Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/YcjxkSznsRdk08KvYxnHoJNXIWQ.roa
File: YcjxkSznsRdk08KvYxnHoJNXIWQ.roa (raw, json)
Hash identifier: Qcu7EWCWZgLNEeKMV5C9epBIOsQ7jDCta9u65X1kp7w=
Subject key identifier: 61:C8:F1:91:2C:E7:B1:17:64:D3:C2:AF:63:19:C7:A0:93:57:21:64
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246EFAF91248C162837FCEA1C211272
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/YcjxkSznsRdk08KvYxnHoJNXIWQ.roa
Signing time: Mon 02 Jan 2023 11:38:49 +0000
ROA not before: Mon 02 Jan 2023 11:38:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206045
IP address blocks: 85.187.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ef:af:91:24:8c:16:28:37:fc:ea:1c:21:12:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61c8f1912ce7b11764d3c2af6319c7a093572164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0b:c9:5a:ae:9e:b6:45:3b:a3:72:51:84:75:
98:d5:c9:a2:4c:3a:97:97:76:a2:c7:94:a4:c0:5b:
a0:8a:36:91:fe:94:c4:2a:a0:50:6a:0a:73:86:7f:
d3:37:3a:4b:78:0c:0e:a4:be:06:5a:a2:09:71:83:
81:bd:7f:93:b2:ed:22:2f:c6:75:82:9e:13:dc:e1:
b9:3d:93:7b:9c:4c:2d:fe:e1:7b:eb:49:f6:f9:4d:
98:5f:7e:a1:50:ac:8e:77:4a:ad:bb:ab:31:bd:27:
0a:be:17:40:fb:98:9c:29:68:ac:1b:41:47:77:51:
00:a5:9c:1e:bb:d1:f9:1e:b8:6e:b0:26:40:5c:ab:
c3:06:4a:d8:87:d7:8f:7b:a6:75:d8:3e:2c:4a:c1:
b1:13:f9:99:08:5e:98:6f:a2:33:45:f4:a7:ba:24:
3d:45:af:8f:12:c5:8b:23:88:38:32:1b:36:39:30:
06:5f:52:7f:da:97:a8:75:2b:b1:2c:65:94:ce:5d:
5a:3b:24:2e:27:72:03:87:08:51:07:ba:52:72:6d:
3a:ff:11:da:e6:39:38:9b:f7:d9:ba:9e:a5:cd:d9:
c8:e4:72:c2:52:4d:ad:0e:2d:d7:2d:15:bd:30:79:
2c:a3:c0:e9:20:bf:d3:74:2f:06:2c:e3:e3:16:08:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C8:F1:91:2C:E7:B1:17:64:D3:C2:AF:63:19:C7:A0:93:57:21:64
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/YcjxkSznsRdk08KvYxnHoJNXIWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:41:ed:02:a8:35:6c:43:a7:80:de:20:d0:3a:c4:ba:81:b8:
7c:40:51:cc:2e:a2:eb:c3:33:b4:4a:93:6d:c9:33:dc:ac:be:
b0:00:8a:5d:6a:41:cd:6e:a7:95:e6:33:11:35:6c:bd:71:25:
e3:a4:21:b5:5e:a8:95:cd:97:32:88:2c:7b:97:58:31:5e:e3:
74:82:0b:9a:74:c6:e6:03:09:8e:76:7a:a9:bf:71:e8:f2:5a:
20:8a:43:67:50:60:80:c6:07:b3:0e:23:da:e0:93:ee:a8:39:
d3:82:60:4e:a5:fe:95:4c:32:a8:ed:d9:92:c0:ad:63:1d:88:
fc:a3:6e:96:d3:4a:b3:fa:a7:22:a9:b1:d0:6c:6a:9b:31:8c:
68:24:20:ad:cb:dd:72:11:b5:68:dc:76:b7:24:66:a9:7a:e3:
d0:a8:c8:49:3b:72:e0:cd:1b:c2:4f:fa:6c:44:9e:d9:26:8e:
54:ff:b3:5f:f6:c2:9f:35:5a:d6:67:48:44:92:73:3a:94:52:
e1:a0:f5:30:0e:6d:ac:d5:e9:a7:73:c7:d1:2c:89:b5:2f:cb:
e4:f3:59:97:f2:b5:80:17:85:51:a1:32:7b:4f:24:36:b3:57:
fe:39:5a:cc:39:e2:83:5f:a3:31:4d:84:76:79:5b:8b:d1:ce:
09:88:04:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org