Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/YsC2MY4pRCh1Z_kGzU55LoyGyaU.roa
File: YsC2MY4pRCh1Z_kGzU55LoyGyaU.roa (raw, json)
Hash identifier: XeIoC1dIxPEGfipKqsRJ/vC7L+WOGRbvVPOuUCz9tmA=
Subject key identifier: 62:C0:B6:31:8E:29:44:28:75:67:F9:06:CD:4E:79:2E:8C:86:C9:A5
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 01856D8AFDE0B49F524A9A05A3E9640616D4
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/YsC2MY4pRCh1Z_kGzU55LoyGyaU.roa
Signing time: Sun 01 Jan 2023 13:35:03 +0000
ROA not before: Sun 01 Jan 2023 13:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44539
IP address blocks: 212.66.32.0/20 maxlen: 24
212.66.56.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:fd:e0:b4:9f:52:4a:9a:05:a3:e9:64:06:16:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Jan 1 13:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62c0b6318e2944287567f906cd4e792e8c86c9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:c2:4c:99:28:58:b5:ba:91:a1:84:6b:45:
47:5a:97:55:56:90:7f:0f:ec:12:60:f8:3a:b2:0a:
5b:62:73:5c:d2:c3:2c:5c:e7:c8:82:61:7c:3f:d8:
d5:26:90:e1:dc:d0:60:53:d0:64:89:4b:da:10:4c:
9e:c0:f3:87:68:a0:a0:86:dc:b6:86:02:6a:a4:aa:
2e:f0:75:fc:fc:ce:26:e3:45:73:ca:fb:d8:9e:0f:
e4:07:82:42:46:63:81:6c:b1:a2:28:09:5b:81:a5:
84:c7:52:22:f2:57:95:1d:cb:88:9f:5f:c3:50:f2:
3d:21:e8:e7:fe:33:7e:13:bd:59:79:71:f6:ed:64:
1b:77:f8:08:14:18:f3:e7:9a:f0:85:50:c4:0e:86:
90:3a:d9:d2:15:9b:2b:fe:04:e7:4d:6a:92:7a:49:
b1:22:89:bd:f0:42:31:19:1d:db:e7:b8:07:6a:b8:
da:c3:70:71:1b:6a:5e:77:5d:91:2e:97:9a:90:f6:
9f:28:86:3e:74:f0:5e:22:c1:b7:d8:92:90:64:a6:
4c:37:b9:75:10:0d:c9:02:97:99:d4:e1:32:b7:e9:
ae:3d:2b:3b:09:6f:b9:f0:c8:32:e7:f3:ed:1a:e7:
41:19:78:8a:38:65:1e:8c:26:42:50:35:bf:b8:cd:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C0:B6:31:8E:29:44:28:75:67:F9:06:CD:4E:79:2E:8C:86:C9:A5
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/YsC2MY4pRCh1Z_kGzU55LoyGyaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.32.0/20
212.66.56.0/21
Signature Algorithm: sha256WithRSAEncryption
33:18:70:17:48:b2:4c:bf:41:02:c9:c7:6a:2e:e6:18:01:51:
f7:ae:d8:3b:16:85:87:3c:8b:42:5f:29:ab:4d:a2:44:51:09:
e1:3d:3e:b1:9a:85:2f:ff:de:6c:cf:6b:69:92:3d:8a:71:19:
c7:9a:8c:2b:3d:7b:6f:1b:31:70:5e:c4:bc:c7:0f:7f:64:ba:
09:c3:57:1c:74:91:48:e5:0e:73:7a:3d:b4:8b:1e:d7:09:06:
55:e8:3f:a9:d8:b9:c5:75:ef:a5:5c:09:b0:6c:22:f1:a0:27:
13:f0:65:df:a4:4f:23:d9:12:10:ff:2c:9a:9f:ac:35:92:3f:
7e:8a:69:46:e6:ee:30:3e:d4:97:31:f4:bc:55:7a:ec:1a:4c:
35:ce:34:84:ce:f9:43:35:54:90:8d:d5:4a:9c:c9:ab:a7:52:
29:c4:f4:66:ae:ff:76:ee:1d:b0:c3:8d:0a:cc:2b:09:54:81:
98:48:ad:0d:7d:f9:a9:2d:19:51:bd:59:cf:df:0a:4a:a5:12:
45:6e:01:0f:66:1b:89:e4:53:3c:c4:69:fa:2c:70:92:79:49:
20:73:5d:ee:8b:17:d0:20:c7:c8:28:1c:34:6a:bf:29:9b:cf:
a1:30:f5:6b:fc:75:fe:20:58:11:ed:74:6f:ae:a9:10:23:56:
e5:02:cd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:39 2023 by rpki-client on console.sobornost.net