Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/YdUKLp5LF5wKC53mbj5oeJAI7Rg.roa
File: YdUKLp5LF5wKC53mbj5oeJAI7Rg.roa (raw, json)
Hash identifier: Nb5cyOjstk4/4vCsAB9zIIdMKCg7kaLNhK8crhWyxIY=
Subject key identifier: 61:D5:0A:2E:9E:4B:17:9C:0A:0B:9D:E6:6E:3E:68:78:90:08:ED:18
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 018AFC39C1EFC7FF2B4E0A07DC5B9F8DE005
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/YdUKLp5LF5wKC53mbj5oeJAI7Rg.roa
Signing time: Wed 04 Oct 2023 19:45:58 +0000
ROA not before: Wed 04 Oct 2023 19:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212368
IP address blocks: 193.135.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Oct 2023 06:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:39:c1:ef:c7:ff:2b:4e:0a:07:dc:5b:9f:8d:e0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Oct 4 19:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61d50a2e9e4b179c0a0b9de66e3e68789008ed18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e7:56:8c:2d:95:c7:56:be:e8:b6:a0:bf:4a:
8c:8a:d1:a4:ce:3e:39:bf:39:b2:1d:fc:72:23:d2:
8f:cf:40:ea:29:8e:10:37:a3:ed:11:d9:b2:c5:3e:
eb:bd:a6:e9:6d:f7:60:8d:55:83:64:88:9d:49:3e:
6a:5a:06:4f:f5:a9:ce:8e:ca:e2:f6:d1:0c:83:24:
65:e6:7c:8d:70:f5:89:fd:04:0d:82:61:49:3e:fe:
ef:6c:2a:7a:11:36:01:96:49:54:51:9b:3a:65:f9:
46:78:04:cd:7c:be:8d:aa:ea:5a:16:c2:7c:a0:45:
65:92:75:96:82:0c:c7:a8:cb:8c:9f:66:a2:0e:6d:
2f:ca:12:5f:a8:cc:1e:0f:8b:a3:1d:1d:6e:a3:bd:
34:3e:e0:61:4f:30:c2:46:30:46:4e:8f:31:53:60:
f8:53:17:3d:6b:bf:a0:ab:41:63:bb:25:5b:49:ef:
ca:28:33:2d:13:f1:7f:71:93:ae:86:3e:d8:a4:56:
8d:6b:ed:8c:39:d5:1f:d5:4d:ab:ee:a4:b2:4a:17:
cf:f9:7d:dd:a9:65:5e:e4:57:43:6a:7d:f0:94:18:
c6:b3:62:0c:45:dc:02:29:3a:74:0c:e7:c6:51:cd:
1f:1a:47:4d:79:91:ad:a6:47:8c:cf:5e:e2:ce:26:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D5:0A:2E:9E:4B:17:9C:0A:0B:9D:E6:6E:3E:68:78:90:08:ED:18
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/YdUKLp5LF5wKC53mbj5oeJAI7Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.101.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8f:ab:f3:94:96:d3:ff:c5:f5:73:10:55:fd:74:a3:54:45:
ab:12:76:21:53:f5:14:f9:88:e6:04:17:b5:10:9f:1c:d8:61:
0f:20:f5:b1:38:06:a9:46:09:89:5b:50:9b:35:65:8a:e6:5e:
4a:63:52:6f:97:ae:30:2d:c5:b9:fa:75:70:65:69:95:7b:bf:
06:40:38:30:a8:dc:61:c0:d2:88:90:d1:b5:d7:4d:2f:28:67:
71:36:7c:4f:00:51:2a:72:e8:08:c6:45:b0:a0:3f:5d:5b:fb:
af:4c:42:36:c4:06:1e:23:7a:59:b6:eb:99:cf:72:54:dd:6e:
1b:90:13:43:41:da:74:5b:f6:b3:eb:38:8e:21:24:7d:cc:9f:
58:a5:fb:5f:89:82:8c:17:4a:d8:fe:64:62:e4:ec:ec:92:49:
d8:10:ce:b8:14:05:4c:a8:af:f4:ad:9b:6d:30:ea:ea:e9:6f:
cf:d5:24:ba:3c:56:42:2d:5d:63:fc:3c:93:61:54:df:d2:4e:
e4:89:0d:33:f3:b0:f0:17:ae:0f:22:8f:83:72:69:61:4b:9e:
be:6c:f5:25:d8:01:c1:3c:0c:2f:20:4d:0b:83:aa:43:38:78:
02:da:57:a4:f8:d3:7e:0e:dc:bc:a3:5a:88:27:a7:eb:b7:c6:
71:63:6d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:13 2024 by rpki-client on console-fra.rpki-client.org