Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/YdpoX85b6YBSP-hg3zGgutiq9qU.roa
File: YdpoX85b6YBSP-hg3zGgutiq9qU.roa (raw, json)
Hash identifier: QXGcSFQBol4AzMIYM2IwgGeKLC7e587LUnBqaBR3/QU=
Subject key identifier: 61:DA:68:5F:CE:5B:E9:80:52:3F:E8:60:DF:31:A0:BA:D8:AA:F6:A5
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 01856D8AF2619B224FEF723F606B7010715A
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/YdpoX85b6YBSP-hg3zGgutiq9qU.roa
Signing time: Sun 01 Jan 2023 13:35:00 +0000
ROA not before: Sun 01 Jan 2023 13:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213274
IP address blocks: 193.162.43.0/24 maxlen: 24
2a0f:cb00::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:f2:61:9b:22:4f:ef:72:3f:60:6b:70:10:71:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Jan 1 13:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61da685fce5be980523fe860df31a0bad8aaf6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:23:6a:4e:f7:d4:9e:06:b4:7f:11:49:64:
fe:f7:d6:e2:0a:c5:13:67:9f:69:7d:df:c1:52:66:
6e:dd:d2:11:bb:64:47:dd:31:77:a3:50:78:df:41:
82:c8:61:11:36:d6:71:03:06:5e:16:c8:f7:12:f9:
09:8d:94:f6:55:e1:1e:06:52:48:39:4b:2d:21:da:
23:a2:53:01:01:1f:17:45:8a:cb:7f:0d:b6:21:fa:
ac:92:b0:22:00:d9:be:d4:ef:6a:10:ce:01:06:2d:
d6:76:d6:3a:99:0e:e9:35:15:5b:60:e6:7d:48:12:
6a:ef:e2:df:e3:1e:98:69:87:e9:4c:e3:19:ee:0d:
5d:58:5e:8f:8f:ef:37:4d:26:c9:32:c7:9a:1d:a3:
93:61:79:a1:a6:8a:9c:f5:54:75:31:26:17:84:2d:
a4:fa:b8:89:cb:3c:c6:b5:95:fe:91:a9:a6:44:df:
70:d0:e7:95:5c:39:87:76:30:3f:21:32:63:08:f1:
6b:33:1d:6f:c8:04:32:47:9c:8a:72:59:58:ca:91:
b8:bb:17:99:97:4e:e8:0d:b3:76:92:33:a5:89:dd:
d0:2f:05:99:b9:5e:a5:a7:b1:af:f7:ad:e7:98:ee:
54:97:b3:db:96:b1:af:12:a1:35:11:70:1d:2f:84:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DA:68:5F:CE:5B:E9:80:52:3F:E8:60:DF:31:A0:BA:D8:AA:F6:A5
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/YdpoX85b6YBSP-hg3zGgutiq9qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.43.0/24
IPv6:
2a0f:cb00::/29
Signature Algorithm: sha256WithRSAEncryption
53:b9:54:ed:4c:e1:c7:d8:ed:44:cf:8c:71:bc:d6:2e:fa:b1:
06:e7:b8:a9:0a:e9:1c:ef:01:8b:55:d3:47:fd:93:6e:db:17:
01:82:85:57:81:a5:1a:54:9d:0d:de:e9:20:ef:e5:9a:96:3f:
87:86:63:0d:7e:31:69:9b:2b:fb:fa:ad:3e:0e:c7:7d:6d:a5:
57:78:a2:2e:8c:dc:4f:38:3b:22:95:49:bd:b5:94:0b:c3:42:
d5:e9:cd:99:8e:f7:b3:6f:e8:46:ba:1c:9d:db:4f:b3:dd:0f:
cb:d9:b7:68:77:b1:ba:b1:cc:7f:b5:18:71:1d:0b:c0:20:9b:
0b:b6:36:ae:62:ee:dc:ab:e0:59:00:d8:2a:0a:03:ee:3d:41:
5f:b1:c7:b9:15:cd:e6:a6:b8:d5:0e:5d:4b:c2:e9:e2:c9:ea:
03:2f:c0:e4:90:de:c5:05:02:14:7f:59:c8:88:9e:5a:15:e3:
80:d1:38:b5:5d:af:d0:97:50:15:59:41:0d:4c:e2:01:39:49:
17:3d:a0:ca:cd:64:48:dc:3a:f5:9e:2b:da:37:e9:62:9b:8a:
62:02:45:07:ec:e1:b7:79:71:32:7a:83:d3:4c:76:c0:a5:d2:
b3:ce:87:fe:c5:00:6e:5e:dd:ce:e3:55:b6:cd:77:65:db:51:
6d:bd:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:14 2024 by rpki-client on console-ams.rpki-client.org