Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/1syllwn_ygewfnHmXrA53scwTaI.roa
File: 1syllwn_ygewfnHmXrA53scwTaI.roa (raw, json)
Hash identifier: dhkVI0NYjMiVCnk1OfIT9rsP8Od3/oKg+1AyVwSF3Qo=
Subject key identifier: D6:CC:A5:97:09:FF:CA:07:B0:7E:71:E6:5E:B0:39:DE:C7:30:4D:A2
Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial: 018572CCD1A9A6B3DBEEA3E62CBB59AB57C2
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/1syllwn_ygewfnHmXrA53scwTaI.roa
Signing time: Mon 02 Jan 2023 14:05:03 +0000
ROA not before: Mon 02 Jan 2023 14:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8660
IP address blocks: 212.48.0.0/19 maxlen: 24
213.209.0.0/18 maxlen: 24
80.93.64.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:d1:a9:a6:b3:db:ee:a3:e6:2c:bb:59:ab:57:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
Validity
Not Before: Jan 2 14:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6cca59709ffca07b07e71e65eb039dec7304da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:0b:31:ee:ff:37:48:9f:3c:41:8f:ea:6d:
e5:e5:c7:81:37:23:68:4f:75:b4:0c:45:51:29:16:
12:35:69:bc:59:dd:c6:e4:66:2a:a2:b5:02:f6:75:
2e:27:6f:f4:02:09:d4:e0:9f:06:12:77:80:ef:89:
9f:9a:e7:ad:b5:b5:b8:e9:28:13:7f:57:68:d6:7a:
0c:1b:30:90:f8:de:fe:00:cb:b7:cc:0c:0e:d5:89:
e3:13:05:51:d3:01:b5:4b:53:3c:2e:09:4c:8e:a0:
f0:d9:9b:5b:77:ee:fc:3d:ab:49:dd:f1:bc:e7:8b:
88:30:ed:5c:b4:32:4e:9f:ce:99:91:6e:85:f1:9e:
0b:e8:4f:fd:90:fb:a5:2c:80:4b:f0:41:21:c0:f6:
41:7f:76:c2:8b:a8:3a:0e:f4:ea:a9:60:27:10:6c:
e9:44:89:f0:16:68:33:d7:4c:f0:70:73:8c:a9:99:
2d:7c:49:81:67:46:9f:22:90:66:8d:e5:62:9f:a4:
8c:90:69:d6:1c:48:17:cf:e6:00:41:81:be:e9:24:
15:a5:1b:04:df:80:8b:32:c9:87:f7:a2:eb:b8:3b:
b1:55:b5:82:22:18:07:65:03:70:d0:74:5d:8d:1d:
82:10:ab:af:9f:ce:1c:58:e0:ff:d5:e4:03:a9:a4:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CC:A5:97:09:FF:CA:07:B0:7E:71:E6:5E:B0:39:DE:C7:30:4D:A2
X509v3 Authority Key Identifier:
keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/1syllwn_ygewfnHmXrA53scwTaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.64.0/20
212.48.0.0/19
213.209.0.0/18
Signature Algorithm: sha256WithRSAEncryption
62:a6:8a:17:71:23:fe:fc:71:87:bf:26:44:ba:e5:64:2f:ad:
bb:b7:c3:cc:96:08:92:fb:42:60:7e:5a:0e:0a:c9:60:d2:c5:
15:c5:1c:1b:20:f4:e9:e3:de:70:f7:35:1d:fe:dd:40:48:a3:
ca:4c:63:fa:44:36:64:0a:39:fb:7c:73:59:91:83:de:22:48:
7c:77:7d:11:62:21:d1:64:1e:a1:eb:7e:02:b5:03:7a:6b:b1:
ad:2b:ad:59:62:e4:b3:fc:bd:03:01:65:06:66:ca:0a:8d:7a:
c8:46:1e:c7:0d:63:9c:a2:02:e8:b9:d4:61:a1:7b:93:b1:29:
c5:25:53:85:9f:46:70:77:57:be:8a:31:2e:9b:2b:c6:d0:1b:
ea:81:2e:ab:39:e7:92:05:dd:98:2e:15:b7:0e:2a:d8:3a:b8:
e9:c0:7a:d1:74:02:39:83:0b:e8:ae:20:ed:c1:c6:df:ca:83:
56:85:62:fe:63:ed:bf:74:33:d3:7c:3b:a7:65:4a:44:b5:9f:
62:77:2b:71:25:54:96:ba:9c:8c:d6:7c:83:d1:bb:42:6c:42:
a0:69:c9:53:36:9c:47:e3:86:7a:9a:ad:0e:79:15:5d:c4:b2:
03:9a:36:1e:fe:11:1c:f6:84:6c:e2:82:ff:82:2f:8a:13:6e:
36:3a:60:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:29 2024 by rpki-client on console-ams.rpki-client.org