Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/YpFUcdMwEZONTPmOiGAwU3tICA4.roa
File: YpFUcdMwEZONTPmOiGAwU3tICA4.roa (raw, json)
Hash identifier: LEtMHdm/tHwKTgaLTFW6zv+v6uBTjpMG/l0Ym+tb6kk=
Subject key identifier: 62:91:54:71:D3:30:11:93:8D:4C:F9:8E:88:60:30:53:7B:48:08:0E
Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial: 0185739F28AC136A55E8BA24A77E774E6CC8
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/YpFUcdMwEZONTPmOiGAwU3tICA4.roa
Signing time: Mon 02 Jan 2023 17:54:48 +0000
ROA not before: Mon 02 Jan 2023 17:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9120
IP address blocks: 212.97.136.0/22 maxlen: 22
212.97.144.0/20 maxlen: 20
92.43.88.0/21 maxlen: 21
185.238.192.0/22 maxlen: 22
185.221.246.0/23 maxlen: 23
80.70.8.0/21 maxlen: 21
2a04:3f80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:9f:28:ac:13:6a:55:e8:ba:24:a7:7e:77:4e:6c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Validity
Not Before: Jan 2 17:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62915471d33011938d4cf98e886030537b48080e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ee:ff:23:10:a1:92:68:e2:fa:e9:65:d8:55:
62:17:4c:93:1f:45:28:ae:ee:e0:2d:c4:43:55:22:
e9:2c:a2:db:8f:82:53:85:f9:68:a0:b1:7f:d2:2f:
c7:ee:1e:74:92:50:f9:6d:d9:a7:a6:3c:f2:1c:f1:
ff:ed:ea:32:94:fd:83:26:8e:a9:11:61:5c:0d:21:
e7:bc:38:94:04:0e:87:23:7a:89:02:ca:7d:2b:73:
df:4b:45:87:de:40:e2:3a:7f:49:9c:f0:c4:4c:23:
b2:78:b0:73:4d:c1:4d:f1:e4:a0:5e:76:30:e4:7c:
da:18:3d:42:3b:99:1a:33:42:aa:6c:ac:7c:c8:a1:
e9:01:31:1f:36:5b:0b:a3:1a:9b:bc:4c:6a:36:b9:
ab:05:69:b6:ae:80:f7:8e:4d:5a:1b:54:36:6b:b3:
98:7f:0d:2c:c3:b9:ea:f6:5e:38:62:3f:eb:23:58:
27:02:94:60:45:6c:fb:97:32:61:73:dc:77:37:8c:
ff:11:57:cb:32:c9:1e:66:27:0f:9b:70:97:a4:71:
35:a1:84:60:30:30:a2:06:aa:4b:91:69:27:c8:8b:
52:76:e9:73:52:4e:c3:68:ee:0e:40:e7:d6:e2:a5:
23:3c:e8:ec:53:d3:e1:8a:57:98:2f:ee:af:5e:85:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:91:54:71:D3:30:11:93:8D:4C:F9:8E:88:60:30:53:7B:48:08:0E
X509v3 Authority Key Identifier:
keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/YpFUcdMwEZONTPmOiGAwU3tICA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.8.0/21
92.43.88.0/21
185.221.246.0/23
185.238.192.0/22
212.97.136.0/22
212.97.144.0/20
IPv6:
2a04:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
1c:82:a7:41:bd:8e:33:a2:51:98:2d:67:7f:15:ee:9b:e9:64:
54:f1:ac:46:06:c9:e7:3a:ad:31:d5:1b:e6:1c:0c:17:2d:04:
3e:e4:2b:a1:0b:a6:a3:de:3d:0b:f5:37:5d:92:e3:9f:19:9f:
82:7f:e6:a6:3a:19:9e:8f:24:38:8b:09:13:35:13:55:6d:b5:
0a:cf:bc:e7:99:d0:42:98:97:a0:d1:44:fd:76:bd:75:b1:32:
53:43:7b:06:95:9b:b4:2a:95:32:80:8c:24:26:0c:cc:58:87:
5d:1f:3a:48:e0:a8:45:de:22:b7:78:3a:6c:fa:0e:2a:e2:41:
a2:c5:44:3b:e1:c9:3d:ee:33:a6:c2:6d:f9:aa:c0:3c:66:25:
9a:73:bb:18:16:d5:c6:bc:75:e1:ad:85:db:2d:dc:5c:6d:6d:
41:f7:6d:23:ba:47:58:2c:46:41:cb:43:85:1c:cb:25:66:08:
82:4f:80:de:67:74:1f:bc:74:8c:89:fa:7d:23:82:1b:31:99:
f2:16:93:86:ea:bf:50:57:e9:9e:77:1a:9a:03:4c:28:cc:4c:
99:88:a0:5a:e5:21:fa:14:53:82:09:0b:90:53:64:98:b4:a5:
f6:ec:48:75:bf:2f:94:c0:bf:bc:d0:51:22:47:e1:62:d1:0c:
8d:79:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:37 2024 by rpki-client on console.sobornost.net