Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/yOkp-WGxZe_8o5gWFY8ztCq04kQ.roa
File: yOkp-WGxZe_8o5gWFY8ztCq04kQ.roa (raw, json)
Hash identifier: koe7GEMOZzIEKtWFLF05TOZR+gv1VWHeuzAhBLm7KHI=
Subject key identifier: C8:E9:29:F9:61:B1:65:EF:FC:A3:98:16:15:8F:33:B4:2A:B4:E2:44
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018B7292A95540B9985ACC7C3A5681A71D4E
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/yOkp-WGxZe_8o5gWFY8ztCq04kQ.roa
Signing time: Fri 27 Oct 2023 19:18:15 +0000
ROA not before: Fri 27 Oct 2023 19:18:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398355
IP address blocks: 185.255.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Dec 2023 06:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:72:92:a9:55:40:b9:98:5a:cc:7c:3a:56:81:a7:1d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Oct 27 19:18:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8e929f961b165effca39816158f33b42ab4e244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6a:b5:d3:1a:9f:73:8d:e8:19:0b:88:02:3e:
27:00:ba:84:f0:39:f6:15:e3:6d:6f:d2:7b:9c:15:
90:25:c2:50:02:25:a7:4c:be:37:bb:1e:c6:4b:af:
26:dd:bb:78:b8:ff:a3:85:78:76:a6:3b:3f:f1:a6:
92:0e:0f:9d:f2:be:32:38:12:78:6d:90:a8:48:a2:
ee:c1:f1:b6:ed:24:f7:11:7b:3f:4d:34:df:cb:b6:
c3:57:21:66:ec:49:05:50:09:1a:a9:f5:7c:43:bc:
5c:e1:16:dc:e2:b5:5c:09:c6:4d:36:24:8d:3a:e6:
e2:b0:6c:c6:d2:ba:e9:d5:0a:d1:7f:e6:95:7a:31:
b9:ec:b7:aa:c0:f3:3b:42:97:d0:9b:61:c3:23:e1:
9a:94:91:9c:a4:4c:3e:2f:6d:61:29:6b:38:5c:f1:
cd:26:76:a8:3c:81:65:71:c9:c8:85:98:2c:5c:a3:
a4:67:bf:1e:b5:9b:f7:c6:24:db:9a:78:3e:9c:b4:
9f:9a:ed:89:30:3d:24:ea:df:73:fe:0d:8a:ef:0e:
37:0b:b5:3e:f6:d2:20:6c:c5:e4:8b:c6:2e:b3:5b:
1d:3e:8b:f4:3e:3d:28:40:76:71:38:65:e3:31:ce:
4f:1b:20:e0:d4:12:28:c6:0e:73:d4:54:71:61:eb:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E9:29:F9:61:B1:65:EF:FC:A3:98:16:15:8F:33:B4:2A:B4:E2:44
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/yOkp-WGxZe_8o5gWFY8ztCq04kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.7.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b2:ae:be:aa:b4:3a:33:35:b0:92:c5:21:27:eb:be:7f:02:
dc:c6:3c:12:ae:c4:f5:b5:94:43:65:4c:73:35:00:86:7f:c9:
62:6a:3c:93:b3:8e:b6:92:1b:69:1a:af:27:36:91:ae:4b:47:
82:0e:fd:ab:97:c6:c3:b6:f0:b4:e0:93:c5:f9:bf:e1:05:57:
d6:28:1d:e4:0d:c4:1c:5c:ee:63:63:2e:e9:f5:98:4b:d1:4a:
5f:c6:66:7d:cd:15:8c:e5:a3:d5:46:13:e6:78:1d:15:39:e3:
89:25:c1:ee:3f:18:86:17:f7:a6:94:22:b2:69:61:a4:18:e5:
b4:b5:73:30:7d:2e:5b:55:d5:6f:df:6c:ed:2b:cb:85:8d:43:
91:27:26:15:67:2d:38:43:b9:83:bc:cb:ab:a4:c5:cf:53:a1:
17:9a:f3:32:19:c4:36:2d:09:18:57:6c:ec:6e:fe:9d:9a:39:
a3:a4:14:8e:d7:fe:d3:17:b7:ff:d9:8f:ca:b4:b1:c1:ba:8e:
d8:12:75:bc:d6:5b:61:31:2f:f0:78:17:ca:ca:9e:06:0f:b3:
82:a5:5f:8b:fa:67:0d:12:2a:ae:e5:07:7b:b0:4e:62:5e:00:
0e:18:b8:5f:35:e8:1b:8d:3e:17:d5:7e:80:2e:e7:31:0a:1b:
3b:21:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org