Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/YfdIDRgh0Ss9I3frNqENMLJOIsQ.roa
File: YfdIDRgh0Ss9I3frNqENMLJOIsQ.roa (raw, json)
Hash identifier: cUZ37xLUXdhygL4GDmi3rPOPwV4hNOaflaVLqr7Cbmw=
Subject key identifier: 61:F7:48:0D:18:21:D1:2B:3D:23:77:EB:36:A1:0D:30:B2:4E:22:C4
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 01856EC2399C3C13E78D530FEB020AD773B7
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/YfdIDRgh0Ss9I3frNqENMLJOIsQ.roa
Signing time: Sun 01 Jan 2023 19:15:00 +0000
ROA not before: Sun 01 Jan 2023 19:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202354
IP address blocks: 194.127.110.0/24 maxlen: 24
194.127.111.0/24 maxlen: 24
194.127.108.0/24 maxlen: 24
194.127.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Jun 2023 19:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:39:9c:3c:13:e7:8d:53:0f:eb:02:0a:d7:73:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Jan 1 19:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61f7480d1821d12b3d2377eb36a10d30b24e22c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bd:c5:e9:94:5c:2f:09:3c:2d:56:20:97:ee:
1a:63:34:46:5f:9d:7c:46:ee:5f:e1:c2:7a:96:55:
01:f8:b2:c5:86:25:22:a2:e6:4f:1a:60:0b:a6:1a:
50:e1:8d:03:0a:27:32:98:b3:cf:40:2e:68:a6:e2:
80:0a:4a:68:35:fd:83:56:73:0f:8b:08:2e:46:55:
78:a2:72:d6:0b:cc:45:71:24:8b:90:79:5a:5c:84:
5f:2b:a4:c6:c6:d6:ef:46:d1:bd:57:22:65:86:8a:
45:ce:51:ce:4f:60:43:b6:40:b8:37:4a:dc:9b:54:
38:1a:3b:eb:29:61:53:ad:72:6a:33:07:cc:33:e5:
3e:5d:90:ce:d0:ee:b7:0c:ef:6f:14:7a:a6:a9:bb:
80:8b:3e:27:fd:1a:ab:e8:11:3f:ac:10:69:d6:db:
ca:1c:fa:f9:2c:ca:ae:c4:b8:41:85:3e:ff:a6:62:
47:7f:c0:b5:43:54:82:e5:f7:92:e3:f3:cb:49:91:
82:45:2f:be:a1:76:d5:5e:14:ab:ff:41:96:a0:f6:
51:d7:75:ef:b0:54:62:23:23:99:a9:bc:10:26:a6:
15:c1:f2:4f:24:ad:cd:d2:79:bf:8c:cf:0f:d2:a6:
8b:29:19:e3:b4:55:49:4e:19:37:a9:62:62:bf:dc:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F7:48:0D:18:21:D1:2B:3D:23:77:EB:36:A1:0D:30:B2:4E:22:C4
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/YfdIDRgh0Ss9I3frNqENMLJOIsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.108.0/22
Signature Algorithm: sha256WithRSAEncryption
61:a7:3e:f7:ce:b7:bc:ce:07:57:0b:fd:f1:1d:68:12:a4:1f:
e2:c7:3e:5c:f1:d7:52:d1:10:fd:12:ba:ce:1b:d9:5a:28:f4:
66:36:e2:fd:9d:00:f9:83:d7:47:23:d1:55:aa:a3:32:3b:0b:
42:ee:f6:9e:a0:71:e9:1e:c9:6a:d3:76:6f:a7:af:3f:8d:78:
ea:7f:7a:5b:8d:84:ea:6c:60:96:f8:1f:83:7d:39:c7:55:44:
32:d7:19:06:24:3e:e9:42:51:3d:82:29:91:ae:26:cb:63:fa:
04:b8:36:f4:4e:d2:d3:c5:20:68:fa:f2:6c:20:c5:14:1a:fd:
38:38:45:41:38:99:4d:42:fd:4a:b3:a5:17:e5:2e:6f:80:a1:
59:51:95:df:57:5f:35:61:1d:41:8b:d5:c0:53:af:21:e2:b1:
f8:fe:ea:2f:47:f5:39:c9:e0:a8:0f:bd:43:cb:89:2d:68:a6:
80:f8:86:55:f3:18:ba:78:60:19:a1:ce:8a:68:77:70:a5:cf:
13:79:d8:f5:76:24:e7:48:49:67:da:eb:e9:22:6d:34:de:80:
d5:ed:b6:d0:0c:39:2c:b1:06:af:66:47:cb:20:af:fe:34:e7:
78:71:d0:03:30:3c:0e:e8:35:6c:7a:ca:f6:83:14:6f:c3:7e:
86:18:af:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:59 2024 by rpki-client on console-ams.rpki-client.org