Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/3YY9wfmKCiM63IkqTSJ14PBKCHo.roa
File: 3YY9wfmKCiM63IkqTSJ14PBKCHo.roa (raw, json)
Hash identifier: fg3l5/oqb4s/voX8llpaIfQYE1kwxdLWLWhEDBF7iuY=
Subject key identifier: DD:86:3D:C1:F9:8A:0A:23:3A:DC:89:2A:4D:22:75:E0:F0:4A:08:7A
Certificate issuer: /CN=62efff88bf665ec86a9e356b79d06ba5940c383c
Certificate serial: 018F81B0474544C07AD7563D7AC6BD43958A
Authority key identifier: 62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/3YY9wfmKCiM63IkqTSJ14PBKCHo.roa
Signing time: Thu 16 May 2024 13:56:04 +0000
ROA not before: Thu 16 May 2024 13:56:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59895
IP address blocks: 80.75.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 14:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:b0:47:45:44:c0:7a:d7:56:3d:7a:c6:bd:43:95:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62efff88bf665ec86a9e356b79d06ba5940c383c
Validity
Not Before: May 16 13:56:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd863dc1f98a0a233adc892a4d2275e0f04a087a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:35:05:f1:4e:a0:2a:41:a0:37:bd:db:9b:
1a:6a:da:70:b7:e1:30:a7:c4:fe:1e:6c:96:08:25:
a4:0a:0c:73:af:7a:b3:fc:02:77:e9:c4:10:70:66:
21:ef:7d:a3:2b:77:7e:11:80:e0:0b:81:b0:90:3a:
0d:14:f5:67:3c:51:ed:bc:bc:b4:c0:e0:b2:21:c1:
2f:4c:82:c4:4f:18:25:20:0c:03:56:02:ff:c3:bf:
e7:2c:cc:29:2f:2a:b8:fd:83:2a:c0:42:f7:58:2f:
41:7a:05:b6:87:0f:77:6c:ec:d1:3e:07:41:54:40:
e0:cb:36:56:13:d7:98:48:de:d2:07:d2:cc:fc:9c:
51:eb:e4:24:69:d1:0d:82:92:56:f8:07:36:6e:dc:
2d:dc:74:ec:2c:a3:84:30:43:42:06:a5:68:2f:26:
bf:4b:a5:9f:fb:6d:0f:83:17:3e:18:48:5f:0e:c0:
86:06:fe:d3:fe:d3:5d:55:82:75:79:6e:83:5e:17:
ff:9a:6d:35:cf:a4:50:14:88:2a:ff:3b:82:64:74:
f7:29:7a:ff:3c:54:ad:3b:0e:e0:c2:f7:c2:68:cd:
37:2c:f7:90:57:f3:81:3f:fc:13:a8:6f:03:26:d1:
22:16:a4:82:51:e4:48:61:7d:cc:c0:78:ca:64:c8:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:86:3D:C1:F9:8A:0A:23:3A:DC:89:2A:4D:22:75:E0:F0:4A:08:7A
X509v3 Authority Key Identifier:
keyid:62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/3YY9wfmKCiM63IkqTSJ14PBKCHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/Yu__iL9mXshqnjVredBrpZQMODw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:15:43:0c:f3:41:ad:27:ee:44:88:f2:30:ff:8d:0c:4e:e8:
b9:69:16:14:55:cb:e4:27:e7:8e:85:68:d8:09:a7:b0:28:21:
38:4c:f5:9c:ad:c5:da:52:47:e6:50:7a:1b:25:f9:b9:c1:7a:
9a:4f:2a:ed:a8:19:07:03:2c:55:f5:f5:d7:b3:32:6c:55:ea:
2b:5d:a0:18:0f:32:7a:84:15:35:a4:15:9a:40:9f:16:c3:10:
c7:a5:b8:bf:be:a9:f3:61:16:8d:44:77:10:50:54:10:8d:46:
be:1b:5e:b5:cc:d4:20:ad:e3:4c:95:d8:1b:8b:84:fc:c6:ba:
04:12:ef:7c:79:e2:29:7f:7f:aa:8b:9d:07:4c:ef:d6:bf:ef:
60:68:c0:5a:6f:56:c2:c6:81:09:e6:c8:18:67:48:68:8e:fb:
6d:1c:8b:d6:a2:d8:d4:cc:ea:bf:fb:43:7e:0d:45:44:47:e3:
ba:d8:9c:43:97:50:db:9c:dc:92:b0:2b:08:57:8a:4c:d1:3d:
f4:0e:f8:18:e0:d6:da:78:18:cc:b4:b8:27:fe:d9:83:cd:8f:
04:87:be:6e:32:75:df:22:2e:21:ab:7c:4e:87:6c:25:94:ec:
7b:e2:c7:5f:92:11:fc:3d:13:67:4d:91:fa:47:f1:fe:0f:5e:
fb:47:ba:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org