Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/Ynjy1M9EFobvbOCByRocSTt8cFs.roa
File: Ynjy1M9EFobvbOCByRocSTt8cFs.roa (raw, json)
Hash identifier: 5+gyNXpf01R7UTI2J/JHU7xSkw2M/6iYTYZrombGkt8=
Subject key identifier: 62:78:F2:D4:CF:44:16:86:EF:6C:E0:81:C9:1A:1C:49:3B:7C:70:5B
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 01856B8A2700619E3A30CD043C402A39A1DA
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/Ynjy1M9EFobvbOCByRocSTt8cFs.roa
Signing time: Sun 01 Jan 2023 04:14:54 +0000
ROA not before: Sun 01 Jan 2023 04:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9051
IP address blocks: 93.185.80.0/20 maxlen: 24
185.125.148.0/22 maxlen: 24
2a06:b8c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:27:00:61:9e:3a:30:cd:04:3c:40:2a:39:a1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jan 1 04:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6278f2d4cf441686ef6ce081c91a1c493b7c705b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:e3:6c:7c:41:b6:55:97:6c:d4:63:e2:53:
76:7c:15:86:92:ce:07:ed:f1:96:5d:70:ab:29:16:
8a:1a:59:4e:06:4b:92:14:e7:d0:91:25:5e:f6:7e:
82:40:46:2e:ea:78:13:c4:cb:46:fb:ff:54:cf:eb:
19:d1:6b:3d:8c:f5:b1:4b:69:bb:d6:86:c4:0b:70:
57:4f:f5:39:94:e0:e0:1e:6c:3a:dc:ec:f3:36:fc:
f0:13:9f:d7:b7:4b:ae:e7:5a:7f:f2:dc:7f:d8:1f:
17:28:86:0e:ee:6c:a0:05:8b:eb:1d:d0:ef:53:3e:
ed:bf:4d:a6:53:5f:cc:88:1f:f5:00:da:24:ce:14:
22:d9:f7:43:17:80:a1:6d:30:3e:6e:1b:12:37:b9:
14:7b:e8:a0:ed:bb:2d:15:41:a9:c1:76:36:be:9e:
40:d7:c2:3d:31:b1:4f:57:6e:1f:93:a4:62:c3:f4:
f6:f6:0a:50:73:79:26:17:2a:e6:3c:d5:67:a3:65:
5d:12:bb:ab:ee:33:1e:31:b7:44:c5:f2:4a:6f:6f:
71:c8:0c:87:75:6d:6e:01:8b:db:27:61:94:cb:13:
34:d6:74:97:96:d7:a9:1b:4d:f2:cc:ef:86:38:05:
c5:f9:9a:8a:65:4d:1b:73:91:58:e3:b4:b1:29:c1:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:78:F2:D4:CF:44:16:86:EF:6C:E0:81:C9:1A:1C:49:3B:7C:70:5B
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/Ynjy1M9EFobvbOCByRocSTt8cFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.80.0/20
185.125.148.0/22
IPv6:
2a06:b8c0::/29
Signature Algorithm: sha256WithRSAEncryption
54:9e:4c:63:e3:ae:20:3b:78:99:c0:e6:42:52:b2:3c:40:84:
a9:0d:8b:da:c9:3d:03:44:12:5d:f5:dc:76:0e:6f:64:c6:ca:
b7:c0:4c:1b:76:7c:d1:2f:bf:c5:48:59:b7:ec:08:16:67:89:
26:36:4c:f8:56:41:7d:e5:5a:3f:e4:6b:f9:66:f5:9c:a2:a6:
da:44:15:e7:9d:33:fc:ad:ae:7f:5d:13:7a:b2:0f:66:7e:e0:
d8:f1:36:c7:e5:d6:11:d1:af:7d:30:b0:6e:ca:bd:f6:2c:d2:
2d:e5:73:08:e2:68:9a:a9:7b:89:b1:8c:88:7d:ae:78:97:20:
d1:98:7b:ec:df:dd:6c:28:14:c4:82:e4:37:4f:67:db:42:3f:
0b:e2:6f:af:ca:78:fb:24:07:f3:5e:cd:75:17:20:e0:4d:5e:
79:96:45:95:bf:0b:5d:5e:42:8c:d1:7e:d0:48:20:26:9b:bc:
74:0c:6c:d1:c8:e5:0c:2b:eb:5e:30:02:86:b1:a8:99:13:09:
00:2a:d2:ff:13:1a:23:c6:00:67:d8:5a:60:88:c1:43:0b:4f:
d2:98:2a:ba:2a:21:8c:50:ae:72:6e:55:44:7f:e9:22:41:96:
dc:f1:22:9b:6c:88:7c:c8:c5:c3:6d:fc:b4:fa:ee:bd:4f:74:
7c:42:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org