Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/YkPpn9CBqKuJQqT2XNsTfhhMUBM.roa
File: YkPpn9CBqKuJQqT2XNsTfhhMUBM.roa (raw, json)
Hash identifier: pe3jCtg5rRnMvwneRCCpuzdGQFlZkKNtC2I0bhxq3To=
Subject key identifier: 62:43:E9:9F:D0:81:A8:AB:89:42:A4:F6:5C:DB:13:7E:18:4C:50:13
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 0185729ECDDB198C09B79958260BD3E73EC7
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/YkPpn9CBqKuJQqT2XNsTfhhMUBM.roa
Signing time: Mon 02 Jan 2023 13:14:47 +0000
ROA not before: Mon 02 Jan 2023 13:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208168
IP address blocks: 45.156.152.0/22 maxlen: 24
2a0f:2480::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:cd:db:19:8c:09:b7:99:58:26:0b:d3:e7:3e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Jan 2 13:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6243e99fd081a8ab8942a4f65cdb137e184c5013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:58:2c:d3:c7:47:e3:40:3a:05:b5:48:21:
25:ef:a4:6b:a9:91:a1:7b:d0:cc:2e:43:a3:9b:2e:
05:1d:a4:ae:ec:6b:fe:26:e7:3f:56:2e:0f:32:2e:
f2:57:96:bc:6c:9f:86:6a:a7:24:1b:aa:a9:7d:c2:
c0:d9:fa:ca:f8:fb:19:54:82:4f:3d:c8:b9:e2:a6:
d5:ac:77:07:dd:bd:38:16:9b:40:69:9d:9e:92:d9:
d1:2b:60:f5:d2:93:a0:ca:f0:89:7e:f9:4d:bb:28:
46:c4:41:d4:49:ac:f7:d7:68:c1:1c:ae:9e:b7:4e:
e9:12:5c:33:3f:06:1f:ab:14:02:37:0d:e6:c8:4a:
b5:1c:b5:0a:52:51:de:dc:33:55:f6:87:7a:5a:88:
9a:45:5a:2a:cb:1c:2a:fa:d5:aa:c6:02:c9:5e:e7:
a8:70:f0:93:18:95:76:3e:7a:08:a2:fd:be:8c:7c:
42:b4:f8:df:31:42:37:5b:d3:9a:5e:16:4f:8b:82:
1f:c6:13:e9:89:35:13:02:0b:5f:4f:23:fb:a7:30:
f5:e9:7b:19:e9:c3:54:3c:ec:af:2c:ee:cd:78:7e:
a9:6f:3f:f3:3f:6e:45:82:78:62:93:ba:b0:05:1b:
83:8b:c4:0a:31:8b:c5:b8:7a:22:4c:82:4a:14:9d:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:43:E9:9F:D0:81:A8:AB:89:42:A4:F6:5C:DB:13:7E:18:4C:50:13
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/YkPpn9CBqKuJQqT2XNsTfhhMUBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.152.0/22
IPv6:
2a0f:2480::/29
Signature Algorithm: sha256WithRSAEncryption
3d:f2:22:ed:fa:1c:3c:a5:fe:d8:5d:9e:72:ac:0f:a5:37:a3:
d5:dc:b8:d3:e7:dd:a0:a3:94:c9:76:a2:a6:90:aa:a1:47:b6:
51:c8:7f:05:8f:b7:5d:41:0e:84:fe:6c:56:6d:6c:a3:6c:1a:
37:f2:ec:8f:dc:02:36:6a:2e:af:a9:e3:a7:61:d0:49:de:4a:
34:6b:00:97:06:75:d0:ba:df:c5:f6:8c:74:7e:b7:a8:5f:2b:
cd:74:54:38:62:38:28:b6:1a:e4:0a:df:b5:ec:d2:3e:d6:39:
4b:be:bb:b8:40:16:e1:31:85:a8:40:47:6d:9f:a5:38:18:9f:
2f:cc:29:ae:8a:70:a7:79:f1:a6:4d:d9:cd:67:ea:63:ea:33:
1d:0c:c1:8c:43:13:6b:be:90:34:62:e7:ff:8d:60:da:7e:ff:
f3:49:60:dd:d1:a1:2d:11:95:8c:59:22:e5:5a:cf:a7:7e:30:
63:f1:f7:81:d9:57:c9:35:27:77:95:e0:4c:78:54:bb:4b:6f:
3d:8a:bd:f8:1f:03:11:e5:e4:92:b8:dd:a5:23:16:cf:56:e9:
9e:68:8b:82:8c:cf:d1:fa:5e:73:76:e8:48:25:4d:4b:74:2a:
c4:6c:9b:7d:74:41:18:43:d7:65:ed:18:b6:f4:30:f9:1d:87:
ed:05:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org