Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/yZZSniANPhJWG24CU-lq1d6cLVo.roa
File: yZZSniANPhJWG24CU-lq1d6cLVo.roa (raw, json)
Hash identifier: cZEuENBHwjxXAHcj5Xy2U0L/Q9Ye3xCQO93yHLUi/z0=
Subject key identifier: C9:96:52:9E:20:0D:3E:12:56:1B:6E:02:53:E9:6A:D5:DE:9C:2D:5A
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018972091E10E22E8BE20882DBCE1BA9CA44
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/yZZSniANPhJWG24CU-lq1d6cLVo.roa
Signing time: Thu 20 Jul 2023 06:42:27 +0000
ROA not before: Thu 20 Jul 2023 06:42:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 85.133.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jul 2023 09:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:09:1e:10:e2:2e:8b:e2:08:82:db:ce:1b:a9:ca:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 20 06:42:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c996529e200d3e12561b6e0253e96ad5de9c2d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:a7:1d:f5:8c:ef:79:e8:1e:61:00:09:4c:
9d:78:aa:fb:1b:f3:11:18:2f:d9:57:74:a2:3d:f9:
48:bb:6b:bc:8d:0f:50:c9:b6:a6:71:a5:bf:b5:ee:
7f:0d:be:2d:9f:ca:03:d4:7f:ac:92:ce:fc:47:1e:
10:b7:13:0d:13:81:26:e0:d2:38:06:35:a1:6a:6b:
4d:1e:b7:4a:d9:65:3f:ba:80:d8:5f:30:82:90:19:
15:de:6b:8b:eb:82:5c:af:1a:09:78:00:59:be:c4:
3c:08:46:3f:ff:4b:7c:20:53:cd:15:33:f3:d9:59:
4d:b2:50:b5:8f:f4:e0:83:7b:43:36:27:91:1b:10:
5f:b4:f5:41:74:97:e5:39:05:80:71:c7:36:dd:4a:
c3:96:aa:11:1c:c7:a8:e6:33:58:38:86:3a:2f:49:
7b:e7:82:e8:03:24:76:86:1a:55:5a:11:c6:c3:fe:
8c:fe:23:7c:da:83:57:c1:46:1e:c3:d2:2a:8f:ae:
5f:81:9c:78:8c:28:a4:fc:da:4a:84:cf:c5:c0:8a:
3e:db:2d:77:01:76:8e:b9:ce:29:d3:80:20:93:f5:
4a:6e:2f:5c:1d:73:3c:e5:cc:10:ed:72:e3:bb:95:
d6:1b:91:dd:e1:e9:56:0f:c3:6a:87:4f:03:8b:e4:
d7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:96:52:9E:20:0D:3E:12:56:1B:6E:02:53:E9:6A:D5:DE:9C:2D:5A
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/yZZSniANPhJWG24CU-lq1d6cLVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9a:d0:55:11:ec:e2:c5:c6:1c:37:7d:87:97:35:ce:d4:04:
e8:25:cf:bf:90:72:9f:1f:15:ae:aa:e6:f3:11:7d:56:6a:29:
ed:e5:ba:99:89:48:71:91:d8:91:84:1b:d9:89:71:7c:3d:9e:
41:33:bb:e0:75:7e:eb:52:13:9c:d2:1b:9b:7e:f7:a1:c6:ca:
b3:a6:60:d0:2f:10:f7:23:ef:82:f0:42:90:3a:34:df:3e:d9:
6d:9a:f4:75:01:73:54:e4:58:32:87:48:bd:e1:1a:85:99:2a:
db:84:0f:fb:85:12:07:fb:60:9e:d0:af:aa:09:2b:21:be:c4:
09:40:80:b8:24:5b:f0:5d:55:65:b8:fc:a7:65:62:9f:4a:b3:
f2:f4:bd:1c:ec:77:d7:45:08:d6:06:f5:f3:33:99:76:c6:87:
1a:fb:27:1f:65:52:e1:a8:d0:6a:4a:0d:1a:cf:ac:e9:56:a1:
a8:7f:01:d5:f6:2a:59:34:51:3f:2e:d9:b6:08:23:1d:40:7f:
0d:c1:22:d9:56:ab:d3:44:67:5b:30:b2:96:e2:6d:89:75:1d:
63:bc:96:a8:bb:8a:e3:6d:4f:7a:10:e1:a8:d3:9c:e3:05:be:
65:d2:aa:0c:97:dc:50:a6:b5:40:9e:90:09:00:70:31:15:54:
f8:7c:c2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org