Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/YumKcfHJzZT0FXeF5NiPuh1qqHw.roa
File: YumKcfHJzZT0FXeF5NiPuh1qqHw.roa (raw, json)
Hash identifier: m9F1qOIwyNzKSWRS8GqykjUIm67Pf0adiC6lW/1geA4=
Subject key identifier: 62:E9:8A:71:F1:C9:CD:94:F4:15:77:85:E4:D8:8F:BA:1D:6A:A8:7C
Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial: 01856BC116D9039C13B9B7B45A99915515D3
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/YumKcfHJzZT0FXeF5NiPuh1qqHw.roa
Signing time: Sun 01 Jan 2023 05:14:54 +0000
ROA not before: Sun 01 Jan 2023 05:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200423
IP address blocks: 185.107.220.0/22 maxlen: 24
2a06:4600::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:16:d9:03:9c:13:b9:b7:b4:5a:99:91:55:15:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Validity
Not Before: Jan 1 05:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62e98a71f1c9cd94f4157785e4d88fba1d6aa87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:24:4e:e2:75:f8:1e:11:42:8a:c0:e7:1c:
ba:84:cb:83:42:34:4e:f3:df:de:8d:28:e2:74:f1:
40:b8:2a:f2:0e:3e:c0:36:58:49:22:5c:df:e3:45:
30:de:fa:61:b5:57:f2:3f:ec:1a:95:34:f6:94:46:
9c:a4:eb:df:ae:6a:ea:68:1e:8d:88:e2:d5:95:d2:
59:2f:0c:34:e2:88:fc:2a:fb:f7:b8:13:75:b7:33:
b9:f2:70:08:8a:d2:d3:b9:fe:27:71:94:e8:49:37:
14:36:1d:4b:f8:bf:23:02:fb:57:4d:06:f3:ac:93:
c5:c0:65:79:c5:d4:e2:86:2d:ec:b1:9a:cc:86:ec:
93:15:7d:2b:42:89:ba:57:04:84:c9:a7:b5:0e:29:
2c:aa:dd:26:82:d1:20:9b:df:d7:16:52:20:c5:b9:
dd:22:54:02:c5:3c:09:8b:c7:4e:82:34:4a:95:19:
fe:03:d9:dc:23:b9:52:07:86:37:c3:d3:7d:af:f1:
58:15:f5:14:e6:b5:de:3e:c4:ed:42:fe:8f:14:c9:
9a:d4:d4:fc:77:d6:fc:9b:58:8c:73:01:ca:51:c8:
54:7a:77:60:5d:22:ce:2b:22:fb:cc:f4:5d:03:89:
09:29:c4:52:e3:dd:34:9e:33:19:85:21:b7:66:1c:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E9:8A:71:F1:C9:CD:94:F4:15:77:85:E4:D8:8F:BA:1D:6A:A8:7C
X509v3 Authority Key Identifier:
keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/YumKcfHJzZT0FXeF5NiPuh1qqHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.220.0/22
IPv6:
2a06:4600::/29
Signature Algorithm: sha256WithRSAEncryption
87:77:dc:7d:33:07:45:77:30:bd:12:f9:d6:22:62:04:db:93:
7e:f8:58:d4:a7:3c:91:3c:52:59:a8:ea:a2:66:1f:29:21:19:
f2:61:70:ec:39:cb:77:b9:49:11:03:d4:95:e4:74:12:d1:87:
03:1a:b1:b3:6e:93:69:58:b8:7b:07:12:88:a6:37:30:11:7d:
c1:ba:32:ec:99:37:18:ba:b4:af:51:a4:60:8e:c2:3a:a1:a8:
9e:3e:12:50:6c:92:32:f9:35:f3:18:2e:bd:7d:28:c5:6d:aa:
36:99:76:f5:9e:15:e5:ad:11:77:5e:97:46:b5:ac:a4:e8:e4:
1f:e7:5c:32:e4:da:54:86:8c:dd:13:fb:53:42:16:b5:30:f7:
e1:07:c4:5d:70:89:7d:94:30:12:67:fe:5b:0b:66:f1:0c:14:
02:69:1d:55:e8:6d:c7:ab:d3:4e:5e:ef:05:64:4d:ab:f8:4c:
69:3b:9d:97:a7:a1:bf:e4:04:3a:21:2f:ef:12:0d:93:31:5b:
88:a7:24:a7:21:d2:a2:6c:69:03:7a:7f:ca:4f:44:cd:df:2a:
89:ed:ea:76:da:b2:b2:bf:7e:b4:9c:6e:06:0a:57:80:fa:b9:
04:1c:a7:00:ba:ca:a8:e5:f2:ed:d7:2a:37:bb:07:45:6b:17:
0e:40:b6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:14 2024 by rpki-client on console-fra.rpki-client.org