Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/YlPnT9gxzO020EnknvGLwsu95-Y.roa
File: YlPnT9gxzO020EnknvGLwsu95-Y.roa (raw, json)
Hash identifier: Fe620a7rDB2G6O+6g0U28JX2ZBmlqTc2lV0ehNWrCzk=
Subject key identifier: 62:53:E7:4F:D8:31:CC:ED:36:D0:49:E4:9E:F1:8B:C2:CB:BD:E7:E6
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0185720C59354EB94AA600938829784AAB53
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/YlPnT9gxzO020EnknvGLwsu95-Y.roa
Signing time: Mon 02 Jan 2023 10:34:49 +0000
ROA not before: Mon 02 Jan 2023 10:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212419
IP address blocks: 45.12.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:59:35:4e:b9:4a:a6:00:93:88:29:78:4a:ab:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6253e74fd831cced36d049e49ef18bc2cbbde7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e5:22:c8:a2:38:04:75:9c:e9:b1:4c:1a:0c:
b8:76:b0:ca:6b:0c:14:97:60:0b:63:5a:ba:05:8e:
6f:cc:bb:e8:49:ff:88:fc:06:64:08:6c:b1:59:ed:
e7:8e:7c:62:0d:4b:9f:c4:2f:60:2b:fc:14:bb:79:
9f:21:a0:6c:fc:68:75:01:7e:6c:65:2b:ce:59:2f:
15:87:a3:5b:12:a6:7c:30:db:da:5c:9a:5f:db:85:
9d:e3:fe:1e:58:54:57:24:9c:35:72:63:4d:85:02:
8c:b6:5f:50:eb:41:df:be:42:7a:7c:95:38:aa:22:
37:88:53:ba:13:1b:75:f1:f0:0b:91:9b:b2:2c:34:
fc:ed:cb:21:71:4b:3c:a6:7e:cc:45:f0:1a:7e:5f:
c6:5c:f1:7c:78:39:27:e6:23:8b:01:07:03:ae:87:
14:77:5d:f9:f1:5e:6d:48:83:bd:9a:4d:53:dc:3c:
27:7f:28:f3:13:8a:8c:15:13:3c:0b:3d:7d:43:44:
81:d9:9e:87:95:37:42:bb:69:f9:79:40:36:05:dd:
f0:bf:dd:55:f5:ed:19:00:0b:2a:cc:a8:20:cd:85:
d4:af:bc:72:58:46:8a:b2:bf:18:57:8a:ff:46:83:
ab:dc:65:c2:92:cd:9f:4a:7a:85:90:c9:26:2c:3b:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:53:E7:4F:D8:31:CC:ED:36:D0:49:E4:9E:F1:8B:C2:CB:BD:E7:E6
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/YlPnT9gxzO020EnknvGLwsu95-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.29.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2f:f3:9e:f2:3a:b0:db:14:a2:14:7e:50:4a:83:79:7a:a1:
c4:ef:ec:46:65:a7:e2:52:22:b8:02:24:cc:3e:d5:0f:70:4f:
c3:a6:6d:b3:69:59:ac:6e:3f:b3:f7:46:3e:ca:10:9a:be:ee:
26:6d:24:3c:6c:e5:a8:08:87:24:7d:9f:29:e0:db:9e:d3:c8:
ab:1c:7f:d1:c8:44:88:be:aa:5c:7e:8c:eb:f8:60:9c:a6:2d:
73:53:d8:32:c8:ea:99:9b:7c:01:0a:a9:0f:35:53:55:af:04:
f3:46:8a:53:4e:99:d4:ac:b4:75:4f:ac:6f:51:13:fa:51:39:
dc:b2:90:2a:67:b0:da:01:26:48:05:ca:37:07:72:78:2f:79:
c1:42:08:14:9f:5e:56:56:16:80:40:5f:08:6d:66:48:24:75:
b0:85:ef:76:9f:31:c8:17:cb:e7:bb:5e:75:94:1a:a3:e0:48:
2d:69:57:82:3e:54:02:b7:33:9b:9e:45:23:a2:94:61:ff:0d:
fd:82:ad:45:fe:7b:8e:9f:98:37:9f:16:8d:2c:bb:ac:03:5e:
d7:38:d0:f0:3f:9e:d2:07:2e:f6:e1:06:83:a6:c8:b0:60:e6:
42:9f:23:20:9d:2e:c9:18:69:d9:02:fd:f9:92:f3:21:3c:06:
81:13:41:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org