Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/YUjH7aDn3JgeJBZwempr6mvLj5s.roa
File: YUjH7aDn3JgeJBZwempr6mvLj5s.roa (raw, json)
Hash identifier: RgYtqgcUxj8VkJDojsI6143MIRxklQRbZU5h+ny1y0M=
Subject key identifier: 61:48:C7:ED:A0:E7:DC:98:1E:24:16:70:7A:6A:6B:EA:6B:CB:8F:9B
Certificate issuer: /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial: 0185724C822E5EEE984A90DFA53CFB0E3642
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/YUjH7aDn3JgeJBZwempr6mvLj5s.roa
Signing time: Mon 02 Jan 2023 11:44:54 +0000
ROA not before: Mon 02 Jan 2023 11:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13259
IP address blocks: 193.107.92.0/22 maxlen: 24
91.206.16.0/23 maxlen: 24
2001:678:68c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:82:2e:5e:ee:98:4a:90:df:a5:3c:fb:0e:36:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Validity
Not Before: Jan 2 11:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6148c7eda0e7dc981e2416707a6a6bea6bcb8f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:e9:19:b5:60:9f:a4:7f:b7:fb:8f:78:c1:
db:c9:8c:6e:b3:7f:b1:b1:0d:f1:ac:bb:4a:91:cb:
b4:42:c0:b6:7f:fe:32:45:26:73:23:e5:6a:4a:7c:
a1:57:d3:09:0f:6c:52:85:11:ba:b9:1f:b8:4f:1f:
19:d6:6d:d8:46:34:af:58:9d:8e:ff:e6:41:bc:92:
48:82:3f:5c:05:d3:ac:8e:8d:cf:dd:71:de:d4:2e:
86:fb:c3:90:87:4b:c0:86:2c:89:bd:19:c2:a8:22:
2c:7b:cc:6b:dc:43:b6:c9:a1:e7:80:26:2f:a5:38:
51:d4:ac:60:30:20:33:56:f9:b9:3f:f9:2c:9e:5f:
9b:d2:04:71:bc:b3:f8:5d:1a:63:04:a0:93:67:b8:
2f:60:f3:9f:e8:02:2a:de:5d:d3:21:f0:f1:0f:ce:
06:7c:39:a2:0e:7e:7c:bc:97:e6:25:3b:8d:20:a4:
0f:b1:6d:78:43:68:7f:53:a2:aa:c4:fb:68:cd:86:
da:a2:b8:3e:fa:a5:8a:b3:c2:7c:33:df:98:35:7d:
6e:ad:39:01:ba:25:ee:ab:7a:94:ee:3e:e7:f2:71:
d3:ae:88:87:fc:e8:f2:b9:58:3b:1f:a2:23:f5:99:
c6:b8:35:11:d2:b3:38:49:a8:95:1c:c1:74:12:59:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:48:C7:ED:A0:E7:DC:98:1E:24:16:70:7A:6A:6B:EA:6B:CB:8F:9B
X509v3 Authority Key Identifier:
keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/YUjH7aDn3JgeJBZwempr6mvLj5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.16.0/23
193.107.92.0/22
IPv6:
2001:678:68c::/48
Signature Algorithm: sha256WithRSAEncryption
0d:e9:af:d6:38:ae:12:b1:66:2b:8e:2f:4e:ff:b5:01:68:15:
49:25:f8:57:9d:cf:a3:3a:6d:b9:47:39:a9:86:bd:24:c3:e9:
79:bc:3f:c5:97:08:bb:38:ff:39:a0:14:78:05:bc:77:6e:71:
01:45:48:a1:1c:12:2d:aa:1d:2c:19:e2:bc:7b:34:fd:5b:39:
b1:c0:c4:11:44:56:0a:a5:c1:6c:32:79:db:fb:fd:7e:04:b0:
69:ef:fe:b0:89:ed:17:9e:03:22:72:5b:39:e6:41:a8:a8:81:
77:8d:3e:da:c8:39:66:df:4c:72:cc:8a:83:25:27:2b:8d:47:
24:7c:07:df:ec:19:ad:8b:fd:a5:f2:99:e9:51:8f:ae:18:53:
76:93:84:43:26:8c:c0:da:91:78:41:29:f2:91:cf:91:ce:3f:
d8:55:30:7a:25:1e:a4:20:73:a1:58:0f:33:8a:3e:00:76:12:
6e:95:c5:70:95:91:30:7f:d7:61:a9:e0:a4:93:af:3b:80:65:
0b:df:5b:32:6a:a2:65:93:87:74:20:b2:7f:a7:23:a8:99:b0:
24:7d:a8:46:9e:0b:0b:10:3e:63:e8:1e:fb:1c:bf:7d:71:8d:
73:f9:51:18:0d:f5:7e:57:51:09:2e:28:24:e2:f3:f2:ed:11:
2c:74:09:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:18 2024 by rpki-client on console-ams.rpki-client.org