Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YqFH3MD0K8vucjc2nMd-x8P_AcI.roa
File: YqFH3MD0K8vucjc2nMd-x8P_AcI.roa (raw, json)
Hash identifier: zzABNCYvt9WES29iWR2kGmmranCDVGPDyi8UZy2CAvU=
Subject key identifier: 62:A1:47:DC:C0:F4:2B:CB:EE:72:37:36:9C:C7:7E:C7:C3:FF:01:C2
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01928A3EEB02B33C71BD9DF59EE769C62EC7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YqFH3MD0K8vucjc2nMd-x8P_AcI.roa
Signing time: Mon 14 Oct 2024 08:57:12 +0000
ROA not before: Mon 14 Oct 2024 08:57:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 77.242.146.0/23 maxlen: 23
88.209.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 06:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:3e:eb:02:b3:3c:71:bd:9d:f5:9e:e7:69:c6:2e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 14 08:57:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62a147dcc0f42bcbee7237369cc77ec7c3ff01c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:a5:54:02:73:61:05:9c:0a:ea:84:59:66:
8a:1d:14:c7:7d:f2:90:93:31:8a:e0:2e:1b:55:bc:
c1:04:f9:bb:3f:1d:7f:cc:b6:5b:ae:9c:7f:aa:99:
61:ce:c1:e4:c1:74:db:d5:c3:b2:f0:2d:a4:97:12:
23:36:c5:58:bd:c7:e9:5b:13:63:6e:5c:ef:6a:d1:
b6:43:d4:f1:57:08:b3:86:e9:4f:bc:17:b7:ea:77:
81:52:f1:b1:c2:09:22:f2:fa:44:cd:d7:d5:0d:a3:
67:de:70:24:65:f8:29:d2:26:26:bc:08:d0:34:43:
1f:21:cb:41:73:7b:1e:23:f6:69:80:a4:0f:0d:06:
0a:59:25:5e:df:7b:a9:56:6f:01:d4:85:22:87:42:
69:6d:48:55:34:ab:56:c4:0b:cb:19:a7:ad:6e:82:
40:a7:3c:97:7e:e4:6e:f2:59:6a:db:6b:d8:a3:4b:
78:b8:e8:40:f8:df:3d:c3:f4:70:cb:9d:75:8b:c1:
b2:b7:df:a8:a7:8b:58:5f:d0:b4:9c:e0:3f:c1:cd:
7a:3a:3e:3b:cf:2d:d0:78:8e:73:ac:2d:d5:e8:27:
e4:34:98:39:58:08:10:8b:d4:93:f3:9d:03:ed:5a:
17:19:eb:0e:09:63:fb:cf:5b:9f:67:f0:55:8c:20:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A1:47:DC:C0:F4:2B:CB:EE:72:37:36:9C:C7:7E:C7:C3:FF:01:C2
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YqFH3MD0K8vucjc2nMd-x8P_AcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.146.0/23
88.209.195.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:24:7c:dd:bb:93:91:17:04:89:b3:0e:95:5e:91:91:c4:54:
09:f4:a7:2e:d4:57:5f:d4:89:25:e8:d6:d8:c4:59:df:d0:6b:
8a:c2:6f:2a:dc:83:f9:3e:31:bd:fb:2b:0b:f2:ed:38:62:ae:
f5:c3:cc:17:e8:12:d4:4a:3c:ba:46:a8:0e:9f:4f:a1:c6:36:
28:a2:54:4f:60:92:a0:2d:7a:c3:2c:8a:58:43:2d:66:bb:bc:
c7:f4:87:dc:aa:5c:14:ea:b2:5e:35:ae:f7:00:92:29:7a:bf:
c2:67:e8:a3:58:bf:c4:0c:cf:57:97:60:57:7f:6a:fc:50:6b:
50:5e:14:19:1f:e3:06:ad:31:d8:9a:54:e8:03:af:82:58:cc:
85:1f:7c:b4:b8:33:8b:6a:d5:fc:d6:d8:04:ae:5b:f7:59:10:
69:61:98:38:e5:81:be:a4:67:45:94:30:30:76:8c:1c:08:fe:
41:88:bf:e1:9b:8a:b5:4d:55:d3:19:5c:26:b6:1c:28:73:8c:
ee:3a:46:dd:eb:d0:82:d8:bd:45:0c:ec:42:5c:9f:59:63:ce:
26:43:4b:fb:55:f3:d7:04:30:0f:09:90:20:6f:d4:67:21:50:
f7:0b:4a:e1:6c:30:0b:f6:b3:36:c8:b9:77:f1:39:91:1e:ed:
8d:12:aa:e6
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 25 07:15:03 2024 by rpki-client on console-fra.rpki-client.org