Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ylX84jrya9fpWC1ymFOLOrKxAsw.roa
File: ylX84jrya9fpWC1ymFOLOrKxAsw.roa (raw, json)
Hash identifier: UFSAF/zaIqw/hmhmjHnE4T3TBGc6altxLJIpJpPH9cU=
Subject key identifier: CA:55:FC:E2:3A:F2:6B:D7:E9:58:2D:72:98:53:8B:3A:B2:B1:02:CC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187510993DBF21AE8FD0F68FBED8AF43048
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ylX84jrya9fpWC1ymFOLOrKxAsw.roa
Signing time: Wed 05 Apr 2023 10:49:54 +0000
ROA not before: Wed 05 Apr 2023 10:49:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 193.222.98.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:09:93:db:f2:1a:e8:fd:0f:68:fb:ed:8a:f4:30:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 5 10:49:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca55fce23af26bd7e9582d7298538b3ab2b102cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:7d:df:9a:88:3c:59:a3:fb:91:a3:63:2b:
e4:30:ca:a5:a4:11:7b:17:72:04:fe:8e:a6:ae:7e:
62:5e:71:f9:3c:d1:09:05:3e:3f:a6:fc:75:7d:ff:
03:d3:7b:25:d3:d1:37:5e:e9:db:b0:b5:48:69:f2:
a8:4e:da:5c:9a:6d:d9:30:83:22:00:10:87:ef:11:
b2:b7:4f:09:1c:c3:7b:89:b9:3f:de:5d:1b:2e:7d:
ba:f2:75:61:5c:ae:79:28:1a:b0:86:4a:f8:ba:4f:
c4:91:e3:44:cd:2c:1a:71:87:50:7a:44:e2:1d:ce:
0f:fd:46:57:dd:0f:75:91:02:b7:fb:fa:0f:5f:6c:
5a:07:21:f8:f2:b7:72:f7:4e:30:a4:f3:50:8e:37:
68:be:39:3c:d3:83:ce:c6:4f:86:42:6a:6e:78:24:
32:a5:3a:34:2f:12:f9:2a:b4:b0:38:f6:fe:0d:96:
cc:b9:ff:63:99:9e:dc:14:07:1f:3c:99:18:de:8f:
71:5a:5d:dd:f3:43:a9:fb:d8:4a:05:94:db:dd:68:
43:90:ef:1c:ac:79:6c:2d:33:5d:49:cb:1a:19:0f:
55:a1:01:46:b7:67:b2:8b:ed:3a:e0:c6:4e:cb:9f:
80:ad:68:5b:8f:97:39:fc:5f:a3:02:ef:19:dd:c6:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:55:FC:E2:3A:F2:6B:D7:E9:58:2D:72:98:53:8B:3A:B2:B1:02:CC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ylX84jrya9fpWC1ymFOLOrKxAsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.98.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:21:57:fe:ad:4b:8c:09:28:77:b6:ef:0b:2e:9b:8d:c4:2d:
b3:5e:da:ca:08:dd:63:71:4a:63:70:1b:88:21:5f:a3:0d:1b:
f0:6e:5e:d5:cb:40:6b:f4:bd:2d:fe:95:d8:c9:3d:ef:13:b5:
c7:d0:b9:9e:05:21:7f:b7:71:08:0a:97:17:d2:25:6c:83:59:
0d:53:a7:e3:8d:99:27:f0:d5:74:86:c9:68:dc:05:db:78:f0:
c2:db:74:7f:6e:5a:f3:b8:04:c2:17:2e:73:b7:bd:09:69:b6:
a3:7d:aa:77:da:52:c7:1f:48:c2:77:1b:79:c4:29:c8:88:c4:
32:5b:d0:39:92:22:52:cd:46:97:a2:4a:f9:2a:6c:ea:27:93:
ae:55:e6:a5:e6:74:ae:5d:44:a7:71:5c:14:40:32:6a:41:67:
72:0c:f7:b8:f2:6d:ff:f6:05:13:38:b2:bd:f5:ea:e1:20:c4:
03:ce:8d:00:56:99:d8:7f:d8:1f:97:36:8f:d4:98:af:cd:a4:
d1:8b:dd:94:51:70:ef:06:0d:f8:d1:80:50:73:f3:e6:b7:a2:
35:42:d3:56:87:67:bf:6b:bf:13:a1:47:ff:80:99:c2:1f:2d:
4b:4b:fa:89:6f:e2:08:45:1f:2f:47:82:ae:c5:56:c9:a9:bf:
5a:d8:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 12:51:10 2023 by rpki-client on console-fra.rpki-client.org