Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/e-__1QtHTF92SG4-BXq_kNcNZj0.roa
File: e-__1QtHTF92SG4-BXq_kNcNZj0.roa (raw, json)
Hash identifier: sX+Dy3uwY9cJBBOFG9kIdcVP7PxW0mjDvxexhgZGDII=
Subject key identifier: 7B:EF:FF:D5:0B:47:4C:5F:76:48:6E:3E:05:7A:BF:90:D7:0D:66:3D
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 0185704BCA3A04869E1B9205A4BBDC11EA38
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/e-__1QtHTF92SG4-BXq_kNcNZj0.roa
Signing time: Mon 02 Jan 2023 02:24:53 +0000
ROA not before: Mon 02 Jan 2023 02:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12180
IP address blocks: 217.17.144.0/20 maxlen: 20
81.91.112.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:ca:3a:04:86:9e:1b:92:05:a4:bb:dc:11:ea:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Jan 2 02:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7befffd50b474c5f76486e3e057abf90d70d663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:06:8f:49:a2:7c:2b:a5:ab:ab:cd:71:62:67:
b4:e9:af:09:70:8a:4f:5c:bd:40:6a:d6:6a:ed:5f:
30:26:f3:ab:95:33:31:38:7b:c6:fc:fd:3f:e7:e5:
cd:43:35:7c:f1:d9:7e:c4:68:28:ae:0e:c9:4d:3c:
47:bf:36:ed:bc:cd:8f:51:5b:e8:bd:1f:bb:df:23:
71:31:02:b2:45:9d:84:18:43:4b:05:42:e0:8e:72:
55:03:9c:6a:0c:e8:da:aa:d8:85:43:93:51:fc:d1:
ba:29:fc:4c:88:d3:c7:ce:c9:23:0d:f3:8d:e3:e2:
2a:d4:16:f6:6e:e1:e8:fd:b0:e3:49:90:27:f5:9b:
1c:0d:c5:61:88:37:b7:6f:d7:2d:75:00:37:6b:39:
56:c6:ed:15:c5:2b:11:e6:25:3e:ac:11:15:e7:af:
89:8b:4a:26:86:10:6c:d4:5d:4b:57:9e:93:38:86:
32:08:e1:79:14:1a:14:88:56:6f:34:fb:eb:97:0b:
ca:15:5e:68:fe:a5:66:ff:9a:35:97:fa:70:a4:c0:
09:44:0c:86:bb:3c:27:13:32:f8:2a:41:96:4c:35:
10:ea:b4:6e:47:98:bc:e4:c4:11:57:3e:a6:c6:12:
50:ff:bb:a3:28:eb:57:78:38:9f:82:30:a5:e7:24:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EF:FF:D5:0B:47:4C:5F:76:48:6E:3E:05:7A:BF:90:D7:0D:66:3D
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/e-__1QtHTF92SG4-BXq_kNcNZj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.112.0/20
217.17.144.0/20
Signature Algorithm: sha256WithRSAEncryption
49:d7:3c:d5:62:50:f4:19:61:6f:56:33:9c:bd:a3:02:a9:5e:
2e:80:27:93:37:a8:bb:8c:05:2c:50:12:1b:df:ee:99:0d:60:
5b:29:c1:30:51:a8:66:64:d6:26:14:ff:66:30:29:30:e8:7b:
b9:00:af:d6:66:52:5d:b7:f4:bf:d6:d1:dc:a1:33:d4:e2:bc:
20:35:be:f1:c5:08:35:66:ed:21:3e:dd:a8:6c:06:bc:61:7a:
74:9e:7e:8b:46:dd:e3:02:2d:7e:49:fa:ec:2a:79:57:69:95:
3a:4c:e0:fd:a1:4e:b0:28:ba:b6:e6:21:be:30:59:22:e8:dd:
d7:f2:83:1b:ee:73:c3:08:c8:67:a1:d8:19:1e:72:77:bf:76:
64:e8:b6:79:7a:ae:d8:be:22:7f:fd:67:c3:a1:5a:b6:e4:4d:
9a:24:51:6c:5e:d8:2e:fe:1a:e6:b9:3b:30:c3:ce:43:e8:71:
a8:e3:68:fd:eb:67:f0:d3:3c:36:b2:f2:fa:8e:fe:56:52:d9:
20:c1:39:ab:ed:ea:5e:e1:ee:a9:e9:5f:bc:fa:69:db:f0:ad:
af:ac:0d:64:bd:eb:f6:01:95:3c:fd:ed:b3:84:23:b1:3b:1b:
f9:5e:5a:59:87:9d:8c:44:0e:95:78:4f:d6:72:2a:ad:62:36:
0f:63:86:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:27 2024 by rpki-client on console-fra.rpki-client.org