Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/YxVXyGruCykg9zzVZUsI6DLOoyk.roa
File: YxVXyGruCykg9zzVZUsI6DLOoyk.roa (raw, json)
Hash identifier: oRHuH3AGhopn8J4ncAGyAeoviPoBQtN0KB9ULYjVqAY=
Subject key identifier: 63:15:57:C8:6A:EE:0B:29:20:F7:3C:D5:65:4B:08:E8:32:CE:A3:29
Certificate issuer: /CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
Certificate serial: 018570D50EFB70E7A233E1EDFDCDA47DB1F2
Authority key identifier: 30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/YxVXyGruCykg9zzVZUsI6DLOoyk.roa
Signing time: Mon 02 Jan 2023 04:54:49 +0000
ROA not before: Mon 02 Jan 2023 04:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204989
IP address blocks: 185.104.160.0/22 maxlen: 24
45.89.168.0/22 maxlen: 24
2a06:3200::/29 maxlen: 32
2a0f:a7c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:0e:fb:70:e7:a2:33:e1:ed:fd:cd:a4:7d:b1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
Validity
Not Before: Jan 2 04:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=631557c86aee0b2920f73cd5654b08e832cea329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:42:8b:71:ae:10:7a:3b:33:7c:9f:76:c5:
e2:1c:25:13:b0:12:d3:fe:9d:b2:77:ce:4f:64:04:
3e:78:ed:f3:84:29:8a:56:bc:90:0c:be:8e:57:92:
75:3e:57:eb:7e:69:fe:1c:a9:45:78:9c:ab:bd:d7:
f4:e3:9e:3b:bc:54:7b:9e:68:a2:64:ba:73:87:b6:
58:3e:ef:76:92:89:bb:53:5b:bb:bc:8a:1c:75:4d:
4d:1a:ea:33:a6:4d:b8:71:b2:8a:3a:51:3a:b8:d6:
72:9a:36:3d:c2:5a:18:27:a8:f6:93:ba:eb:3e:2f:
95:b0:01:c9:12:38:63:ba:04:8d:db:bf:b9:3f:c4:
a1:21:78:82:3a:3b:c4:3f:33:89:9e:e5:15:0d:7a:
cc:57:eb:45:fc:53:14:ef:95:be:4f:3c:6a:98:f8:
94:92:de:84:ff:8e:87:a0:5e:98:a0:eb:49:0f:fa:
b3:6a:f7:c5:82:a9:ca:39:f7:e8:c3:29:91:74:d3:
7e:8a:c6:b4:3d:17:10:ba:6c:ab:e6:39:e1:57:3e:
c5:fa:5a:5a:ec:d8:f8:39:f3:dc:c3:12:44:3b:e4:
8c:7e:c5:07:00:d6:bd:a0:e5:39:2e:36:0e:19:f1:
79:10:8b:f7:c3:ba:8c:f0:fe:1a:86:d5:32:29:eb:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:15:57:C8:6A:EE:0B:29:20:F7:3C:D5:65:4B:08:E8:32:CE:A3:29
X509v3 Authority Key Identifier:
keyid:30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/YxVXyGruCykg9zzVZUsI6DLOoyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.168.0/22
185.104.160.0/22
IPv6:
2a06:3200::/29
2a0f:a7c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:70:65:c2:a2:43:b1:a5:35:6f:a9:f4:db:c1:35:9e:e3:99:
bb:06:f5:7c:50:1d:3c:69:26:68:c2:b6:80:6a:90:c9:92:02:
49:c1:a4:67:a8:4f:a7:f7:7a:c3:6e:64:46:ca:41:09:5d:42:
6d:b6:c3:d8:e2:6c:3c:01:6e:b5:4f:13:0d:96:1a:9a:7f:95:
b2:1c:e4:f3:08:3a:34:9d:d4:ce:f3:54:b5:94:5f:c4:80:0f:
b1:79:cc:01:a9:9f:7d:9b:34:c8:c8:ab:53:33:c9:16:5b:f6:
74:72:c8:50:0d:d8:2a:8b:63:2f:ab:77:8d:95:3c:29:79:91:
c7:9a:1a:1c:a1:5f:b6:e9:b0:30:1b:07:39:ad:e0:ba:7e:4e:
ac:c0:45:dc:c7:fa:81:c1:be:95:53:db:30:8d:34:d7:d6:3b:
01:18:e6:a8:e2:4f:7c:10:79:46:d3:79:b1:67:53:db:35:f4:
66:5f:07:c1:70:fe:70:3a:a8:27:bf:3c:30:8f:ed:d1:35:5d:
be:d2:97:9a:bc:06:90:7c:5b:83:d1:81:58:8a:78:a9:ca:1b:
95:3b:c0:93:e0:cc:cb:a1:8e:b3:79:aa:10:a5:c2:df:ed:3f:
a4:d4:2e:75:3b:af:14:63:be:99:a6:18:2e:dd:0f:1d:5c:c1:
00:fa:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:09 2024 by rpki-client on console-fra.rpki-client.org