Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/YE0o9_XVqj0iDvLd9SA3xNC7XXo.roa
File: YE0o9_XVqj0iDvLd9SA3xNC7XXo.roa (raw, json)
Hash identifier: T5N+ZhFNiPLXyrbtPMvYudAPyZOaNKMCj6OoIdzGNyE=
Subject key identifier: 60:4D:28:F7:F5:D5:AA:3D:22:0E:F2:DD:F5:20:37:C4:D0:BB:5D:7A
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 018570E77001F238FE7D767B1AE7EC3F63B5
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/YE0o9_XVqj0iDvLd9SA3xNC7XXo.roa
Signing time: Mon 02 Jan 2023 05:14:53 +0000
ROA not before: Mon 02 Jan 2023 05:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 553
IP address blocks: 134.108.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:70:01:f2:38:fe:7d:76:7b:1a:e7:ec:3f:63:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Jan 2 05:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=604d28f7f5d5aa3d220ef2ddf52037c4d0bb5d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:f1:53:59:d9:f6:4c:4a:ab:bb:96:dd:b9:
0b:3c:41:f6:96:a3:a2:37:1c:6e:f0:56:d6:3b:2f:
3d:6b:81:e9:95:d6:cd:24:6b:00:47:3a:53:86:60:
06:46:e9:d1:9d:3a:d1:94:7e:05:77:3e:77:40:bc:
ee:47:29:27:05:e9:e6:4e:08:75:22:66:04:5c:e3:
e0:36:0b:c9:f0:30:62:d1:1d:14:02:38:46:95:5e:
13:73:f3:36:3e:c8:b4:2f:85:0b:a3:1a:f8:0b:88:
60:40:ee:ad:69:99:6f:9e:85:95:10:08:75:c5:a3:
90:e5:3e:f2:e6:03:23:41:c0:d9:62:39:2c:51:59:
1c:a9:05:cf:44:84:13:4e:1e:60:5c:98:a6:30:8c:
22:0d:2b:59:26:0a:f0:9c:55:e8:bd:28:96:fc:00:
f0:02:3a:07:92:00:23:84:45:e2:64:be:c1:6f:c1:
eb:b2:47:4b:4c:dd:37:79:b7:63:5a:af:2e:08:a8:
8f:05:2f:cd:c7:8c:67:db:ab:0d:0e:e2:84:1d:b2:
42:f0:73:75:e4:1e:73:d7:92:93:7a:bd:2e:64:60:
f0:d3:0a:60:2a:78:56:54:03:18:df:b9:4d:9e:64:
20:5c:4f:03:5f:63:a2:0c:3e:fd:f8:8b:3f:be:73:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4D:28:F7:F5:D5:AA:3D:22:0E:F2:DD:F5:20:37:C4:D0:BB:5D:7A
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/YE0o9_XVqj0iDvLd9SA3xNC7XXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:7c:7b:33:ae:6e:4a:e2:bd:1f:c3:9e:59:da:5f:e9:fd:35:
79:75:d3:dc:15:b5:27:68:ec:8d:25:12:05:79:9a:79:be:f6:
25:d8:71:30:17:a9:03:c6:36:ef:54:df:0f:15:08:82:dd:96:
fa:32:95:1a:c9:2d:a1:0a:97:e4:8c:ca:7f:11:f0:f7:0b:ab:
25:ad:62:a0:01:40:d6:96:04:59:0c:17:42:dc:f9:2f:5f:24:
fa:34:11:ba:6d:1f:d7:8f:74:ba:51:fb:86:28:3a:08:4b:dd:
58:f1:69:34:30:38:ed:c4:26:b2:27:97:7b:a3:92:a9:88:13:
42:3a:8c:b0:52:36:06:2e:20:0a:5f:da:32:ef:5c:bb:23:d4:
4a:c0:1f:b9:50:8a:64:d3:9f:a3:34:7c:80:fc:14:e7:7a:62:
0f:5d:89:9c:50:ca:9b:1f:45:d5:73:27:b2:fe:9c:2c:41:76:
a9:2e:1a:b4:b8:1d:f9:1a:19:10:5b:c3:a3:1d:59:1e:a2:c6:
62:62:39:83:f3:9c:a9:36:28:b3:8e:2f:0f:c3:94:2d:2a:43:
ab:9b:4c:c5:ab:61:08:32:25:da:51:87:08:22:8a:56:73:26:
22:c2:8f:1a:56:26:23:d7:ec:39:b8:5f:28:00:ff:cc:88:bd:
1c:db:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:02 2024 by rpki-client on console-ams.rpki-client.org