Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/yYFiPPQr54Uk4ofFHl33_ZEZA6Y.roa
File: yYFiPPQr54Uk4ofFHl33_ZEZA6Y.roa (raw, json)
Hash identifier: L/BQ5UBQoSDUQA4iPj76Czz/3Yp6r58UWExhBF+o/fM=
Subject key identifier: C9:81:62:3C:F4:2B:E7:85:24:E2:87:C5:1E:5D:F7:FD:91:19:03:A6
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 018CD5920EAAAEBB0892A0CC72F6343DEF81
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/yYFiPPQr54Uk4ofFHl33_ZEZA6Y.roa
Signing time: Thu 04 Jan 2024 17:42:48 +0000
ROA not before: Thu 04 Jan 2024 17:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3561
IP address blocks: 185.253.3.0/24 maxlen: 24
130.193.3.0/24 maxlen: 24
185.218.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 12:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d5:92:0e:aa:ae:bb:08:92:a0:cc:72:f6:34:3d:ef:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Jan 4 17:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c981623cf42be78524e287c51e5df7fd911903a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:97:f0:3d:4a:0c:00:5a:24:dd:41:46:7b:5a:
e4:67:00:db:13:ff:d8:3c:7c:82:71:09:55:4e:47:
5f:5a:38:9b:1d:2c:f3:f9:c2:8d:5e:d7:b1:de:f3:
7b:44:06:b7:fd:7a:fe:ed:a1:d6:e4:00:43:15:1b:
2b:df:dc:52:2b:f0:02:60:a1:a9:23:01:06:b2:62:
5b:d4:a8:91:a3:22:0e:c1:8a:7d:6c:ba:d6:9a:53:
98:2d:5a:eb:45:69:74:b9:aa:7b:23:5e:77:43:f5:
5f:ba:a4:59:70:31:65:1e:ae:e4:9f:a1:02:07:e7:
a3:86:50:d7:b1:0d:81:67:07:cc:77:0e:16:36:ad:
3b:1a:a0:6a:ef:b0:52:01:2d:1f:31:b0:15:19:e4:
f9:42:0b:a2:8d:98:cf:2d:1f:48:29:8b:9d:e5:50:
7a:5c:3c:e2:03:30:3c:46:12:71:92:49:66:61:47:
79:97:9e:29:8d:e5:36:ae:31:fd:5e:2c:ee:6c:3b:
87:88:e5:ff:a9:58:16:ba:60:c5:de:67:c7:d2:6d:
0a:5f:4a:6b:6f:83:38:11:05:76:54:26:12:a5:47:
44:79:0e:40:de:c7:58:ad:91:f2:67:a0:39:5e:ea:
37:f6:f5:2b:1c:f2:10:d5:6c:5c:46:25:b5:d8:47:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:81:62:3C:F4:2B:E7:85:24:E2:87:C5:1E:5D:F7:FD:91:19:03:A6
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/yYFiPPQr54Uk4ofFHl33_ZEZA6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.3.0/24
185.218.184.0/24
185.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
62:da:d7:cd:89:72:15:b9:42:42:11:4b:53:7a:3a:cf:d0:42:
d6:83:3b:4c:09:38:0e:7a:1a:1d:a6:c2:6c:6b:25:08:da:b2:
3f:45:13:57:6d:be:59:2e:d9:9d:18:a7:db:49:b7:0f:63:73:
49:a1:d7:3c:1c:d2:e8:de:40:6b:f0:78:a8:a1:ce:e2:0c:d8:
ea:7e:b6:16:09:8a:c9:d7:6d:2e:5f:f2:a4:f5:b5:85:5a:59:
a1:10:31:2f:eb:45:10:11:c4:e6:3e:9f:73:e3:9b:8b:44:12:
3b:f5:6d:75:72:05:1b:49:c9:1c:b9:68:58:45:7b:16:92:0a:
79:01:40:c1:fa:57:f1:4b:e3:5e:e3:e8:1b:5f:08:fc:2d:09:
06:b9:30:c1:da:dc:b9:0d:45:b9:8a:37:e0:f6:b6:0d:df:50:
a5:da:b7:58:88:36:b6:70:b1:46:e3:cc:e2:25:1f:27:aa:4a:
13:ea:0f:e5:63:ec:40:22:40:54:9b:3c:8c:75:dd:97:0b:8d:
74:fb:84:68:57:64:1f:2e:11:35:d1:4e:3b:59:22:c3:24:8c:
38:61:9a:64:5e:22:9f:23:6b:18:6e:fd:7c:46:14:4a:a7:bf:
fc:c8:1d:9f:2d:ac:b6:2f:86:18:41:d8:c8:d7:fd:02:01:54:
ba:cf:8d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:20 2024 by rpki-client on console-fra.rpki-client.org