Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/yRoF8ZjfcVVjsFm4_x9YBCAsWos.roa
File: yRoF8ZjfcVVjsFm4_x9YBCAsWos.roa (raw, json)
Hash identifier: BnBQsLJ/YpuKL5Nx+1CXizo4mwwtOyc9x49abN9QwSA=
Subject key identifier: C9:1A:05:F1:98:DF:71:55:63:B0:59:B8:FF:1F:58:04:20:2C:5A:8B
Certificate issuer: /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial: 018572D5C363E02690AD80BDBE1976F206C5
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/yRoF8ZjfcVVjsFm4_x9YBCAsWos.roa
Signing time: Mon 02 Jan 2023 14:14:49 +0000
ROA not before: Mon 02 Jan 2023 14:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56540
IP address blocks: 188.244.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Jun 2023 02:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:c3:63:e0:26:90:ad:80:bd:be:19:76:f2:06:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Validity
Not Before: Jan 2 14:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c91a05f198df715563b059b8ff1f5804202c5a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:99:e1:37:bf:d9:7c:e2:f0:5b:72:2b:b5:c9:
1d:50:2e:aa:01:4d:78:72:d7:47:8d:09:be:41:66:
0d:c5:92:2f:91:92:71:46:39:0c:00:7a:12:94:57:
5c:5a:39:a9:77:67:fd:29:f1:f5:83:3c:cd:44:25:
05:d9:e9:e0:df:bc:a4:a0:11:59:88:39:4a:d9:2e:
33:24:81:bd:57:36:ea:ee:f5:2e:57:b8:19:e0:df:
c2:b3:5f:aa:9c:3e:46:7b:98:58:62:79:33:c9:40:
28:07:7c:2b:ac:34:a0:bf:d7:84:d4:36:dc:fe:cb:
1f:2c:55:1a:8a:d2:bc:60:2f:a5:fc:b2:bb:93:e3:
03:97:1f:1c:6a:c0:ff:59:65:3b:cd:71:36:c9:80:
15:6d:b6:8e:43:21:09:68:d6:f7:ed:3b:7c:ce:26:
44:ce:90:ee:2d:1f:0e:3d:e9:9c:30:b4:63:9b:a4:
52:38:09:88:07:98:23:20:cc:44:3e:3b:a2:03:23:
5d:f8:4b:90:e7:2c:70:3a:37:0a:e1:b6:ba:65:f7:
53:21:9a:10:13:63:ec:68:9a:8e:84:90:0a:fe:41:
d0:1e:3f:53:e4:e6:e8:7d:f5:64:c4:7c:1f:3e:a4:
59:9c:98:ab:0c:5f:1d:74:c0:d2:be:a0:94:3b:43:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1A:05:F1:98:DF:71:55:63:B0:59:B8:FF:1F:58:04:20:2C:5A:8B
X509v3 Authority Key Identifier:
keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/yRoF8ZjfcVVjsFm4_x9YBCAsWos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.114.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:30:cc:d2:9d:9f:03:a4:cb:7f:10:c1:a9:40:c8:e6:0c:6e:
ab:c9:bf:57:2a:e7:88:c1:12:93:b4:d9:46:48:97:07:de:90:
7e:00:0b:6b:08:54:76:84:39:fd:72:16:2f:c7:fa:2c:d1:32:
71:80:e1:cc:b5:90:a6:3c:cc:4b:a0:a9:90:5e:90:9e:eb:a5:
f0:13:6c:56:04:b0:1e:ef:c3:62:37:57:95:2d:e9:71:81:a0:
d7:45:55:5a:01:e4:e3:c4:69:bc:5f:cc:c3:2b:cf:33:6f:46:
4a:0e:ac:31:bc:59:4c:e5:7e:96:0a:c3:d5:f0:17:67:72:73:
1a:da:da:58:61:86:aa:a4:e2:7c:9c:03:0d:00:df:f7:a5:5c:
23:87:08:4f:47:eb:b0:48:c4:b0:52:8c:8b:ea:7d:a9:e9:37:
4a:c8:ad:de:6e:8d:c8:03:da:dc:a3:c2:6a:ea:e6:56:36:21:
6d:a9:68:35:6b:83:3b:5f:7c:2d:41:5d:13:84:54:1a:42:af:
a4:46:fb:17:d5:08:27:3d:c2:88:a5:63:48:61:4d:ea:a6:66:
e0:06:1c:98:7c:42:28:80:45:3f:bc:a8:e2:23:30:87:31:01:
07:5a:33:a0:7c:c6:7a:d8:22:e6:47:e8:6c:76:d7:74:f5:70:
82:0d:73:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:34 2024 by rpki-client on console-fra.rpki-client.org