Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/YqUPUAvAr01Rx7BniQ4E1z_qY1E.roa
File: YqUPUAvAr01Rx7BniQ4E1z_qY1E.roa (raw, json)
Hash identifier: 3gszCSeUqDZk2NCrIkqEj6QZ5ar6yg/IpjdwFpb7Zr0=
Subject key identifier: 62:A5:0F:50:0B:C0:AF:4D:51:C7:B0:67:89:0E:04:D7:3F:EA:63:51
Certificate issuer: /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial: 01856E8B3790215683F16BF6DED78E3EFA6E
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/YqUPUAvAr01Rx7BniQ4E1z_qY1E.roa
Signing time: Sun 01 Jan 2023 18:14:55 +0000
ROA not before: Sun 01 Jan 2023 18:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 195.225.127.0/24 maxlen: 24
91.211.232.0/24 maxlen: 24
185.108.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:37:90:21:56:83:f1:6b:f6:de:d7:8e:3e:fa:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Validity
Not Before: Jan 1 18:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62a50f500bc0af4d51c7b067890e04d73fea6351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:bc:4f:13:1a:4e:42:92:b0:de:32:77:46:
a0:80:c5:6d:7b:1a:21:4b:da:38:cd:44:f9:2f:e3:
9c:73:55:ad:cf:3a:a8:ee:0f:83:4a:85:e2:14:60:
51:78:df:bd:97:85:60:bc:b6:dc:85:73:ed:41:47:
9c:64:d8:1c:5b:95:3e:82:ef:b6:47:51:47:39:90:
06:31:25:ca:62:cd:f7:44:19:96:e0:cd:5a:ba:e8:
ad:ae:23:7b:32:30:7d:bf:55:22:8c:3c:53:b5:2c:
2b:00:46:2c:d7:90:9f:6c:03:24:7c:09:90:0f:6a:
d4:d7:ff:b1:df:6c:36:1f:5a:9f:4c:41:a1:6a:b9:
0e:33:08:d1:b1:96:e2:6f:4c:ff:39:6b:ce:22:dd:
87:83:24:91:89:9e:d6:69:9e:62:83:a9:05:da:d1:
7a:35:7d:8e:67:ae:8f:dd:e8:c6:20:0a:c1:b6:3e:
58:74:71:0f:24:d1:fd:97:f6:64:47:25:42:a1:68:
52:76:ad:28:58:72:e7:25:83:07:fe:52:ca:01:81:
8e:95:da:7f:67:0a:7f:f3:1a:b0:cf:76:3d:d4:32:
c5:03:7f:24:e6:b7:af:a3:7a:63:47:e7:f6:44:b5:
c8:70:6d:ea:35:87:d9:ca:4a:7c:68:ac:93:df:60:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A5:0F:50:0B:C0:AF:4D:51:C7:B0:67:89:0E:04:D7:3F:EA:63:51
X509v3 Authority Key Identifier:
keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/YqUPUAvAr01Rx7BniQ4E1z_qY1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.232.0/24
185.108.188.0/24
195.225.127.0/24
Signature Algorithm: sha256WithRSAEncryption
54:0a:ad:08:97:b1:89:e5:2f:c4:73:8b:19:59:db:64:f9:7c:
3f:46:e8:73:2a:79:ad:f7:39:c5:b4:7c:b1:ee:0c:12:eb:4f:
88:63:0b:93:81:a7:fb:f6:77:f8:a1:eb:10:48:2e:b7:d7:00:
b6:a8:22:97:31:f1:37:0a:1c:82:26:d9:27:ff:97:4f:34:b6:
58:fa:a0:d3:dc:ff:62:e3:29:ac:93:fa:5f:a4:db:a0:87:41:
bb:c4:9f:9b:dc:0d:7e:4b:33:21:5e:f7:fa:68:2b:36:8e:fe:
7a:03:ba:85:17:28:1b:be:38:ca:46:03:9e:42:21:80:cf:28:
7c:bc:db:47:51:c9:37:98:e3:66:60:f1:31:8e:0f:a0:3a:e2:
5b:9a:b0:6c:83:0b:b8:ba:60:a3:57:ac:39:b2:f1:f3:fd:2b:
3c:c9:84:b8:2a:66:89:db:12:08:c1:39:63:4c:1e:b7:01:3b:
40:70:74:d8:04:09:6e:34:87:88:31:91:48:50:3f:2e:d7:5e:
81:17:b2:4d:02:35:b8:2a:9b:3f:c6:a2:93:e0:ba:3d:76:3f:
f0:52:32:18:b5:54:a3:89:5b:6a:cd:cd:7c:56:8a:a9:3b:20:
7a:0d:e2:0b:45:14:8c:19:9c:5a:b1:5f:02:a7:9d:d8:e4:da:
28:06:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:44 2024 by rpki-client on console-fra.rpki-client.org