Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/y6xkp8Rm_jo3yKhmATsC8pB80GY.roa
File: y6xkp8Rm_jo3yKhmATsC8pB80GY.roa (raw, json)
Hash identifier: Wf/fJyQFqpR///2QAhxOTtOAaSoSdz7Z1YPOQKZEnew=
Subject key identifier: CB:AC:64:A7:C4:66:FE:3A:37:C8:A8:66:01:3B:02:F2:90:7C:D0:66
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01896498F1237B35FAE21D0DB161979DF542
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/y6xkp8Rm_jo3yKhmATsC8pB80GY.roa
Signing time: Mon 17 Jul 2023 16:04:52 +0000
ROA not before: Mon 17 Jul 2023 16:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 213.226.113.0/24 maxlen: 24
194.93.1.0/24 maxlen: 24
77.83.81.0/24 maxlen: 24
109.196.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:98:f1:23:7b:35:fa:e2:1d:0d:b1:61:97:9d:f5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 17 16:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbac64a7c466fe3a37c8a866013b02f2907cd066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8d:f5:06:82:5f:05:a2:06:8c:4c:5c:72:4b:
2e:ba:19:87:3b:7c:36:b1:4a:f7:2a:74:08:e5:31:
c2:4f:9c:cb:17:3f:82:0e:60:cf:bf:7a:0f:00:b1:
1c:87:ad:8e:25:d7:64:b3:22:fb:2b:88:0f:5e:ca:
83:e8:4c:d1:5a:6e:10:cf:06:f0:68:a1:67:dd:6c:
b0:15:eb:6d:13:49:a9:88:72:ce:32:a4:9b:f3:3e:
2b:4d:33:44:4a:70:eb:b8:88:02:47:95:96:48:62:
35:02:d3:a9:72:f2:b2:91:b3:68:b3:b4:5f:a1:1f:
d5:87:6a:74:88:8c:0f:09:f9:c6:b9:67:b0:4f:a8:
c4:27:4d:f5:a1:a8:d3:70:09:52:69:00:0e:e0:58:
8c:78:33:73:72:fb:1d:1e:8e:5c:e0:90:8c:a8:ff:
10:d5:7e:48:72:4b:30:9d:60:27:67:ac:93:3e:20:
03:fd:1a:c6:08:cc:19:49:61:1e:b2:34:b3:42:79:
91:ec:4e:43:11:e5:a5:a0:fc:33:0e:38:e8:c1:dc:
48:48:59:16:51:c4:21:c0:b3:5e:c0:f3:06:87:4d:
03:cb:b3:d1:40:08:3e:68:6a:8d:9d:73:4c:10:de:
d7:da:fc:7a:e1:76:9e:d3:37:0c:00:c1:59:02:97:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AC:64:A7:C4:66:FE:3A:37:C8:A8:66:01:3B:02:F2:90:7C:D0:66
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/y6xkp8Rm_jo3yKhmATsC8pB80GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.81.0/24
109.196.165.0/24
194.93.1.0/24
213.226.113.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8a:86:d8:a2:e8:b4:3f:78:cd:0d:20:9d:fb:ba:cd:e1:d3:
52:68:32:1a:3f:f7:00:a1:e2:87:e9:08:51:1b:12:ab:37:5a:
69:d2:ba:44:30:eb:e8:4f:16:69:43:3b:16:c1:11:57:44:cd:
80:a6:0e:62:02:b2:f9:04:f7:19:63:d9:f3:d0:44:80:9e:c8:
94:f7:01:ab:ca:69:27:10:c0:8c:95:91:7e:53:a8:a9:58:e0:
2a:38:58:9f:67:72:83:7c:10:3d:e9:d3:ef:eb:6d:91:1c:d0:
b7:fc:bb:e0:3c:0a:2f:71:cb:0b:f2:59:c1:b3:3f:02:62:1f:
56:56:13:b2:1a:bf:8c:ba:b0:2d:48:08:10:b2:fa:32:90:a9:
09:2c:ac:78:eb:24:75:22:ed:82:e1:1d:80:ce:1c:52:ff:18:
54:63:8d:e1:03:c5:a2:57:99:38:01:a9:19:72:08:b9:64:bc:
34:9e:eb:65:27:ae:6d:49:71:9b:7a:8a:48:72:9c:b4:6c:19:
3d:35:0a:b9:08:9b:49:e3:e9:0c:1a:cd:24:70:52:66:45:55:
3d:f9:9b:f8:ae:4b:44:8c:49:c0:7b:f8:b4:eb:c8:93:cc:8e:
52:25:9e:4d:1e:df:e9:1f:d5:a0:c6:07:b9:71:3c:63:ef:5e:
26:b1:f7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:41 2024 by rpki-client on console-ams.rpki-client.org