Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/YCt8MU68Nqs59zCEMfIPfQdZGSo.roa
File: YCt8MU68Nqs59zCEMfIPfQdZGSo.roa (raw, json)
Hash identifier: C6RckZJI0vqSAiXu557X+q01wLOp76y+EeKQ+QY4PXw=
Subject key identifier: 60:2B:7C:31:4E:BC:36:AB:39:F7:30:84:31:F2:0F:7D:07:59:19:2A
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 0189DE6FF565AFD41E66B448EE3B0D458B86
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/YCt8MU68Nqs59zCEMfIPfQdZGSo.roa
Signing time: Thu 10 Aug 2023 07:53:46 +0000
ROA not before: Thu 10 Aug 2023 07:53:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 194.213.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:6f:f5:65:af:d4:1e:66:b4:48:ee:3b:0d:45:8b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Aug 10 07:53:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=602b7c314ebc36ab39f7308431f20f7d0759192a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:60:03:72:30:57:3a:c4:f6:05:60:4a:20:
90:8e:56:a0:7b:27:f7:0e:07:d6:74:42:78:20:3b:
ec:18:3a:0f:45:b0:7a:99:46:3a:69:7a:18:e0:e1:
f0:49:fd:ca:c1:c0:f1:27:2d:b4:1e:ef:93:79:20:
cb:51:df:09:3d:4f:c9:b0:61:36:42:f0:53:e9:f4:
a4:6b:a4:19:df:86:05:da:11:ad:0e:df:c5:24:97:
0c:f2:ed:24:6f:6c:66:27:97:e1:3b:45:d5:45:91:
30:d5:9b:46:7b:f0:fa:a0:4a:56:f5:9b:de:38:50:
ec:5a:c1:43:1a:67:9c:48:dd:c3:e0:3f:50:1d:35:
3c:bc:63:a7:47:aa:7c:c6:a8:d7:8a:a8:92:03:06:
9f:71:85:bb:e1:9d:54:04:3a:8d:2f:b9:93:c6:fa:
58:a2:7b:ad:c6:95:6f:5b:71:28:cf:39:bd:f7:5c:
4f:4f:e6:de:6f:40:77:09:f8:86:40:ca:e4:18:98:
34:d1:31:22:cf:29:b3:ea:c3:13:d7:07:6b:92:bb:
0d:3e:a9:69:64:5d:95:cd:8e:7d:e0:99:8d:33:8d:
69:22:e6:57:b4:72:ef:a1:d1:d9:f2:95:de:70:24:
f8:5e:92:ab:8f:8e:69:fa:cb:3a:a0:2d:dc:db:3a:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2B:7C:31:4E:BC:36:AB:39:F7:30:84:31:F2:0F:7D:07:59:19:2A
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/YCt8MU68Nqs59zCEMfIPfQdZGSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:02:09:8d:48:8f:07:39:66:d4:c5:75:b1:4a:76:8c:63:c2:
fc:31:77:a0:6b:57:80:50:f5:ac:89:8e:75:93:50:32:57:af:
bb:58:03:6a:4a:94:b9:ec:ec:98:24:0d:bf:95:f9:ae:4f:b5:
67:23:e2:37:ce:62:68:c7:c1:51:2e:d6:fb:60:ba:76:14:0f:
c7:f9:8e:bf:11:77:19:80:1b:61:b1:92:8b:95:a0:8c:52:a0:
18:be:6d:00:f9:14:20:a4:ca:8d:26:39:26:3a:1e:47:d8:4c:
50:ff:7d:82:cf:14:38:09:3e:be:31:cc:85:fb:6f:6c:71:a2:
d0:a2:17:c7:09:a8:3f:67:c0:9b:07:ac:17:0f:96:6a:33:9d:
90:81:f4:a0:5d:55:95:9d:10:ff:11:03:bc:28:bb:8b:88:4b:
48:3d:8b:03:ea:dc:8d:65:4e:bf:91:f5:41:30:b9:43:6f:13:
18:6a:d4:8a:65:d5:6a:2f:16:61:23:7e:d4:59:bc:d3:69:b8:
ff:61:31:6b:e7:49:0d:d9:58:09:d3:8a:e2:26:aa:27:a6:9f:
b7:69:45:b3:f2:17:e9:a7:b4:25:da:26:db:9b:e8:6f:2c:bc:
11:83:fa:0f:2d:7d:8c:bc:27:5d:1e:cc:d2:b6:58:c1:c9:33:
2d:a5:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:59 2024 by rpki-client on console-fra.rpki-client.org