Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/yj99TniTvyflXB_w9qjF76YFT1U.roa
File: yj99TniTvyflXB_w9qjF76YFT1U.roa (raw, json)
Hash identifier: gms3ITgaGhhMxROahmZOg2RuEOHmp2IytK7K4x9unew=
Subject key identifier: CA:3F:7D:4E:78:93:BF:27:E5:5C:1F:F0:F6:A8:C5:EF:A6:05:4F:55
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018B3749FEEB6416FFB8ACC667EC4B7797F3
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/yj99TniTvyflXB_w9qjF76YFT1U.roa
Signing time: Mon 16 Oct 2023 07:01:18 +0000
ROA not before: Mon 16 Oct 2023 07:01:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34295
IP address blocks: 46.10.217.0/24 maxlen: 24
62.176.118.0/24 maxlen: 24
87.126.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:49:fe:eb:64:16:ff:b8:ac:c6:67:ec:4b:77:97:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Oct 16 07:01:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca3f7d4e7893bf27e55c1ff0f6a8c5efa6054f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f5:7a:0d:33:00:53:2f:b9:c6:21:42:78:0d:
e1:4c:df:56:87:f5:1c:eb:8e:eb:fd:a0:ad:a6:c6:
8c:f6:e3:dc:8c:42:7a:ca:96:23:c0:6c:52:6e:f1:
69:93:32:72:74:00:b7:47:c9:d7:6a:91:95:06:c2:
28:e8:e3:28:4c:ad:32:e5:9d:a1:4d:cb:ba:91:56:
06:a7:41:79:f8:6b:93:a2:74:9e:88:4a:91:a3:11:
e0:80:f7:15:03:ba:9d:4f:3f:d1:ad:13:eb:0b:ca:
6d:f8:d5:11:69:fb:24:51:a4:3a:00:51:08:5a:2e:
4d:1b:48:5a:e2:42:a7:68:49:4c:c8:e0:a3:2b:3a:
92:59:53:6e:6e:89:66:82:26:07:7f:16:b6:35:df:
2b:ab:7e:c4:5e:d6:6c:b9:95:41:cb:36:7a:72:f3:
9f:b7:1a:6e:bf:0f:5b:98:55:86:a7:64:9d:39:95:
0c:a5:0b:97:7c:df:25:55:30:e2:83:a3:59:84:77:
03:60:50:19:0f:46:5f:4e:32:b1:c8:ec:4a:09:28:
96:cc:ef:6e:d8:07:cc:14:83:ea:22:67:4a:be:ed:
cc:f3:1a:3e:83:53:00:e2:91:6d:b6:98:8b:4f:d4:
25:08:62:e6:bc:04:4a:7a:56:1e:48:4c:f6:bb:7e:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3F:7D:4E:78:93:BF:27:E5:5C:1F:F0:F6:A8:C5:EF:A6:05:4F:55
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/yj99TniTvyflXB_w9qjF76YFT1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.217.0/24
62.176.118.0/24
87.126.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:56:88:d7:fe:a9:f2:c1:07:c4:da:9f:c4:c0:f5:4d:59:51:
e5:9d:63:42:81:9c:d8:d1:ae:ff:6f:45:21:9d:ac:60:02:97:
ab:d8:bd:c7:42:ab:f7:0b:87:60:19:fa:bc:4b:cb:2f:7c:2f:
84:a9:87:2b:43:95:91:e5:fe:53:17:ce:81:73:78:dc:b3:af:
be:c6:ee:fc:c1:7b:86:e9:76:62:e7:e5:50:01:34:74:67:5c:
99:97:e9:a1:32:7b:c3:39:8d:56:63:59:98:c2:0d:20:07:58:
a0:78:4f:7a:fb:c9:69:93:bf:b2:53:35:7c:64:42:26:8b:8c:
d9:66:3f:7b:52:62:53:76:7d:3f:17:75:7b:a1:ef:81:0d:9a:
57:8a:60:33:b7:b1:c5:6d:df:3c:6e:29:aa:d8:7f:8f:fa:28:
bf:a8:ab:d3:5b:65:b1:69:ba:ce:6b:4c:ba:59:d5:06:e0:f9:
69:81:77:78:ab:58:ff:fa:ec:c0:8e:56:ed:97:dc:ce:9d:c6:
b0:b2:db:20:69:f3:80:b7:e8:ab:39:09:4d:01:8a:c6:41:3f:
4e:a7:6f:cd:00:ab:d0:28:d4:62:2e:5a:97:71:3f:01:51:28:
9c:f6:ff:30:0a:ae:89:8f:32:3a:83:17:25:0d:ef:39:d0:7f:
9d:e9:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:54 2024 by rpki-client on console-ams.rpki-client.org