Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/ynK6502Ki9Kjkld9q8L0-lPcYm0.roa
File: ynK6502Ki9Kjkld9q8L0-lPcYm0.roa (raw, json)
Hash identifier: Fp3g2Bx+5VtenBydPbvFPNiY79t71G7qJ3UR1q7OBfo=
Subject key identifier: CA:72:BA:E7:4D:8A:8B:D2:A3:92:57:7D:AB:C2:F4:FA:53:DC:62:6D
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 01857082B4C3AFB68E7A4C14606D3B27B01B
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/ynK6502Ki9Kjkld9q8L0-lPcYm0.roa
Signing time: Mon 02 Jan 2023 03:24:51 +0000
ROA not before: Mon 02 Jan 2023 03:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 194.173.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:b4:c3:af:b6:8e:7a:4c:14:60:6d:3b:27:b0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Jan 2 03:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca72bae74d8a8bd2a392577dabc2f4fa53dc626d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:42:16:8a:b8:cc:0d:63:2c:00:2a:05:1c:
fb:39:95:0b:1c:af:28:f6:60:89:9f:9c:4f:84:60:
7c:56:39:6e:df:be:ca:08:ec:a8:4c:4f:ed:a7:69:
4c:6f:a7:49:8d:0b:c4:7b:d7:2f:89:05:c4:a5:24:
4e:d5:6e:b8:0c:af:30:c1:b0:0d:3b:7d:34:df:7a:
d3:2c:77:a4:6b:bb:eb:73:6e:54:e0:fb:4b:84:02:
00:2d:cd:e0:70:a2:8a:28:8e:3a:27:8e:ca:b1:fa:
97:a0:f9:85:e8:2c:b9:bf:36:fc:33:7a:ff:df:91:
c0:f7:1f:9e:69:fa:41:01:7a:68:12:f9:e7:1b:98:
5b:a1:f9:d9:92:05:ac:f2:e2:6d:76:db:11:ca:c0:
28:67:8a:68:0e:3e:eb:b7:5a:56:54:a6:75:20:aa:
d1:57:f5:0b:be:a2:1d:b5:19:d7:17:0b:12:6e:ee:
e2:bd:26:fa:b6:57:92:ba:b8:30:b1:01:81:90:31:
fc:db:8d:b8:c7:a2:d9:a6:47:97:08:52:c1:be:d8:
c4:dc:19:bf:31:d3:6d:03:84:5c:99:b1:54:e7:32:
79:6a:a3:03:b2:b5:1e:32:65:57:07:34:12:d2:3e:
a6:4c:4a:eb:f9:13:53:41:6e:34:96:9d:21:76:2c:
e7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:72:BA:E7:4D:8A:8B:D2:A3:92:57:7D:AB:C2:F4:FA:53:DC:62:6D
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/ynK6502Ki9Kjkld9q8L0-lPcYm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.173.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:89:5e:04:0a:0c:a9:a5:16:61:28:7d:c9:b7:4d:4b:7e:50:
41:30:6a:c1:2e:09:0c:a9:ad:bc:07:a7:27:5b:e9:6f:c9:5d:
1c:65:ca:70:d4:e9:c6:b0:8f:0f:25:a8:6f:23:e7:07:a0:cf:
87:67:20:86:a9:15:c6:05:63:55:7f:4a:ca:93:cd:8d:1f:ec:
2b:17:5d:46:8a:32:1c:c8:b1:a9:fc:6d:b1:c4:dd:6d:90:48:
4e:e1:9b:31:58:67:ae:f5:aa:f8:e8:0c:fc:67:c1:36:33:06:
a3:e3:0f:cb:d3:59:8f:88:ab:51:55:0e:e3:ba:9f:4f:72:d9:
6a:20:5a:27:24:b0:95:83:99:6b:e8:da:bf:ee:b5:ac:d9:2a:
b7:be:51:7b:4c:88:69:22:24:71:de:d3:73:2e:38:05:d0:5f:
b8:c9:b4:e8:2d:1c:3e:0e:c7:a1:7b:89:03:54:9b:a4:16:56:
29:24:c4:5a:16:7d:30:a4:01:8a:4b:2d:71:2d:bf:8f:70:17:
29:42:fb:10:8b:87:d9:0e:14:49:61:a7:de:61:78:8b:5f:15:
24:c1:16:cd:6d:f3:83:90:25:6b:af:0c:b1:3c:3c:98:49:97:
88:19:5c:70:57:43:47:6f:9d:26:40:a5:4d:f6:28:66:3e:8a:
44:da:7a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-fra.rpki-client.org