Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yQQG-cTFdwVYXFI35RWjLjQ8FE0.roa
File: yQQG-cTFdwVYXFI35RWjLjQ8FE0.roa (raw, json)
Hash identifier: d5fUP8g/wJhCxbqN372NE691OafHgpUjf5vNkyEmgYI=
Subject key identifier: C9:04:06:F9:C4:C5:77:05:58:5C:52:37:E5:15:A3:2E:34:3C:14:4D
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 018571D799BF49AD45159FC9FDD5FCBE805D
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yQQG-cTFdwVYXFI35RWjLjQ8FE0.roa
Signing time: Mon 02 Jan 2023 09:37:13 +0000
ROA not before: Mon 02 Jan 2023 09:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51661
IP address blocks: 94.124.106.192/29 maxlen: 29
185.160.20.0/25 maxlen: 25
185.160.20.0/24 maxlen: 24
185.160.23.0/24 maxlen: 24
185.160.21.0/24 maxlen: 24
2a02:1d0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 19 Sep 2023 13:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:99:bf:49:ad:45:15:9f:c9:fd:d5:fc:be:80:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Jan 2 09:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c90406f9c4c57705585c5237e515a32e343c144d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ce:69:52:80:dc:6c:d6:95:6f:9f:3c:98:8d:
39:db:a0:1a:fe:2f:e0:8b:4c:b7:a8:63:83:0d:4b:
44:cb:b4:91:b0:aa:f3:fe:c8:a0:a9:69:8d:b0:a8:
4e:35:d8:dc:8a:36:7e:f5:13:a0:6a:a0:72:9b:54:
0d:36:e5:16:82:d6:c5:72:e1:ab:54:1c:c6:dd:80:
f5:2e:94:c8:2f:4a:1d:a2:7a:c4:ba:f0:26:a0:d8:
78:33:55:9d:22:39:6d:3f:23:10:83:50:68:84:48:
52:33:9b:c3:20:d5:97:ed:d1:56:c7:eb:47:4d:97:
73:9d:87:4d:bb:cd:64:de:e1:bb:0b:1d:42:92:d7:
4a:85:53:04:df:2a:d2:d4:a3:ff:3e:97:81:4f:ab:
75:78:af:20:d0:b5:ba:13:88:25:43:f5:c2:d9:20:
49:b6:ba:59:d7:0b:91:fc:8d:66:20:a4:f7:68:9e:
77:24:73:92:ab:88:90:d7:eb:5f:00:a1:11:74:11:
42:46:5a:5b:e2:33:9d:41:45:53:74:4b:59:34:0f:
f4:3f:2a:22:2b:73:ff:e9:49:4d:7c:eb:d0:9e:d6:
82:81:1f:ed:09:fa:20:80:3c:be:c3:ea:55:65:4c:
94:54:13:18:b0:27:13:7f:63:1f:38:26:f0:b6:9c:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:04:06:F9:C4:C5:77:05:58:5C:52:37:E5:15:A3:2E:34:3C:14:4D
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yQQG-cTFdwVYXFI35RWjLjQ8FE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.106.192/29
185.160.20.0/23
185.160.23.0/24
IPv6:
2a02:1d0::/32
Signature Algorithm: sha256WithRSAEncryption
31:06:eb:30:b0:3a:fa:15:80:5b:5e:30:30:3d:02:62:53:f0:
89:3c:48:48:2a:a3:37:1f:69:e4:b5:19:fa:e7:32:7c:b4:69:
99:d7:28:83:d1:f8:d6:11:3d:e8:5b:62:6c:21:70:f3:ad:de:
e4:d4:55:79:09:71:17:d8:26:41:31:52:3c:cb:ab:96:a3:3c:
04:f5:e5:85:dd:6f:1b:bd:45:6f:07:72:e8:36:88:fd:3b:23:
ea:b2:6e:b3:e7:04:84:1d:89:b5:83:9d:5d:f9:a3:5c:98:08:
2a:0c:ac:56:06:92:f5:bc:1e:3a:9d:98:40:81:8d:0a:a6:47:
43:95:8b:fa:ff:a5:13:91:46:9f:07:d1:bd:16:a3:1e:3e:f1:
db:19:67:dd:13:f9:a6:49:48:ad:bb:33:66:26:d1:9b:f0:72:
eb:f1:b0:5d:cc:16:7d:a5:28:ab:f2:6c:9a:99:54:fe:fe:01:
40:53:29:bf:ab:fb:b1:e1:d8:9c:36:ce:5d:74:23:ed:6e:3f:
4e:c2:2f:3e:e8:5d:a2:68:e4:1a:ff:e1:f4:10:57:06:70:dd:
c8:fc:49:9b:f8:01:e4:54:8b:3c:d1:07:28:e1:1e:ec:b9:cf:
fc:4f:f4:aa:fd:a6:d7:7a:c4:fe:ba:c1:8d:7c:35:8b:6e:13:
d7:2e:65:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:14 2024 by rpki-client on console-fra.rpki-client.org