e9:61:2e:e1:
85:44:fb:bc:9c:f5:1a:91:bd:2f:2b:1a:a5:16:d2:17:f0:87:
45:39:c3:7e:4e:30:8c:a4:76:50:81:10:b0:ff:bb:0d:36:25:
8f:8d:d7:35:ca:6e:b1:2a:76:53:f8:49:a7:bd:03:97:eb:24:
b0:85:ed:1a:f7:76:3f:af:46:2e:6c:aa:dd:77:50:b8:14:f3:
9e:ba:49:3c:3d:20:9f:49:fc:e4:1b:7d:43:67:64:55:65:70:
3e:e9:01:8e:b2:ce:3f:06:cd:0b:57:71:40:0c:c3:7f:c8:98:
85:f9:ed:df:f2:0e:2f:2e:93:8e:68:df:79:f5:ae:02:7b:b1:
7e:8d:c0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org