Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/YU7o_SEuRBD3YnxiY5SG6K967uQ.roa
File: YU7o_SEuRBD3YnxiY5SG6K967uQ.roa (raw, json)
Hash identifier: F//jqWm16NYbXETo311hJQfMZNgHTgfOXwPAEBhmOJE=
Subject key identifier: 61:4E:E8:FD:21:2E:44:10:F7:62:7C:62:63:94:86:E8:AF:7A:EE:E4
Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial: 018AFED1836B7EDBF62DC8F8139AA39A3D38
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/YU7o_SEuRBD3YnxiY5SG6K967uQ.roa
Signing time: Thu 05 Oct 2023 07:50:57 +0000
ROA not before: Thu 05 Oct 2023 07:50:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205402
IP address blocks: 109.234.224.0/21 maxlen: 24
185.108.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:d1:83:6b:7e:db:f6:2d:c8:f8:13:9a:a3:9a:3d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Validity
Not Before: Oct 5 07:50:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=614ee8fd212e4410f7627c62639486e8af7aeee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:37:b1:24:89:79:41:2a:90:12:d9:44:a3:ef:
ca:44:cc:33:8f:15:e0:d5:8f:dc:85:06:5f:06:53:
62:07:80:44:7b:31:8c:7c:1c:cb:56:c9:6b:47:50:
f9:88:1c:16:06:71:70:a3:89:0e:ca:ec:f7:05:93:
ff:0a:ee:d6:1a:a8:f1:06:de:c3:a9:dc:7a:d5:f4:
f0:d3:eb:61:53:96:86:7e:37:ab:d3:57:52:8f:68:
11:2b:6c:8b:39:d2:4e:e8:82:5d:c4:d0:8c:65:a9:
29:ad:d0:fe:d5:63:17:4f:ef:be:7a:c9:fe:e0:86:
3e:ba:e2:7a:5f:39:38:b0:72:e7:79:ef:dd:d6:99:
0b:6d:2f:1e:eb:50:be:98:52:96:4b:76:df:c4:6d:
45:5f:47:23:a2:c7:f7:28:73:3c:14:aa:e3:53:6a:
69:70:ee:1d:fe:57:2d:6f:f3:fe:7a:47:53:de:d6:
f3:3a:42:a2:db:ec:95:99:0b:e0:17:89:c3:88:1a:
8f:e7:c2:71:a9:5c:22:43:db:45:2a:43:1f:2d:52:
8a:46:18:84:ce:ca:de:e3:28:82:7f:e1:13:a5:a9:
f3:be:30:85:af:7d:72:99:ae:ef:b8:d7:4b:c2:5b:
2a:17:c0:8b:15:51:72:ae:ca:98:67:44:52:0a:8b:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4E:E8:FD:21:2E:44:10:F7:62:7C:62:63:94:86:E8:AF:7A:EE:E4
X509v3 Authority Key Identifier:
keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/YU7o_SEuRBD3YnxiY5SG6K967uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.224.0/21
185.108.92.0/22
Signature Algorithm: sha256WithRSAEncryption
27:88:cc:0c:e5:69:76:37:91:85:61:4d:49:e0:95:00:47:18:
f4:5e:a3:8c:70:03:a4:ca:5a:2a:1b:fd:7a:f1:6d:47:60:bf:
6f:da:bc:a7:71:b1:dd:04:9e:43:6d:17:5a:ea:3c:f8:bf:20:
dc:5c:db:b2:74:4f:76:ce:d7:d4:a4:cb:50:9a:24:4c:a6:5a:
be:82:9f:63:d3:21:d0:66:65:35:fc:62:dc:20:22:5b:f7:cb:
94:99:14:84:0a:d7:38:1a:9c:e3:cf:f7:7b:30:96:94:ed:53:
7c:29:f7:17:4c:c9:a2:4d:8a:8a:15:38:77:78:03:90:8c:46:
24:55:bd:89:51:3e:5f:eb:82:1a:bb:2c:c8:2a:2e:6e:dc:82:
06:a4:b5:00:d2:62:c1:23:30:88:2f:59:a0:94:14:0b:ea:66:
d2:31:5a:ad:7a:7b:ba:58:34:8d:7b:70:bd:87:ad:75:a1:a0:
43:21:d8:7e:42:f3:83:11:b9:73:5a:a4:51:91:9c:14:31:9e:
32:db:28:45:d5:ce:8e:f4:52:1a:b5:c4:6c:76:08:f3:ce:82:
39:5a:97:8f:e7:a8:d2:70:19:87:ee:13:0d:e3:dd:0a:94:e1:
ee:e4:95:5a:cd:b8:69:10:6b:02:a2:95:73:d9:dc:d6:82:26:
44:d6:69:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:29 2024 by rpki-client on console-ams.rpki-client.org