Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YlEWfDGpn_r4fjqr1ZFenT9DhJY.roa
File: YlEWfDGpn_r4fjqr1ZFenT9DhJY.roa (raw, json)
Hash identifier: mXYTzSiVu0ScjdKDt1evVRUsB+1nb1bgGU091BQp3B0=
Subject key identifier: 62:51:16:7C:31:A9:9F:FA:F8:7E:3A:AB:D5:91:5E:9D:3F:43:84:96
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01856C41603C0F1FC18DDC24720CC524D8CB
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YlEWfDGpn_r4fjqr1ZFenT9DhJY.roa
Signing time: Sun 01 Jan 2023 07:35:01 +0000
ROA not before: Sun 01 Jan 2023 07:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57944
IP address blocks: 194.5.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:60:3c:0f:1f:c1:8d:dc:24:72:0c:c5:24:d8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 07:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6251167c31a99ffaf87e3aabd5915e9d3f438496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:bd:4c:b5:4b:9d:08:17:40:68:e0:2f:b3:
fe:4b:a4:7d:12:dc:54:6b:98:35:fa:1e:d0:10:82:
43:67:bc:70:c7:fa:07:d0:92:24:a6:8c:24:c1:40:
3b:b8:3b:b4:17:43:3f:a4:21:79:0d:3e:9e:13:72:
da:c7:08:36:1a:c5:00:d7:c1:9d:27:fa:97:31:f0:
ae:b8:62:8a:ac:4f:65:a8:d6:cb:11:ad:bf:d3:a4:
4b:96:54:74:0d:61:6d:0f:13:f9:63:97:b0:75:83:
b0:4d:0d:e7:17:c9:1f:9b:3b:07:94:44:28:da:3c:
c6:64:44:09:61:e9:fa:81:be:8e:50:04:bf:33:e7:
87:b9:44:c1:8b:b4:65:89:36:96:da:9a:b2:0a:8c:
14:b0:14:ed:29:54:37:7a:3b:82:41:c7:f5:bb:b5:
dd:19:10:9a:e9:15:68:00:d4:2e:49:f7:e9:29:95:
94:0e:78:7d:8f:95:3e:9c:06:51:3f:dc:58:6a:51:
11:8f:3f:4c:04:7d:f0:e8:47:1f:c5:e4:51:ea:3d:
c6:28:b0:73:1f:95:30:5e:3c:b7:b4:0a:8a:01:f8:
18:77:2e:c5:c3:08:70:d9:19:ff:09:8b:57:c4:53:
e5:1e:87:10:b9:78:ca:4f:7e:86:94:b1:16:6b:c5:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:51:16:7C:31:A9:9F:FA:F8:7E:3A:AB:D5:91:5E:9D:3F:43:84:96
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YlEWfDGpn_r4fjqr1ZFenT9DhJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.96.0/24
Signature Algorithm: sha256WithRSAEncryption
35:36:e4:9c:97:33:25:23:da:cc:df:1f:38:20:09:0e:13:ef:
c4:99:2e:c1:2f:c0:9d:39:4b:01:55:63:14:39:60:9c:84:1d:
7b:9c:de:8a:5d:4b:e1:7d:f9:8b:82:a1:db:2d:24:d9:6c:5b:
02:5a:76:f6:c2:a9:97:d1:39:ce:8a:49:46:5a:b9:36:91:e1:
a1:26:0f:19:4e:e2:c1:e3:f8:38:7c:17:37:9a:43:ba:49:a9:
9e:f0:3c:cb:ce:61:02:5f:76:a0:35:fe:88:03:35:ca:40:6f:
49:e2:fa:1e:3b:2e:6f:18:d4:1f:13:3e:03:0d:46:72:d1:09:
94:78:4e:18:0e:cb:9b:bf:67:fa:f5:c9:70:f0:97:ed:f8:b5:
03:da:98:c7:fc:4d:6d:10:ba:4a:5a:45:c8:00:1c:df:d7:e3:
b2:01:d1:c6:3b:0d:e3:a1:e7:a2:06:80:13:b5:20:10:1b:01:
65:08:f6:3e:36:e4:87:60:fe:ff:4d:98:bf:52:38:6a:8d:3c:
2a:1b:c6:5f:df:ce:00:e1:f9:9c:ae:3a:d9:1c:18:24:54:94:
0f:c3:28:f5:00:ca:69:70:73:48:18:dc:66:04:78:1a:d7:21:
ea:db:c5:e8:23:c2:e2:6e:bb:aa:71:6b:ec:f1:1e:0f:80:f4:
f2:bf:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:20 2024 by rpki-client on console-fra.rpki-client.org