Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yf8K9URkyF0zGVpdism6aOXCZnw.roa
File: yf8K9URkyF0zGVpdism6aOXCZnw.roa (raw, json)
Hash identifier: bP6NwhLy46xaWAIlNFOxP2+RIPKsoMC6HmDj2et8OHU=
Subject key identifier: C9:FF:0A:F5:44:64:C8:5D:33:19:5A:5D:8A:C9:BA:68:E5:C2:66:7C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0187DDDF7AC36AFBF362E3E56D5F3E9F9074
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yf8K9URkyF0zGVpdism6aOXCZnw.roa
Signing time: Tue 02 May 2023 19:10:23 +0000
ROA not before: Tue 02 May 2023 19:10:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 45.9.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dd:df:7a:c3:6a:fb:f3:62:e3:e5:6d:5f:3e:9f:90:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 2 19:10:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9ff0af54464c85d33195a5d8ac9ba68e5c2667c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b8:f0:71:97:a4:87:b7:90:0c:0d:47:2d:ea:
9e:ea:43:f7:99:d4:06:35:f5:eb:6d:f8:9e:2d:db:
a8:37:b8:26:46:28:9e:c0:af:30:28:90:9d:39:2c:
86:c0:9f:e9:55:20:ee:fa:d6:ad:b5:df:be:ae:1c:
29:ca:b1:e8:09:ff:b7:42:9b:27:2b:d5:89:bf:0f:
e4:37:cf:f3:cf:fd:d2:05:f0:49:89:09:75:a6:8e:
d9:3f:b4:9d:6e:1f:59:a3:96:0c:d1:92:30:28:f9:
5a:c9:10:15:4f:4e:57:57:66:a8:7c:0e:15:42:55:
c2:d2:1f:2f:a3:ec:04:ed:92:0d:e2:1a:4f:d8:30:
c1:c7:a8:5c:f8:79:9d:46:9a:09:24:aa:e2:71:8e:
11:38:8d:63:0a:48:7a:e6:67:f1:c1:14:be:ce:7a:
4d:d2:8b:1a:94:b3:35:92:f5:16:74:e9:1d:c2:9d:
8e:32:a6:b5:d1:5d:f6:39:6c:b2:d0:a8:9f:dc:2e:
eb:67:77:f2:c8:42:32:d1:0d:17:44:51:b4:1e:e3:
19:20:bb:a2:3a:c2:ff:71:0f:96:f7:e9:d2:97:6e:
69:dc:3e:b6:d5:46:d8:4a:37:0f:2d:70:c7:a3:2b:
08:8e:85:66:37:05:2b:d7:f2:85:fa:20:a5:e8:e1:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FF:0A:F5:44:64:C8:5D:33:19:5A:5D:8A:C9:BA:68:E5:C2:66:7C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yf8K9URkyF0zGVpdism6aOXCZnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.5.0/24
Signature Algorithm: sha256WithRSAEncryption
46:0c:7d:70:e0:cb:85:9c:88:de:7f:48:dd:0d:d9:0b:a0:15:
a1:69:84:d3:9b:77:6a:ca:c8:62:28:2b:64:db:4e:63:f1:ef:
ea:4d:e2:a1:f3:2b:14:20:56:dd:e5:86:a1:47:74:39:ed:c6:
05:82:84:5a:29:b0:b3:4b:0f:0f:d1:e2:fa:94:7c:bc:0e:74:
65:5e:7e:25:28:4e:dc:4d:c6:41:46:c4:df:af:7a:e4:48:b4:
e0:fb:e4:19:91:6c:91:31:87:40:77:79:dc:ed:cc:b8:b2:1e:
fd:16:3b:af:ab:8f:da:f1:12:2d:9f:03:8e:04:57:02:fb:90:
3f:c4:3a:f0:b0:e4:7b:05:1e:18:35:cf:ed:5a:d9:b9:31:63:
e5:34:fe:f9:7b:e7:6f:6b:ba:8f:60:35:fe:30:f5:44:4d:ca:
6c:a8:73:86:f1:87:64:d8:87:a6:14:66:54:f4:9c:61:48:55:
8b:1d:ba:dd:29:50:c9:1c:a4:e0:3d:77:f4:fd:10:9e:da:18:
d4:da:da:a4:bb:27:3c:b1:9e:4e:33:c5:68:99:e9:02:79:3f:
c3:87:27:9f:fc:26:15:e6:7b:37:0a:3c:6f:c8:10:64:64:d7:
a1:28:af:8a:96:c0:72:fd:eb:92:59:b1:3c:46:19:bd:a0:70:
33:eb:f6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:17 2024 by rpki-client on console-fra.rpki-client.org