Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/SYWDlnnDM21wIkVUbLl3htp5bYI.roa
File: SYWDlnnDM21wIkVUbLl3htp5bYI.roa (raw, json)
Hash identifier: zoHdw0/WTqTHzllrXKx6AE//CbJdpz+8MMHi8/1H/bk=
Subject key identifier: 49:85:83:96:79:C3:33:6D:70:22:45:54:6C:B9:77:86:DA:79:6D:82
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0185776CCF0D1B9AFFAE78AA4F090A9241EE
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/SYWDlnnDM21wIkVUbLl3htp5bYI.roa
Signing time: Tue 03 Jan 2023 11:38:17 +0000
ROA not before: Tue 03 Jan 2023 11:38:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57912
IP address blocks: 82.119.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:6c:cf:0d:1b:9a:ff:ae:78:aa:4f:09:0a:92:41:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 3 11:38:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4985839679c3336d702245546cb97786da796d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:ec:2f:8e:b7:29:ea:fa:f1:91:45:3e:51:
ac:5a:12:9b:59:3b:e0:b5:08:70:87:b8:34:4b:9d:
8b:67:0d:d8:07:70:f5:f4:56:0d:3f:56:ea:4a:db:
47:41:99:be:26:9e:67:c6:8a:d6:52:d2:6b:d6:d9:
0a:2b:45:2c:3b:89:86:bb:86:ae:a1:f6:45:44:55:
2d:00:fb:6b:cd:9d:1b:f2:db:aa:e7:18:1f:6c:89:
41:27:71:1a:9e:41:5b:ca:25:e6:aa:bc:de:75:d0:
98:e3:8d:01:37:ed:02:7f:a1:48:d2:9b:f5:44:49:
30:0e:89:10:05:db:42:05:d7:72:6d:37:a1:59:6e:
04:0f:9f:54:00:db:b8:cf:e1:37:c5:9c:23:ac:05:
b3:c1:1c:c4:d2:f3:e3:23:c6:6e:98:7e:dc:64:25:
3a:b8:99:91:2f:ed:70:f3:c4:c9:e1:c8:15:d5:fe:
c7:66:6d:25:8d:a3:d7:b6:1a:b4:71:d3:18:0f:ff:
1d:60:0e:2e:f5:b5:30:16:21:7e:d8:0b:0b:39:33:
53:0f:67:95:bc:e7:d9:a0:19:e5:3a:7e:bd:8f:57:
96:5d:3a:b0:0b:fe:43:49:d5:94:b7:81:54:0d:b3:
72:eb:c0:32:1a:50:9a:67:2f:d2:02:a9:f4:41:16:
f9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:85:83:96:79:C3:33:6D:70:22:45:54:6C:B9:77:86:DA:79:6D:82
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/SYWDlnnDM21wIkVUbLl3htp5bYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:2a:55:d8:77:c4:bb:21:b9:2a:bd:31:d1:12:98:39:16:2e:
46:d2:2b:26:a5:4e:42:cc:c7:17:9c:90:0a:56:08:03:21:e2:
28:11:74:dd:5c:8f:5c:c0:f3:b8:8d:5a:20:bf:cd:16:e5:84:
e9:61:bd:fc:2c:75:5c:aa:c1:c1:4f:cd:08:de:c9:a7:4b:88:
cc:d3:28:e4:b7:2a:c6:1c:5d:7b:81:52:03:c0:f3:48:48:70:
56:6e:88:b7:74:96:c3:19:7c:00:47:fc:21:82:88:18:70:d1:
c1:f1:67:97:11:bf:47:5e:da:6c:a4:46:88:91:75:98:9d:37:
83:d5:b2:21:20:31:fc:f3:1d:be:ee:09:1d:ec:59:f0:2d:19:
c6:7a:22:22:33:ca:cf:4e:cb:19:4e:1b:04:94:97:3b:05:ab:
5d:66:5d:2e:24:7c:f2:ec:f3:9d:6f:1d:ff:62:f9:b0:40:bf:
a3:f7:68:d8:ac:82:83:a0:7d:34:86:4f:46:8c:01:73:35:88:
1c:27:47:23:65:3d:0a:cc:7d:16:b0:47:72:ab:67:67:2d:2d:
30:cd:56:92:c4:03:c4:7a:23:51:7d:ad:6f:42:a2:82:20:e0:
96:1f:1a:cc:37:37:a3:c8:c6:5c:b2:84:83:e9:31:64:b6:95:
a7:b6:5f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:19 2024 by rpki-client on console-ams.rpki-client.org