Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/YtlMgQZJ5yfPy7ecHro5e13evlM.roa
File: YtlMgQZJ5yfPy7ecHro5e13evlM.roa (raw, json)
Hash identifier: 9JH3gK/G3vA6ChHRmo35YMM2Oj1vTlMQYMqWZRfhlHs=
Subject key identifier: 62:D9:4C:81:06:49:E7:27:CF:CB:B7:9C:1E:BA:39:7B:5D:DE:BE:53
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 018CC94E69EE6788BBA9389B88E3F98C40E4
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/YtlMgQZJ5yfPy7ecHro5e13evlM.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8751
IP address blocks: 89.42.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:69:ee:67:88:bb:a9:38:9b:88:e3:f9:8c:40:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62d94c810649e727cfcbb79c1eba397b5ddebe53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:21:52:7b:ba:42:07:9b:ad:11:96:78:e1:
33:db:84:2c:d5:6c:0f:48:81:06:e3:96:0d:71:c8:
03:4a:60:da:be:c6:a3:a0:45:c5:23:f7:55:91:e7:
27:df:75:0d:3d:1d:84:d2:52:83:dd:e9:9f:45:f4:
b7:98:c7:3f:39:e0:1b:e9:cc:99:d8:c0:c0:30:35:
aa:57:73:e6:b4:fc:f9:f1:db:34:ca:5e:e0:e8:5b:
22:60:d6:2a:d4:d4:5a:53:a0:6a:2a:35:68:79:3a:
5d:89:d5:eb:b9:d0:28:83:60:68:d3:c9:f4:da:09:
89:a0:e4:09:03:3e:f3:f9:bd:93:5f:36:d7:37:19:
09:5c:b1:a7:b6:1f:9d:7a:2a:2f:d0:d3:26:02:3a:
96:7e:18:77:75:e4:23:1f:5e:80:e5:d3:16:9b:a6:
e9:ca:b3:45:b4:5d:dd:74:9a:ad:93:09:78:0b:9b:
41:1c:77:47:b0:f5:9d:06:f3:c8:31:36:65:59:3a:
65:1c:19:92:e9:07:13:99:db:5f:d3:d9:1a:7e:cd:
9b:40:6e:de:7a:e5:22:a2:a4:b0:b8:0c:2d:85:0f:
e3:28:2c:fe:1d:a9:c7:2b:66:b4:87:8c:a8:24:c4:
b3:e5:13:3e:b7:0a:d6:c3:ab:f9:22:61:a5:1e:f9:
bb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D9:4C:81:06:49:E7:27:CF:CB:B7:9C:1E:BA:39:7B:5D:DE:BE:53
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/YtlMgQZJ5yfPy7ecHro5e13evlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.132.0/24
Signature Algorithm: sha256WithRSAEncryption
88:6f:0a:5f:7c:69:43:24:3c:c2:91:e5:fc:9c:80:9f:3f:28:
4b:f6:7b:17:c4:82:d4:5a:6e:2d:2f:80:93:9b:4e:27:bc:72:
f6:79:bc:e0:1b:0e:f4:e1:85:a7:6f:bb:0a:eb:a3:68:42:29:
9a:c8:4c:ac:58:23:30:47:ae:3c:6a:65:d4:3b:3f:ee:4c:18:
06:f8:cf:74:24:0b:83:dc:4d:01:24:ba:d3:6a:d2:5a:8b:16:
d1:f3:42:5a:e1:07:4a:d3:2b:86:24:00:f3:17:32:c3:70:c5:
68:36:59:62:19:c2:9a:e1:80:c0:d4:4c:f7:5e:9c:cd:4b:41:
1a:4d:dc:35:da:61:4f:2a:c5:d0:f4:31:e3:18:f8:5c:43:cf:
12:25:e5:40:e9:55:ef:3d:47:d4:20:55:fa:2e:d6:2a:5f:fd:
54:25:66:16:7a:26:ec:c7:03:cb:a4:4e:a6:4c:68:f6:3d:62:
63:ab:65:87:16:90:17:df:32:d7:8f:e4:1e:c1:ae:0e:9d:2e:
de:db:a1:b6:14:95:73:2c:d3:24:79:3b:bc:8b:4e:be:0d:ce:
96:c0:39:ea:20:33:1e:b2:dd:77:d8:d8:16:18:b5:3f:9d:af:
1e:0f:c3:14:00:fc:e0:f0:9c:da:49:13:f9:39:91:57:7d:55:
c1:26:14:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:14 2024 by rpki-client on console-fra.rpki-client.org