Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/YTinI3ap99gH8cTclE-F75TRN_Y.roa
File: YTinI3ap99gH8cTclE-F75TRN_Y.roa (raw, json)
Hash identifier: YQc0qo2kCTXztxuUt3RO3zGfECMzhLCbrnx5ZGbOVMc=
Subject key identifier: 61:38:A7:23:76:A9:F7:D8:07:F1:C4:DC:94:4F:85:EF:94:D1:37:F6
Certificate issuer: /CN=3037a5f7679747839a9c5d740e10a94119175772
Certificate serial: 01856DC1A2908F9F1E9C4192D1D1EC881D0A
Authority key identifier: 30:37:A5:F7:67:97:47:83:9A:9C:5D:74:0E:10:A9:41:19:17:57:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDel92eXR4OanF10DhCpQRkXV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/YTinI3ap99gH8cTclE-F75TRN_Y.roa
Signing time: Sun 01 Jan 2023 14:34:44 +0000
ROA not before: Sun 01 Jan 2023 14:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.150.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:a2:90:8f:9f:1e:9c:41:92:d1:d1:ec:88:1d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3037a5f7679747839a9c5d740e10a94119175772
Validity
Not Before: Jan 1 14:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6138a72376a9f7d807f1c4dc944f85ef94d137f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:67:0e:d0:fc:a7:1c:dc:fb:18:49:52:ec:
75:f7:75:d7:b2:ea:28:e3:25:66:34:76:18:b2:21:
23:85:79:41:2b:e9:0e:65:5a:55:72:20:7c:d1:d8:
d2:30:5b:f0:75:4c:4a:ac:4c:34:8c:f1:fb:eb:6b:
81:ba:80:e8:b0:ac:7b:05:01:98:55:04:87:24:c1:
d4:5f:cc:14:37:0b:ab:c3:cf:99:7c:b1:16:b0:b3:
20:ca:7f:38:ba:74:57:c0:c9:05:f3:70:96:12:bc:
6c:3b:a1:7f:36:6b:b7:52:e9:b2:08:bc:15:fc:5d:
5c:01:77:fd:da:e5:31:e0:19:da:11:bb:9c:80:96:
cd:f4:e5:6e:01:31:42:a2:4f:21:95:14:a9:61:08:
a8:67:e9:d1:88:29:4c:a1:6a:12:a8:4e:22:fa:47:
d8:8d:d1:87:45:38:ab:8a:fd:15:de:33:35:52:e9:
81:5d:3a:0b:95:b4:92:71:3b:67:de:16:3e:f4:d4:
25:32:b3:45:7d:13:6d:05:f5:24:6f:35:8b:c1:20:
e0:f1:83:a3:cd:0f:15:8e:ec:ac:6c:07:ce:54:e4:
8c:3b:07:cc:0b:cf:5a:9f:2f:7a:22:c7:ac:04:ab:
6d:c6:4d:3a:96:3b:fe:bc:63:0f:c5:b8:28:f5:d0:
28:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:38:A7:23:76:A9:F7:D8:07:F1:C4:DC:94:4F:85:EF:94:D1:37:F6
X509v3 Authority Key Identifier:
keyid:30:37:A5:F7:67:97:47:83:9A:9C:5D:74:0E:10:A9:41:19:17:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDel92eXR4OanF10DhCpQRkXV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/YTinI3ap99gH8cTclE-F75TRN_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/MDel92eXR4OanF10DhCpQRkXV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.76.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:66:ff:25:c1:fd:55:c4:68:30:2b:aa:33:bc:8b:19:9e:1b:
04:ae:eb:a7:a9:eb:bc:eb:45:6f:9f:56:47:bd:3a:ef:bb:56:
05:4e:cc:46:e1:51:33:7c:ee:f3:bb:25:e8:b3:6d:0c:17:51:
c9:4c:a0:81:c5:99:de:8e:43:6c:ea:1b:62:89:fa:b2:c9:51:
2d:57:4f:e2:7e:98:73:b6:f9:eb:f8:f1:7c:28:35:20:97:54:
33:f1:79:ef:36:c9:f3:0c:66:2e:1b:7b:91:b1:85:76:9d:b2:
04:48:37:cb:a8:9c:56:85:25:b0:4b:77:d8:51:99:b1:0c:4a:
c2:da:46:65:d5:91:11:20:50:94:45:c3:41:d1:26:03:99:d3:
8b:e6:e9:b9:d9:d1:a1:00:a9:6d:dc:58:f6:d3:3d:b6:d4:8c:
c7:d5:05:b9:29:b4:42:c0:e7:ca:8c:67:c5:92:b3:e7:c6:cc:
58:05:c8:0e:05:2f:0c:91:55:ce:d1:db:99:ad:9b:a8:b4:bf:
bf:cb:57:7d:a5:34:0f:d0:29:03:8a:c6:5c:a8:0b:d1:51:81:
c3:76:d7:52:0c:d7:3d:6b:cb:83:98:a3:6e:47:91:1b:9a:27:
dd:b2:9e:fd:57:0f:5e:39:48:74:45:2d:ff:a4:8d:c7:3e:ad:
25:22:fd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:51 2023 by rpki-client on console-fra.rpki-client.org