Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YLyZ9cYW37Q8KRwj65SRL7XxVBw.roa
File: YLyZ9cYW37Q8KRwj65SRL7XxVBw.roa (raw, json)
Hash identifier: QQjDasdwWtbvMnUGqK1+mm9TzsG/1SychdGVKWxCUtg=
Subject key identifier: 60:BC:99:F5:C6:16:DF:B4:3C:29:1C:23:EB:94:91:2F:B5:F1:54:1C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188330EE981F572815E102EB1438C543988
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YLyZ9cYW37Q8KRwj65SRL7XxVBw.roa
Signing time: Fri 19 May 2023 08:09:55 +0000
ROA not before: Fri 19 May 2023 08:09:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 193.42.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:0e:e9:81:f5:72:81:5e:10:2e:b1:43:8c:54:39:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 19 08:09:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60bc99f5c616dfb43c291c23eb94912fb5f1541c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:4d:e0:c4:9c:3a:19:53:77:79:b5:49:98:
03:54:4e:81:ce:53:df:f3:31:c7:59:03:37:59:9a:
01:55:ce:02:cc:83:d6:af:0f:d7:14:f2:ca:90:d9:
c7:3b:84:30:7a:50:3e:85:39:c6:97:34:cb:9f:46:
00:25:bb:53:07:61:4a:62:9f:8e:44:f7:ab:be:37:
6f:2c:39:90:6a:10:1f:4c:c2:d9:1e:86:a4:ee:57:
89:dd:28:54:99:4b:60:7f:97:9a:15:03:09:e2:08:
ec:b6:2b:07:b3:86:3a:11:cc:8e:24:6e:68:44:46:
14:f6:1e:a8:f6:a2:ab:1c:ef:13:da:35:46:ee:60:
86:cb:38:d4:f2:7f:84:87:4f:3b:04:d2:18:a0:4f:
92:65:ca:89:66:2a:fb:2c:aa:ed:d7:1a:3c:b7:6a:
13:3b:f7:92:bc:79:56:86:ca:4b:c5:84:da:49:2f:
b8:7b:79:ba:b5:dc:4a:94:fc:53:ac:e2:00:00:69:
22:d4:46:63:a5:94:b4:b1:32:55:eb:32:18:6e:15:
79:99:ca:8b:a4:2f:c9:cb:b5:35:c9:e6:02:46:fd:
33:9f:79:e7:4c:76:10:a9:c7:bb:e0:be:37:22:5d:
46:39:cf:c8:13:4e:ee:34:64:cd:44:47:c1:f2:2e:
df:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BC:99:F5:C6:16:DF:B4:3C:29:1C:23:EB:94:91:2F:B5:F1:54:1C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YLyZ9cYW37Q8KRwj65SRL7XxVBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.35.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c2:f7:3f:11:a6:56:fb:c5:57:44:d3:a8:7b:50:73:46:05:
53:a7:97:d3:e9:b4:57:fa:5c:cc:c9:0f:12:85:ed:6a:c8:35:
97:4e:6d:46:ac:7f:b7:fb:40:41:5e:06:59:28:a2:b2:22:03:
70:37:39:c5:31:6e:2b:05:3b:d0:cc:40:2a:1c:fc:e7:1c:5a:
a5:94:12:3e:b0:1c:93:90:58:35:31:b4:4c:7c:0e:5d:83:b1:
c6:aa:61:b6:9d:e1:d0:d1:3c:82:e4:72:58:a9:df:21:e4:bb:
ea:d9:07:fa:0e:2f:b1:84:56:21:e5:c1:10:c9:07:20:0c:d2:
a4:f0:c4:49:54:12:bc:04:3b:21:8a:7b:52:14:d2:84:ef:43:
ef:91:01:8b:b8:e2:ed:4d:d2:c1:99:f0:7d:54:04:30:3b:32:
96:bc:0d:ca:5d:21:3d:0f:6b:7f:f9:2a:b5:98:9f:9b:a9:3f:
c8:25:c7:bd:ae:b7:18:0f:87:ee:e7:95:04:ab:c5:7a:2f:2c:
31:12:d0:9f:84:b3:85:47:e1:88:a8:9f:99:79:54:51:1f:cf:
2c:7b:26:de:f7:87:f7:a9:94:d2:f5:e1:ef:00:08:fd:c1:8f:
18:fd:1c:70:63:be:3e:03:ba:08:fc:d4:88:e1:25:ba:93:da:
2d:02:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org