Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Yflc7Ny5sytSX18o-SU435p_uc4.roa
File: Yflc7Ny5sytSX18o-SU435p_uc4.roa (raw, json)
Hash identifier: +71p9n73w82H8st0rWBTjeOQmtdATou/zhvHMWJ5KtA=
Subject key identifier: 61:F9:5C:EC:DC:B9:B3:2B:52:5F:5F:28:F9:25:38:DF:9A:7F:B9:CE
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 01856FA70658E8A70871DA877E68E99C6ADE
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Yflc7Ny5sytSX18o-SU435p_uc4.roa
Signing time: Sun 01 Jan 2023 23:24:55 +0000
ROA not before: Sun 01 Jan 2023 23:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204737
IP address blocks: 185.242.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:06:58:e8:a7:08:71:da:87:7e:68:e9:9c:6a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Jan 1 23:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61f95cecdcb9b32b525f5f28f92538df9a7fb9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:3a:0c:15:8d:26:59:8e:ca:dc:ff:80:55:
0c:c1:bb:8a:a8:40:64:ad:ee:44:3b:41:43:2b:ab:
ac:3c:19:47:2d:e7:04:d5:9f:f9:77:67:aa:ba:d8:
3f:ff:f6:69:7c:ca:40:68:42:ad:9e:65:10:70:db:
b2:64:e1:5f:f4:35:3e:0a:3f:1a:f3:51:6c:b2:7f:
ff:a8:bb:23:77:e8:dc:89:5d:e5:9f:33:a3:78:6d:
ea:f8:55:20:cd:da:dd:c5:ef:ca:0c:c1:ea:f1:8e:
ec:13:19:b8:9b:74:11:f9:ab:86:b4:ea:f1:34:33:
2a:b5:34:51:cd:79:ef:a8:49:3e:e9:45:da:7a:0c:
4e:1c:33:e3:a5:94:84:1a:5e:5d:a9:d1:f2:db:1e:
14:a5:03:56:a3:84:93:fc:c0:17:fd:6e:b8:27:64:
78:dd:e7:86:45:62:24:36:f8:ad:fd:c2:ed:22:9c:
b4:9f:5c:2b:35:d7:ce:53:75:ae:65:ad:6c:31:3f:
e3:b1:82:f2:78:eb:a7:d8:3f:2c:1a:cd:6c:f6:9b:
af:fa:08:e6:ee:40:b6:74:d3:d9:c8:13:73:ff:e7:
81:ea:bd:22:94:3c:1f:c8:24:2b:34:a1:a1:f5:7b:
c1:7d:6c:1b:f0:2f:06:a2:12:3e:9e:2c:a6:d6:ab:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F9:5C:EC:DC:B9:B3:2B:52:5F:5F:28:F9:25:38:DF:9A:7F:B9:CE
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Yflc7Ny5sytSX18o-SU435p_uc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.52.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:ed:90:82:4d:6d:c5:ae:58:2a:97:1a:af:b4:29:33:26:a0:
7f:dd:35:1c:37:3b:7b:87:ae:d1:3a:d4:2d:23:4a:dc:d6:a8:
d6:26:14:e1:a6:59:3e:96:a5:b1:b4:da:75:28:c7:27:13:eb:
ac:12:ba:19:c4:0f:7a:0f:18:57:0e:8b:ef:06:b7:4d:31:48:
ac:7c:6c:11:e0:9d:fc:fd:23:e4:97:3c:23:7f:37:47:9a:e9:
e8:08:d5:fa:59:4f:57:d9:c3:e9:8d:aa:3d:ee:ba:30:eb:88:
2f:2a:eb:08:97:d7:ce:ff:43:90:b5:08:fc:dd:3b:bf:dc:a0:
92:c1:e3:ac:8e:98:ec:ae:96:16:7f:0e:be:4b:43:ee:f3:7d:
6d:af:1c:ca:7f:70:18:20:d9:c3:29:80:94:8c:ea:01:80:18:
fb:3b:40:84:0c:b6:95:13:4a:ab:1f:56:d0:d3:b8:c9:f0:ab:
ff:b7:de:55:8a:29:43:08:23:c8:f1:4b:be:99:8d:22:60:2d:
84:ea:62:2f:f3:f0:a7:66:25:16:eb:a9:73:3c:d4:8b:ab:3d:
0c:1e:ac:c0:ee:0b:6e:3a:a0:1a:d7:e5:a6:6d:e1:b7:4d:4b:
70:6c:72:75:4f:91:76:29:51:94:22:27:a4:5e:fd:2c:80:e6:
b4:ff:ad:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:23 2024 by rpki-client on console.sobornost.net