Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/Yh3k3Ec_Hxc4HrqAhX3ICyNYoA8.roa
File: Yh3k3Ec_Hxc4HrqAhX3ICyNYoA8.roa (raw, json)
Hash identifier: tI+bSdwr/x0ig3bPEIBusDtb9i7Ve8em5xGAS+O5/RU=
Subject key identifier: 62:1D:E4:DC:47:3F:1F:17:38:1E:BA:80:85:7D:C8:0B:23:58:A0:0F
Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial: 018CE84818462F6EFB20DECCF6FC9DFAB018
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/Yh3k3Ec_Hxc4HrqAhX3ICyNYoA8.roa
Signing time: Mon 08 Jan 2024 08:54:48 +0000
ROA not before: Mon 08 Jan 2024 08:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 82.134.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 12:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:48:18:46:2f:6e:fb:20:de:cc:f6:fc:9d:fa:b0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
Validity
Not Before: Jan 8 08:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=621de4dc473f1f17381eba80857dc80b2358a00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:c5:d7:6f:02:6c:8c:cd:ec:74:d1:55:52:
61:4e:92:50:bf:39:a3:ac:be:ae:a7:b8:92:b9:4f:
db:9c:b8:d9:1e:4b:c6:bc:ad:1c:b6:ed:e7:cb:48:
65:32:fe:47:67:40:9b:b7:68:fa:17:ee:91:6a:e1:
1c:54:0c:cd:14:41:41:33:3c:97:44:30:1b:a6:e8:
0e:e6:fb:bf:ec:fd:8c:13:7f:35:c7:3a:2e:e2:d1:
2a:08:f8:a0:aa:74:a6:bf:54:14:96:4e:b1:ce:88:
3c:d6:88:02:91:47:7e:01:f5:34:26:6e:5a:27:5d:
24:27:34:26:9b:4e:4b:c1:01:33:44:1e:c6:cf:c5:
ee:c0:3e:f2:7f:22:60:c4:88:ae:3e:6e:ac:5c:6a:
a5:78:49:6c:e5:95:91:b6:01:3f:1a:f3:93:7b:b9:
80:8e:e4:75:87:49:ee:20:ee:9b:ff:51:98:9f:00:
25:a6:ec:fa:50:1c:05:1b:45:c6:21:3a:92:2d:79:
7a:38:84:3b:16:e4:96:b2:f3:3d:50:52:0f:64:fe:
78:4b:ee:3b:1e:c2:dd:de:36:ec:15:5a:96:2a:ac:
4f:3a:01:9a:e9:60:1f:2b:3b:7b:fa:88:34:a3:ae:
1e:3c:07:5d:70:0d:9d:22:0f:82:2b:97:b3:59:ca:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1D:E4:DC:47:3F:1F:17:38:1E:BA:80:85:7D:C8:0B:23:58:A0:0F
X509v3 Authority Key Identifier:
keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/Yh3k3Ec_Hxc4HrqAhX3ICyNYoA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.134.64.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5e:ca:13:56:49:d1:0f:38:e6:33:c1:f6:3a:dc:c1:21:70:
e7:d1:4a:bb:0a:c1:f5:c5:a1:ba:9f:ca:f6:17:a2:9d:61:40:
07:9a:68:72:0f:4e:4f:5d:df:a9:a4:ab:fc:7d:94:e3:85:06:
dd:40:04:f9:22:ca:27:49:3c:b6:c6:fb:5e:bf:6e:9f:7a:13:
ae:9a:64:6b:62:80:49:dd:2c:9f:eb:ad:aa:f7:ba:d5:31:cb:
ce:74:41:74:63:74:2c:6b:a8:c0:60:36:50:87:07:8e:a7:ee:
b8:b4:a8:b2:e8:53:3e:4b:25:39:9d:e0:df:ce:ed:8a:ad:ed:
37:2b:65:2e:71:d0:b0:be:5c:85:ed:4f:9f:40:5e:c6:da:f9:
bc:1a:3d:d9:f8:af:1b:28:28:07:ff:0f:4c:21:49:85:5b:48:
8f:db:ac:3e:c9:3d:20:da:dc:85:d9:8f:b7:f2:2d:ac:7e:ed:
b5:1d:e9:20:fd:b7:a9:8a:51:14:94:6a:47:6e:c1:51:99:6f:
4c:44:75:3a:68:ac:eb:42:77:c4:0b:44:c2:0c:87:05:64:17:
6e:d5:26:15:16:90:83:ee:91:3a:fa:6a:9b:54:7e:dd:5d:3e:
07:d5:38:5e:c6:9c:d2:cc:98:2e:68:ec:e9:11:03:ef:3e:ac:
13:dd:6a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:02 2024 by rpki-client on console-ams.rpki-client.org