Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YLYneaRdnyO8icjDlruAB3mY-kw.roa
File: YLYneaRdnyO8icjDlruAB3mY-kw.roa (raw, json)
Hash identifier: aNBanLH+HXpwspBEeifw2Y5KS9fWGMRBISpatbEgPYk=
Subject key identifier: 60:B6:27:79:A4:5D:9F:23:BC:89:C8:C3:96:BB:80:07:79:98:FA:4C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FAFF6E049C0E8DE973F57C814A7C6E18E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YLYneaRdnyO8icjDlruAB3mY-kw.roa
Signing time: Sat 25 May 2024 13:35:43 +0000
ROA not before: Sat 25 May 2024 13:35:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203168
IP address blocks: 193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 15:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:af:f6:e0:49:c0:e8:de:97:3f:57:c8:14:a7:c6:e1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 25 13:35:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60b62779a45d9f23bc89c8c396bb80077998fa4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:15:97:fb:32:d0:3e:0a:ff:78:f9:ec:f5:
80:95:a2:67:5a:06:5c:f2:f0:aa:1b:95:28:34:33:
da:45:50:59:d3:e4:27:41:c4:da:40:f0:0b:9a:f3:
48:60:d4:1c:0f:f3:14:37:f3:39:7d:42:dd:c6:98:
e8:b0:2b:d3:02:e0:3f:18:03:b9:51:38:17:46:25:
ce:d7:3f:64:08:68:29:5a:87:bc:be:cc:48:f2:b0:
dd:73:53:5b:f2:cd:8d:64:7a:59:cf:06:2c:f3:90:
20:9e:a9:c7:59:87:cf:15:76:19:8b:19:04:b6:f0:
2d:0d:84:6e:75:a1:87:9f:97:d4:3a:6c:55:fa:43:
e4:a3:f0:b3:46:8b:61:91:aa:21:91:9c:fe:ab:49:
3c:15:d8:56:39:ca:47:07:72:1e:59:74:e8:f4:3b:
20:46:f8:1a:e7:22:33:3d:39:81:29:2b:54:4f:14:
cc:be:a3:b8:2a:61:ef:0c:fb:53:25:68:17:4f:4a:
d8:32:f8:45:41:94:d6:ab:5f:b9:ea:31:34:2d:fd:
e9:a2:25:dd:32:50:79:9e:4b:16:7f:d9:d8:6e:84:
a1:ae:d3:a0:57:6f:3d:44:aa:ea:ae:81:e4:81:ef:
d9:0b:3b:9b:87:ff:2e:a5:6e:c1:be:e2:78:5e:2c:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B6:27:79:A4:5D:9F:23:BC:89:C8:C3:96:BB:80:07:79:98:FA:4C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YLYneaRdnyO8icjDlruAB3mY-kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
23:89:22:4f:3b:11:cb:e5:02:77:18:c1:59:ba:a8:db:f2:82:
1d:ed:af:01:06:f1:d3:9c:cf:d2:38:99:7a:f6:27:0a:89:24:
5a:d3:26:05:5c:cf:2a:11:5c:0a:fe:12:a1:78:3c:65:d2:2c:
36:6b:73:c7:a7:e8:3b:b6:1e:89:1f:14:7d:6f:95:a8:95:4f:
ea:4f:61:2e:e4:bc:0f:8f:56:86:05:4b:0e:cb:97:2d:2e:72:
bf:d3:d2:45:23:d2:d7:7b:7b:06:14:f8:58:b3:3a:f0:c4:ac:
2a:d2:10:4e:d5:08:3f:02:2b:2f:3b:96:13:c9:e0:b7:60:c0:
b4:65:63:5f:12:23:13:1a:43:fd:fb:3a:61:26:49:1f:0a:1a:
88:5c:49:ca:2e:19:99:a6:9a:d1:1c:f6:64:da:12:fe:92:9e:
b2:9e:8c:38:ba:ff:ab:e6:2e:35:98:f1:36:87:38:c7:63:92:
c1:e8:75:b0:65:69:6d:4d:3d:82:ef:ff:14:b2:ed:69:c7:5e:
04:d0:c4:69:02:90:7e:c8:0d:7b:e8:24:fb:b5:aa:76:f1:32:
d3:3c:64:e1:e2:54:1c:00:0d:bd:23:f5:9e:f4:a8:4b:87:ac:
51:32:07:58:4c:c1:85:65:c4:f8:3e:ff:71:60:78:13:6e:13:
7b:56:a3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:13 2024 by rpki-client on console-fra.rpki-client.org