Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/hyYB_RoREolHkzyN-5m-Vx_k8b8.roa
File: hyYB_RoREolHkzyN-5m-Vx_k8b8.roa (raw, json)
Hash identifier: I3yevJ8xP6YvrppXbmtA/uxAP9RDCf68GqGl7uYH/Kg=
Subject key identifier: 87:26:01:FD:1A:11:12:89:47:93:3C:8D:FB:99:BE:57:1F:E4:F1:BF
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01899325FD06E90A75C7B076B1DFD9ADE5E7
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/hyYB_RoREolHkzyN-5m-Vx_k8b8.roa
Signing time: Wed 26 Jul 2023 17:01:27 +0000
ROA not before: Wed 26 Jul 2023 17:01:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 178.253.40.0/22 maxlen: 22
83.147.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 20 Aug 2023 08:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:93:25:fd:06:e9:0a:75:c7:b0:76:b1:df:d9:ad:e5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 26 17:01:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=872601fd1a11128947933c8dfb99be571fe4f1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c3:79:cd:61:61:4c:82:d0:af:f4:16:92:0d:
c7:25:fb:5e:16:35:ef:01:ae:76:ac:2f:96:fd:dc:
d3:72:8e:bc:e8:63:3a:28:1a:48:54:2b:17:73:30:
42:d9:18:a5:63:0c:64:98:bb:e2:18:23:10:7f:a0:
85:21:36:e6:23:82:0a:d1:f5:02:1f:a2:cb:74:77:
fc:bf:3a:01:bc:25:19:c8:0f:17:c7:c6:94:df:7e:
0e:3e:f0:a9:34:67:e5:db:90:13:d7:6f:15:4a:2d:
e1:c4:5b:c1:0a:25:fc:89:00:a4:18:cd:fc:a6:52:
ed:d8:5c:28:12:22:17:cd:72:26:01:21:4c:57:e3:
17:00:03:71:ea:44:3a:36:55:76:41:3a:48:42:1e:
b1:9c:0a:e2:f9:38:65:23:03:f7:3f:80:9d:b3:d8:
e7:34:28:e5:66:94:96:8b:3e:69:91:03:1c:4a:20:
e1:2e:2e:06:7c:25:61:8d:aa:89:3b:46:8b:79:63:
1c:72:51:1d:57:69:45:31:f5:3b:75:6b:f6:aa:08:
c6:7c:f0:01:13:64:b1:08:c3:e5:e3:b9:15:7f:8e:
f3:d0:92:88:b7:9c:84:f6:e8:6d:df:6e:db:0d:61:
61:31:42:e8:de:b4:9a:10:1a:95:97:0c:24:42:52:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:26:01:FD:1A:11:12:89:47:93:3C:8D:FB:99:BE:57:1F:E4:F1:BF
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/hyYB_RoREolHkzyN-5m-Vx_k8b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.240.0/22
178.253.40.0/22
Signature Algorithm: sha256WithRSAEncryption
32:a0:07:66:f1:03:fa:ef:4d:1f:ea:27:7b:9d:6c:fa:bd:83:
fe:b5:d6:12:9f:f1:60:88:8d:31:d3:52:d3:66:3a:72:e9:b3:
2d:b1:fb:df:12:35:ae:03:1e:56:7e:15:8f:7c:ab:ba:c6:63:
9c:74:20:c3:ac:7c:79:aa:ea:55:e1:d7:63:9d:5a:a8:6d:8d:
c5:b7:5c:d2:4e:a6:0e:34:16:1d:c9:5b:75:67:de:b2:b7:e8:
b5:d3:92:0b:37:49:8c:20:7d:3c:1f:88:8e:cb:63:b8:95:c8:
a6:b6:3a:de:53:ad:56:a7:f7:d1:be:ef:83:16:f2:dc:d8:3d:
5e:28:4c:af:a7:6f:b3:e5:3f:6d:04:73:6a:f6:ff:90:df:3e:
30:0c:29:2c:04:9f:7c:cb:ad:a5:a6:81:74:21:16:0f:d8:2b:
71:cb:24:92:2c:49:0b:be:3e:82:d6:bf:98:6e:26:a9:cc:b8:
80:9a:9b:05:08:2a:f7:f7:b1:3b:65:6c:00:4c:7b:52:43:87:
c6:9a:42:3d:cc:3a:fc:61:69:ac:88:b7:3c:3f:28:c0:e3:9f:
54:c2:ae:39:07:09:09:f9:ac:72:57:05:d2:c1:93:44:45:9d:
f5:20:fe:92:39:3a:30:63:48:93:20:4c:0d:20:ee:0b:5f:ec:
2b:b7:58:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org