Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/ycLzi9lup70_b8Zj4lkQPH4-shM.roa
File: ycLzi9lup70_b8Zj4lkQPH4-shM.roa (raw, json)
Hash identifier: /hZAwazE9ptVO1SnPfqxbp2yjicRE1LareQGb8TSlL8=
Subject key identifier: C9:C2:F3:8B:D9:6E:A7:BD:3F:6F:C6:63:E2:59:10:3C:7E:3E:B2:13
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 01856FF9421F22BCBE8FBDA84B72B3472205
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/ycLzi9lup70_b8Zj4lkQPH4-shM.roa
Signing time: Mon 02 Jan 2023 00:54:44 +0000
ROA not before: Mon 02 Jan 2023 00:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198996
IP address blocks: 194.107.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:42:1f:22:bc:be:8f:bd:a8:4b:72:b3:47:22:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 00:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9c2f38bd96ea7bd3f6fc663e259103c7e3eb213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:c1:ba:88:b1:1c:51:75:a7:9f:fe:35:55:
76:71:ee:7a:4a:a7:01:5f:2b:be:90:2d:bb:fe:ba:
86:a8:28:99:98:8d:0d:c5:7d:38:e5:8b:2e:c0:24:
98:fd:36:fe:8e:93:d5:4d:68:a5:e7:cc:0f:1a:a9:
4b:61:9b:f0:29:56:82:89:d7:bd:75:e7:66:0e:28:
53:01:9f:c7:d5:a2:84:49:6f:f2:7f:d4:0f:12:88:
2b:75:ab:d3:bf:b3:2e:18:58:41:91:8d:dd:20:d1:
98:7c:cc:6a:98:02:30:6b:0c:5c:79:87:c4:e4:32:
31:b8:9d:bc:db:01:c4:bc:67:56:c2:a9:60:e7:59:
c8:95:b3:33:01:f3:5b:d7:e1:dc:25:d5:ee:d8:e5:
98:d5:39:bc:51:04:8c:0b:31:7c:41:8e:7d:1c:42:
a3:ab:a2:b0:c3:ef:d7:1a:84:1b:0b:42:08:16:a6:
bd:5d:26:d0:85:68:28:7c:e5:a6:3d:a3:bb:9f:f6:
10:d4:e0:60:35:4f:e2:a4:40:7f:e9:0c:85:60:31:
53:dd:c5:6e:99:de:ba:ce:5e:16:cb:dd:b5:4e:ea:
eb:87:ee:3e:17:da:e8:60:54:24:53:58:b3:3a:0a:
73:22:f9:4e:0b:cc:3e:a2:7f:27:c8:c3:48:03:ef:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C2:F3:8B:D9:6E:A7:BD:3F:6F:C6:63:E2:59:10:3C:7E:3E:B2:13
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/ycLzi9lup70_b8Zj4lkQPH4-shM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.164.0/24
Signature Algorithm: sha256WithRSAEncryption
af:13:6c:35:7d:58:18:ef:32:c9:f3:41:e7:b9:30:98:36:4d:
88:b8:18:eb:84:51:0e:22:74:d1:8d:34:0b:ad:57:58:17:85:
78:83:05:d9:cb:5b:95:11:ea:a1:81:d9:26:8b:b7:86:f3:6a:
ed:7c:2d:4f:90:76:a6:d8:73:9e:5e:db:37:d7:c2:91:ea:14:
4e:6f:f0:69:99:e1:ad:bb:25:56:aa:b4:b8:22:45:bb:24:2c:
0a:c3:68:3b:83:f0:60:5e:01:2b:5a:bf:ba:62:dc:5a:f7:7c:
6a:ab:6a:dd:87:f9:82:3c:a0:73:ae:65:52:aa:db:c7:53:7e:
5c:2d:86:da:d8:df:01:3a:67:64:5c:34:66:6d:7e:29:41:b0:
45:a8:82:ce:03:32:9f:80:28:3b:c2:b5:db:69:a7:1a:26:3b:
c8:ac:41:17:29:29:3e:48:8f:cd:a8:f6:44:73:8f:78:83:df:
a5:d0:0c:84:d5:4e:1e:91:60:a9:58:9f:d9:3b:1b:b2:79:8c:
d2:c1:68:fb:46:b5:00:09:ed:26:56:ab:1d:b8:51:2c:ad:d4:
84:a4:7c:b5:a5:48:5a:2c:59:0a:32:38:ec:40:0f:7a:56:bd:
fb:4d:59:27:82:6a:e5:9e:6b:3c:57:a6:ff:bb:61:90:92:39:
8d:73:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org