Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/YnENsyBOlurI_tRR_O0FtHdwn0Q.roa
File: YnENsyBOlurI_tRR_O0FtHdwn0Q.roa (raw, json)
Hash identifier: 87TSqHNyj9IxVPQnD1L4DU9AMRcz3b1ChepuvUsEcBQ=
Subject key identifier: 62:71:0D:B3:20:4E:96:EA:C8:FE:D4:51:FC:ED:05:B4:77:70:9F:44
Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062
Certificate serial: 018A61D10B82EC43B9B42593925A3870C589
Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/YnENsyBOlurI_tRR_O0FtHdwn0Q.roa
Signing time: Mon 04 Sep 2023 20:10:04 +0000
ROA not before: Mon 04 Sep 2023 20:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16019
IP address blocks: 185.243.168.0/22 maxlen: 22
2a0d:1780::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:61:d1:0b:82:ec:43:b9:b4:25:93:92:5a:38:70:c5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062
Validity
Not Before: Sep 4 20:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62710db3204e96eac8fed451fced05b477709f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:57:6e:18:f8:05:f9:be:59:e1:b2:60:ce:
f0:f8:f6:ab:95:69:d8:b5:b3:f9:0f:3e:53:53:00:
84:d0:c4:1d:22:ea:11:0f:8b:40:63:99:ec:f1:1d:
76:f7:31:89:07:6b:a6:00:3e:40:c1:34:12:bb:f4:
ff:e4:ac:56:92:f2:20:41:db:71:a3:6a:e4:91:46:
4e:de:2e:d2:fc:a4:f5:86:cb:71:8a:4b:dd:80:ed:
fb:59:49:4a:04:e6:98:06:36:41:6d:f8:af:cc:1e:
ee:a3:67:b6:e1:fe:c7:d0:7e:bd:6c:c8:bc:34:21:
77:21:51:48:79:94:69:17:e3:6c:2c:d5:50:24:0d:
ab:c5:56:40:bb:ce:b7:a2:79:b6:70:f3:6f:aa:87:
4f:8f:a3:26:fe:1d:0e:f9:5f:5a:d2:eb:2a:85:f5:
02:f8:e6:ed:ec:22:73:35:9c:e7:f8:4f:27:3c:82:
77:d0:a3:1b:fa:3d:20:0a:c5:eb:6c:75:09:03:f5:
80:2c:90:a2:a1:df:f7:e1:9a:21:54:fc:95:89:f9:
10:fa:33:27:35:24:7c:01:48:65:5b:80:13:e1:d6:
19:75:29:ac:34:f6:8a:a4:47:3a:57:24:6a:a5:1d:
ff:6c:2f:68:03:4f:f1:a0:bd:b9:aa:4f:45:2a:66:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:71:0D:B3:20:4E:96:EA:C8:FE:D4:51:FC:ED:05:B4:77:70:9F:44
X509v3 Authority Key Identifier:
keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/YnENsyBOlurI_tRR_O0FtHdwn0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.168.0/22
IPv6:
2a0d:1780::/29
Signature Algorithm: sha256WithRSAEncryption
45:b3:b6:9e:5b:e2:b7:f8:22:ec:06:98:cd:f6:fc:e0:4e:5d:
30:b4:73:55:ba:bc:ea:0b:7e:8d:35:98:e8:2b:1a:12:b8:57:
df:f0:55:2a:0f:bd:e0:dd:8f:13:8f:c4:15:ce:cc:07:4a:9e:
9b:3a:48:3b:2d:0f:e2:27:33:6e:39:c0:3c:06:f2:a3:8b:6e:
e9:28:1d:14:0e:ae:2b:20:7c:3c:e8:6a:18:07:36:9e:87:34:
c3:85:03:f0:8f:5a:34:6a:e4:5b:3c:c5:40:2f:d5:da:3d:fd:
1e:0f:96:02:16:7e:8e:a0:7c:b3:b1:67:73:76:59:a6:bd:ff:
ae:d5:92:98:68:d5:a0:a4:ed:0b:0e:e4:c0:07:1c:23:42:53:
28:46:32:51:48:bd:21:3a:d1:92:31:37:07:3c:79:4f:90:79:
5c:a2:6e:ba:51:6c:8f:7c:61:d8:e5:de:a1:f9:fd:a5:20:c6:
9f:17:3f:2d:92:1d:b2:3d:cd:70:9d:69:9a:f9:6b:49:b9:4d:
8c:8c:55:6b:a6:38:7a:80:e1:34:1d:7e:bc:b1:a1:08:cc:49:
f5:19:fd:b0:f4:80:45:31:d5:b5:8b:60:0e:f9:92:84:97:e9:
4e:d7:de:8e:b0:4d:fe:d1:72:06:33:2c:da:1f:b6:46:84:a7:
e0:a7:7c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:56 2024 by rpki-client on console.sobornost.net