Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/YbFuX7kzvOtTLZj5XJrLTO_BlSM.roa
File: YbFuX7kzvOtTLZj5XJrLTO_BlSM.roa (raw, json)
Hash identifier: m2oB9gKVvCp2fJxWE2XlRJMO9iUnuzsbUHJqfb3eALw=
Subject key identifier: 61:B1:6E:5F:B9:33:BC:EB:53:2D:98:F9:5C:9A:CB:4C:EF:C1:95:23
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018CC56DF75276B1A8D74C204D1260279F24
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/YbFuX7kzvOtTLZj5XJrLTO_BlSM.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201575
IP address blocks: 213.145.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 11:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f7:52:76:b1:a8:d7:4c:20:4d:12:60:27:9f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61b16e5fb933bceb532d98f95c9acb4cefc19523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:78:4f:9f:4b:75:5d:fe:41:22:7d:a5:7b:ca:
21:e4:8b:af:e9:ce:d9:c1:7f:0d:0d:a9:cc:c1:5a:
f2:00:f5:4b:77:a6:b7:41:ab:f8:78:63:b1:56:aa:
d4:97:96:73:ef:d5:11:0f:55:e0:d9:53:92:a6:13:
82:d9:4e:1e:ca:50:4e:c4:c1:e2:23:6c:69:56:68:
90:04:cc:dd:e4:68:2a:de:59:35:42:50:d9:fd:fd:
e9:48:26:23:bb:a9:81:61:87:52:13:c6:96:7d:f5:
fd:40:6a:55:20:df:c2:f8:b8:c7:65:7a:c2:99:a4:
eb:fe:f1:05:bc:02:2e:c1:87:4a:b8:dd:3b:b3:fc:
14:92:fb:08:4f:a3:71:8e:16:32:61:93:80:eb:8f:
ff:fe:9b:34:ab:25:78:78:28:d4:12:0b:c7:0a:d9:
a5:53:72:a8:65:bf:f3:8a:31:37:df:c3:45:66:54:
0e:f6:e4:99:ed:18:79:7c:31:b7:2f:52:80:cc:cd:
54:72:63:3b:8d:bc:7f:b9:53:9c:ca:70:07:2e:78:
5e:dd:3e:36:28:b1:1a:3d:94:6e:03:4e:d5:75:16:
4b:41:b2:07:07:c4:95:b6:5e:e6:35:56:ef:a2:49:
0e:3f:1b:71:27:be:c4:a8:ff:f2:30:22:b7:d4:af:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B1:6E:5F:B9:33:BC:EB:53:2D:98:F9:5C:9A:CB:4C:EF:C1:95:23
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/YbFuX7kzvOtTLZj5XJrLTO_BlSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.74.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ec:8e:aa:ba:f3:47:9a:a3:72:60:6e:08:82:a0:cf:64:4c:
57:34:1c:52:c2:7f:ed:34:fd:9d:c6:00:db:07:17:86:e0:85:
7b:6c:50:5a:03:cd:52:c2:f3:c8:6a:ec:05:7d:41:ca:16:34:
ec:96:05:62:53:06:ff:76:62:ff:e0:5f:5a:d5:64:49:ed:98:
a6:0c:db:41:d1:e3:5b:f8:92:1d:34:06:d1:c0:d7:ec:db:09:
0c:88:81:c2:1a:08:57:24:62:1d:92:c8:10:4f:95:45:66:1f:
32:81:59:67:e8:40:23:c8:d7:6f:f8:ca:c9:95:9f:74:5a:79:
4a:43:6a:96:51:33:2a:7c:65:f8:5f:48:1f:95:d6:04:9d:ba:
5b:57:5a:70:2b:99:9b:10:85:5e:70:ae:6c:19:ce:d1:dd:68:
f1:65:b1:6a:7c:87:2d:50:57:85:3b:d6:5a:24:a8:79:ab:ca:
c8:8d:bc:7d:0a:f8:8e:27:ca:1c:58:cd:92:82:f2:e6:ad:58:
3c:82:be:14:1f:7d:53:5e:8f:fb:6a:80:e9:ff:dd:d0:c8:75:
57:88:0d:29:2a:93:73:14:49:7b:f8:3c:91:84:5d:9e:d2:58:
1d:8f:15:b3:14:67:65:fc:5b:ba:7f:c6:ca:49:db:45:32:49:
3b:33:26:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org