Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/YuqpmVGV62C0tZ8mWn9RE16kGjo.roa
File: YuqpmVGV62C0tZ8mWn9RE16kGjo.roa (raw, json)
Hash identifier: yrhphPD8s+2D/meEo0Z9bNiZh6891p1C8fJxSTtRME0=
Subject key identifier: 62:EA:A9:99:51:95:EB:60:B4:B5:9F:26:5A:7F:51:13:5E:A4:1A:3A
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 0188200C2F3EB0421B1282D5DED504293CBC
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/YuqpmVGV62C0tZ8mWn9RE16kGjo.roa
Signing time: Mon 15 May 2023 15:34:09 +0000
ROA not before: Mon 15 May 2023 15:34:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.81.79.0/24 maxlen: 24
188.214.232.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 28 May 2023 00:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:0c:2f:3e:b0:42:1b:12:82:d5:de:d5:04:29:3c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: May 15 15:34:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62eaa9995195eb60b4b59f265a7f51135ea41a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:61:8d:04:13:c2:b2:f0:82:f9:74:a9:92:
1e:0b:c2:80:e9:bb:2e:71:20:8f:c0:38:c3:62:17:
e0:28:70:cd:e1:be:fd:30:d7:94:ac:70:89:fb:a6:
28:f5:6b:e0:3a:76:61:4d:be:ae:0c:02:d9:72:e5:
e0:d4:48:00:42:7a:cb:93:d7:ac:84:e4:86:77:5f:
96:f0:9c:28:04:80:c8:0a:43:d2:9c:66:46:23:2c:
ec:92:df:63:fa:ed:88:3c:9b:d9:1f:72:be:b0:6e:
26:e9:ae:2f:47:2e:f6:f1:8b:8d:3d:34:dc:5d:08:
53:e9:e1:d5:ac:cf:39:04:ac:26:b1:15:dc:00:0a:
37:97:50:4c:2b:f6:3b:1b:39:0d:66:ad:51:60:77:
13:23:ab:7e:95:30:88:03:34:d8:cc:b3:e8:74:0a:
3e:d6:e1:f6:79:e8:34:c8:58:06:c3:a9:c2:99:94:
a0:e2:20:d1:11:3f:46:be:04:97:3e:8c:9b:99:e5:
6a:a6:f4:08:2b:ad:7f:ea:e6:ca:5d:8d:d9:79:43:
71:59:f1:d1:58:30:29:f2:c1:fa:c8:cd:05:69:ba:
06:eb:2c:75:1d:92:f0:5c:54:8b:85:b4:d4:8f:8f:
bc:2b:5b:08:80:d7:42:b0:cc:38:e0:10:cc:25:22:
1d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EA:A9:99:51:95:EB:60:B4:B5:9F:26:5A:7F:51:13:5E:A4:1A:3A
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/YuqpmVGV62C0tZ8mWn9RE16kGjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.79.0/24
188.214.232.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:06:82:8d:9a:3e:93:20:26:9c:ea:6b:72:46:e9:92:78:25:
6b:62:8e:03:d0:b7:2b:71:3a:af:ec:58:f6:2f:cc:5d:82:89:
e1:35:54:2e:65:15:ee:c1:41:e5:76:0b:e7:5a:20:c5:a5:77:
fe:68:f0:5b:e5:28:1a:3e:5b:2b:98:10:9f:9a:b2:1d:38:7a:
76:66:46:e9:0e:7c:27:6d:cb:2c:06:27:29:63:aa:7f:f5:70:
c5:6a:70:44:0f:39:7e:d4:02:69:ea:75:fb:9b:9b:ac:9b:fe:
10:d4:38:67:0c:e2:18:9d:e8:45:38:c8:50:2d:7a:5e:b1:f5:
04:c8:ac:e7:af:d9:11:e5:3f:6d:f9:65:72:81:59:f8:45:4d:
00:0a:ac:f2:61:c6:0e:1b:f8:bf:8d:26:3c:ee:f6:8c:56:a7:
f1:4a:82:f2:16:68:ef:c0:f1:51:b6:d4:46:d3:b3:ae:ca:0b:
c3:2f:f3:d9:11:2b:4f:39:a7:49:0f:66:b9:8e:21:f1:cc:bc:
80:41:43:9d:c2:82:d9:57:87:84:cb:aa:94:08:bb:e6:b5:98:
a8:f3:c6:43:4e:48:0a:80:df:0d:45:b2:ed:eb:80:d9:89:61:
1a:e9:04:80:cb:a0:fb:11:27:39:1f:bc:10:5b:ba:93:f9:14:
4f:ae:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org