Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/yzrkcoZPLUOfm6we7TDhXKr_Coo.roa
File: yzrkcoZPLUOfm6we7TDhXKr_Coo.roa (raw, json)
Hash identifier: 9KPw2QoA1Bg4R8juurVgt7DMeXhh4vwOVOp0ilCOu6M=
Subject key identifier: CB:3A:E4:72:86:4F:2D:43:9F:9B:AC:1E:ED:30:E1:5C:AA:FF:0A:8A
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEECE9F0B3318073BD92AF6F996E270
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/yzrkcoZPLUOfm6we7TDhXKr_Coo.roa
Signing time: Sun 01 Jan 2023 06:04:50 +0000
ROA not before: Sun 01 Jan 2023 06:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201373
IP address blocks: 193.192.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:ce:9f:0b:33:18:07:3b:d9:2a:f6:f9:96:e2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb3ae472864f2d439f9bac1eed30e15caaff0a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6c:87:9b:5c:f0:d5:9e:8b:a9:0a:7e:4a:1a:
17:60:60:c7:bd:02:03:a7:65:6f:72:34:1a:9f:d7:
5b:96:6a:15:47:25:2a:64:64:6d:56:2f:aa:00:15:
f4:9b:b1:9e:78:fa:85:95:8f:74:1e:b7:20:4c:46:
83:46:73:26:4b:12:4b:b5:ff:ad:9c:53:b6:b6:0e:
f0:31:65:5b:f7:ad:a3:d5:15:15:9f:c6:37:00:cd:
e0:0e:e8:2b:8a:7b:af:04:d1:96:4d:b1:a4:72:0e:
b5:18:39:49:f3:e4:44:0d:7e:ab:79:36:f0:3d:c1:
a3:c5:93:c5:1e:dd:72:cc:8a:76:24:31:b8:4b:dc:
b9:cd:b1:56:7c:48:a5:a6:17:81:e4:7d:da:cc:7f:
c0:5f:74:fc:09:6c:37:0c:12:ef:ec:b0:f1:50:e9:
87:88:5e:db:c1:ac:a6:47:36:fd:f9:a8:20:c3:98:
b4:76:b3:44:2e:ba:b3:a7:42:40:90:78:e7:fc:23:
5a:9f:8a:a2:8a:03:21:ef:35:7a:5b:46:3f:0d:89:
04:95:88:8f:b2:7d:0e:ca:ab:51:e8:cd:01:1f:a6:
bc:7b:e2:ef:03:5e:9b:52:ae:2e:4c:3e:b4:36:a4:
fa:05:ba:81:88:16:c6:50:f2:1a:65:db:4a:12:ef:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3A:E4:72:86:4F:2D:43:9F:9B:AC:1E:ED:30:E1:5C:AA:FF:0A:8A
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/yzrkcoZPLUOfm6we7TDhXKr_Coo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.190.0/24
Signature Algorithm: sha256WithRSAEncryption
04:8d:d2:bc:20:58:9e:de:fa:6e:6f:30:27:9e:3a:e0:03:29:
ff:d9:bc:ad:de:51:98:2b:5d:94:87:15:f1:ac:64:53:15:0a:
83:9c:88:ca:d2:53:cd:18:90:4d:10:76:35:a5:b8:d3:d2:a8:
bd:2f:58:c8:bd:d9:d7:e1:d9:9f:a6:37:ae:c3:2a:f6:c0:96:
82:d3:c1:63:60:06:3c:5c:29:17:b0:a1:34:2e:26:45:fc:43:
63:21:49:de:24:55:3b:eb:bb:6b:54:0c:71:6f:7c:14:f2:d9:
e2:a1:31:4d:33:e8:c3:5f:4c:91:70:67:a6:43:d7:6e:85:23:
4a:ab:9a:94:ce:84:42:61:a6:b5:d4:24:b3:2b:2b:e7:b9:67:
2a:92:3a:79:3d:5b:8f:d3:59:d0:08:ee:1e:61:51:f4:8c:db:
6e:fa:4b:2c:14:27:8b:58:7f:9e:92:d6:4b:40:12:ec:d9:f2:
02:15:86:a0:77:d5:a3:d7:45:d7:35:3f:0f:49:26:f0:cd:88:
63:3d:f4:a8:90:f1:b0:53:2e:3c:e0:ff:02:7f:c9:b0:40:c7:
1f:c4:71:b3:24:75:53:15:d3:52:cd:b1:9c:ae:98:a9:ac:cb:
50:61:db:d8:50:08:68:8a:9f:91:a4:b0:e3:84:73:fc:db:1d:
a1:05:d6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org