Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/jYlyBoqsgpzeu-5c9iqv0ulD5Uo.roa
File: jYlyBoqsgpzeu-5c9iqv0ulD5Uo.roa (raw, json)
Hash identifier: Cxok8zCviJxjHIgVd525d2jf3ZAFd421ni1ixKkZkUA=
Subject key identifier: 8D:89:72:06:8A:AC:82:9C:DE:BB:EE:5C:F6:2A:AF:D2:E9:43:E5:4A
Certificate issuer: /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Certificate serial: 0186CBC50FCFF8D95B3C13E26637207E8ACB
Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/jYlyBoqsgpzeu-5c9iqv0ulD5Uo.roa
Signing time: Fri 10 Mar 2023 13:45:34 +0000
ROA not before: Fri 10 Mar 2023 13:45:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212933
IP address blocks: 193.200.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:c5:0f:cf:f8:d9:5b:3c:13:e2:66:37:20:7e:8a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Validity
Not Before: Mar 10 13:45:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d8972068aac829cdebbee5cf62aafd2e943e54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:24:47:b1:0a:e2:8e:5f:85:13:7b:aa:35:
7a:e5:ea:2a:11:8e:60:a1:17:71:0a:13:06:05:a6:
a6:1f:ef:4c:13:f6:56:07:e5:a1:47:5b:53:68:43:
08:7c:24:67:96:59:8e:dc:08:11:7b:bf:46:92:05:
5e:ce:bd:72:e8:f3:10:fb:76:82:1c:ee:46:53:92:
a1:67:9d:07:6e:d7:60:95:7e:eb:94:93:49:d2:b9:
59:bd:56:b0:6a:95:8f:c3:ed:dd:68:f7:5e:db:17:
32:b7:c8:a8:3e:8a:2d:39:49:82:00:aa:2c:7d:f1:
59:be:6e:f3:4f:ea:47:31:e4:58:2c:85:15:5e:57:
79:c0:3d:05:87:b2:e6:64:d5:b2:1a:d1:29:0f:14:
b7:36:04:5c:f6:b0:03:00:2c:63:9f:bd:7a:38:51:
be:0a:91:3f:f2:dd:fe:ef:8b:e5:7c:c9:cf:8f:d2:
d6:1a:be:30:e4:01:7e:8b:ff:16:8f:21:d9:1c:17:
3a:31:d6:77:67:2b:13:7e:b7:ce:3c:58:76:be:68:
6d:a4:04:0e:3a:fb:6a:81:96:c3:a6:b7:f3:71:f1:
cd:1b:3b:ba:f6:52:29:97:2b:bc:3b:b4:48:d6:6f:
9b:17:01:72:ec:a7:7d:30:03:b5:65:54:b1:40:9b:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:89:72:06:8A:AC:82:9C:DE:BB:EE:5C:F6:2A:AF:D2:E9:43:E5:4A
X509v3 Authority Key Identifier:
keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/jYlyBoqsgpzeu-5c9iqv0ulD5Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.233.0/24
Signature Algorithm: sha256WithRSAEncryption
29:49:e3:69:43:8a:85:7d:b5:83:a9:27:6c:30:9a:18:42:d6:
4a:67:79:a8:33:a5:80:f2:58:6d:c5:97:1e:b4:95:3d:4f:1d:
ad:53:6f:e0:67:90:7e:0b:90:ae:f9:23:86:e8:be:d7:20:51:
13:7e:c0:1b:1a:ef:0b:bd:9b:a0:45:f1:d7:ee:7e:b0:d1:66:
cf:b7:cb:30:fe:d9:6f:72:33:b4:89:b1:4e:3d:68:59:55:e7:
41:00:f6:00:6d:2d:0d:d0:cb:2e:dd:f3:8b:21:e7:d1:f9:a3:
c1:85:a3:c1:b2:0a:9b:20:13:8a:a9:e0:6a:21:86:bb:f1:7b:
b6:bd:c1:29:b4:6d:5d:38:6c:d7:fa:97:69:61:e2:91:d2:c6:
0c:da:b5:fa:9d:d4:ec:18:be:84:9d:50:3f:98:7f:91:9d:c7:
92:8a:de:18:3c:ff:c7:fd:11:a5:ae:96:09:d7:cb:97:da:e7:
22:a3:2e:3b:b1:a7:b8:06:fa:18:48:71:52:d9:86:be:9f:1f:
4a:36:cb:1f:5a:e1:75:9f:59:90:34:82:f5:20:24:d2:56:57:
43:a0:db:c8:b4:b5:bc:4a:2f:fd:6b:de:94:15:76:8d:99:0f:
e2:06:9b:ca:76:f9:98:f3:7a:d1:6d:34:86:69:c3:0d:3e:83:
b6:2b:20:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:50 2023 by rpki-client on console-fra.rpki-client.org