Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/yuM1CGPV-5uBv9xcG8Zeovi5Yq0.roa
File: yuM1CGPV-5uBv9xcG8Zeovi5Yq0.roa (raw, json)
Hash identifier: gaYF7/as931B/uFKNmW1EoCs1oTqgXygcPDvt4yJT9o=
Subject key identifier: CA:E3:35:08:63:D5:FB:9B:81:BF:DC:5C:1B:C6:5E:A2:F8:B9:62:AD
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 01856B93344E1789D959E75FAEA996B8E7BD
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/yuM1CGPV-5uBv9xcG8Zeovi5Yq0.roa
Signing time: Sun 01 Jan 2023 04:24:47 +0000
ROA not before: Sun 01 Jan 2023 04:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200077
IP address blocks: 77.111.208.0/22 maxlen: 24
185.37.220.0/22 maxlen: 24
2a00:fa60::/32 maxlen: 44
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:34:4e:17:89:d9:59:e7:5f:ae:a9:96:b8:e7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Jan 1 04:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cae3350863d5fb9b81bfdc5c1bc65ea2f8b962ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:80:eb:bf:f9:6c:a4:4e:34:e6:4b:01:e0:a1:
42:1d:97:af:70:19:4a:4e:e9:c8:1b:d1:de:f7:35:
ec:1e:49:13:a1:49:7d:f0:ac:23:bc:13:1e:33:be:
1d:1d:2c:1d:15:0a:b9:82:12:0a:a1:44:0b:ef:7e:
07:64:5b:60:31:7b:4b:b9:52:ac:d8:4a:eb:1d:87:
fc:09:03:8f:ff:c7:43:79:57:0e:c6:df:3d:4e:b4:
73:6d:7c:eb:21:58:f5:10:2f:ae:a4:cd:2e:ff:d9:
29:3c:72:4c:72:f8:bf:b8:3c:c5:f0:b8:da:4d:2f:
db:7a:bf:05:7a:e5:17:2a:7f:e4:f6:67:e3:cb:29:
8c:13:05:96:fa:27:ed:ed:29:76:29:30:5f:14:c8:
9d:2a:31:b1:e2:6c:55:b9:7d:b5:13:c0:05:f2:55:
c9:0a:a6:46:ff:01:36:ed:97:5d:d3:31:42:da:7c:
c3:d0:36:95:36:1a:1b:13:f9:9b:17:5e:46:64:f0:
dc:c3:44:11:a1:25:d7:c6:f0:9a:3e:d6:f2:af:7c:
22:41:e2:c8:f3:b8:e0:64:fe:80:39:0a:c6:06:ee:
1b:57:7c:ed:8f:93:66:33:38:4a:db:28:fd:b8:d1:
d9:13:7d:36:bc:44:79:f7:2d:88:61:af:4c:d0:e0:
9d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E3:35:08:63:D5:FB:9B:81:BF:DC:5C:1B:C6:5E:A2:F8:B9:62:AD
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/yuM1CGPV-5uBv9xcG8Zeovi5Yq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.208.0/22
185.37.220.0/22
IPv6:
2a00:fa60::/32
Signature Algorithm: sha256WithRSAEncryption
45:33:c4:35:06:a0:73:f0:d8:48:f9:6f:f0:5c:9e:21:c1:b5:
bf:74:c4:34:0d:6d:3d:37:fc:ef:ae:ad:84:39:fb:36:5c:1c:
1d:a2:ae:d0:e7:9a:40:62:de:a8:7f:68:21:ee:50:56:87:39:
e5:39:b0:5b:21:7a:f9:22:c0:f1:8a:91:ef:c9:8e:a1:ab:aa:
d0:17:d1:46:ab:c2:d7:0e:2f:88:e8:4a:00:4a:d5:3e:46:01:
e4:ae:e6:6d:75:f6:67:44:0b:25:e4:ae:a0:8a:3a:e7:e9:7a:
64:9d:cb:de:94:8a:09:4f:63:11:d7:55:84:07:d0:01:8d:5d:
91:cc:d4:1b:84:e2:5c:43:a6:31:af:8a:94:5b:6e:d5:a3:df:
c7:e1:97:fb:d0:30:67:81:21:ca:f7:2b:4d:ed:98:bc:67:c6:
22:02:db:7e:eb:85:15:26:f8:e9:69:9d:e8:c1:9b:84:ae:71:
3d:83:77:d4:35:2b:f3:dd:81:96:f4:15:95:c2:71:ed:44:5a:
18:8a:50:3b:ee:8c:c1:a5:8d:7d:eb:79:88:33:41:78:df:be:
ef:33:9b:be:1f:11:d6:fc:d1:c6:cb:d8:3f:11:f1:13:e1:82:
1b:72:c1:b6:7e:f2:25:c7:34:bd:bf:d1:07:1c:a3:a3:e1:e5:
37:81:f8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:02 2024 by rpki-client on console-fra.rpki-client.org