Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/YH0tG6wTT-vQPjiSkVOLJJlVT0I.roa
File: YH0tG6wTT-vQPjiSkVOLJJlVT0I.roa (raw, json)
Hash identifier: DRB6rLP5JuX8eTWvop2ZOyiaROG7YxDO7Lt6OnczWnU=
Subject key identifier: 60:7D:2D:1B:AC:13:4F:EB:D0:3E:38:92:91:53:8B:24:99:55:4F:42
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 01886E412C416A346AAA92FA4C67C0376204
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/YH0tG6wTT-vQPjiSkVOLJJlVT0I.roa
Signing time: Tue 30 May 2023 20:02:24 +0000
ROA not before: Tue 30 May 2023 20:02:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 195.34.94.0/23 maxlen: 23
91.204.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Jun 2023 16:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6e:41:2c:41:6a:34:6a:aa:92:fa:4c:67:c0:37:62:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: May 30 20:02:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=607d2d1bac134febd03e389291538b2499554f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:38:39:50:8b:02:76:01:96:6c:7e:31:df:6b:
02:e1:f1:2f:d6:7b:ef:51:82:52:86:be:30:b5:7c:
54:75:0d:e0:29:e6:35:14:8b:c5:2c:30:e6:51:b5:
f2:27:f9:e3:1c:eb:85:9c:38:d9:90:46:0b:4d:61:
f2:ab:02:90:91:62:8d:cb:25:84:88:2f:39:57:1c:
4d:58:e6:39:02:33:e2:85:23:4c:50:af:71:9e:7f:
e7:13:40:7c:09:35:d6:dc:31:de:2b:5b:9d:54:88:
ea:8c:f6:05:2c:f2:2f:82:b0:b0:5e:ee:32:da:f3:
0e:dd:f7:a2:96:8f:32:c3:8d:1a:e9:f2:20:0a:71:
94:38:0c:3e:42:5c:5e:c1:55:c7:81:b0:f9:74:60:
16:b2:9f:b9:a2:45:8c:32:2c:13:11:8b:6a:57:bc:
11:47:15:a8:3b:63:bc:d7:6c:10:5f:df:80:81:82:
c1:58:8e:00:56:6d:78:58:0b:bb:c3:25:20:53:b3:
16:93:cd:12:b3:09:f3:fa:34:08:c2:ea:9e:6d:32:
6f:76:2e:96:d9:d2:ab:5e:34:d9:dc:44:08:3a:87:
a6:ee:53:56:f0:71:63:f6:d9:eb:df:f5:c7:98:e1:
c4:3e:31:e7:0c:14:c2:89:3e:fc:8d:9d:59:0e:cb:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7D:2D:1B:AC:13:4F:EB:D0:3E:38:92:91:53:8B:24:99:55:4F:42
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/YH0tG6wTT-vQPjiSkVOLJJlVT0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.78.0/24
195.34.94.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:bc:a0:95:be:d3:2b:8f:30:88:fd:64:c0:c4:5b:11:65:8e:
08:d2:85:53:26:2a:86:32:c0:d6:53:1c:da:5b:8a:6a:77:8e:
dc:8b:bd:d2:eb:27:71:8e:59:e6:c0:6a:e0:ab:af:3d:49:7e:
23:f9:34:35:bd:34:97:a8:9c:9f:c8:4f:c0:de:12:95:4f:a9:
76:14:a9:18:7e:11:33:c7:20:08:a2:3e:61:44:63:1a:9a:46:
f1:d5:ca:88:0c:2f:b0:97:07:0a:89:c7:24:cc:2f:ec:86:a9:
ff:23:e2:92:c8:09:8d:18:b6:67:b8:e8:6d:38:1d:b1:0b:5c:
92:ec:c7:d7:36:9d:1b:44:d0:af:9a:b9:cd:58:82:62:16:27:
29:bc:a3:e7:13:f5:aa:70:ae:49:ef:eb:1d:3e:1d:d0:e2:6a:
a2:62:6c:82:51:4a:42:da:7c:a8:86:56:65:bb:ea:2a:01:7c:
c0:a9:6d:3c:35:49:a7:ac:a3:94:5e:f8:4c:8f:6e:e1:d7:b4:
34:98:e5:ac:49:a5:8d:68:c1:c5:57:9a:f0:9c:8f:bd:05:25:
4b:28:c5:cd:ad:c5:1d:67:09:50:6c:ae:47:fe:c6:dc:03:43:
b4:78:9b:45:37:e7:81:c3:75:fa:52:20:bd:9a:99:a4:e4:06:
14:29:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:38 2024 by rpki-client on console-ams.rpki-client.org