Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/YNbNYdd--FFjQpOHNJ39N_XIOXo.roa
File: YNbNYdd--FFjQpOHNJ39N_XIOXo.roa (raw, json)
Hash identifier: s51pDLjl9EUpzRdibqhxEz2/YqAOwKncYil5XX8bGPI=
Subject key identifier: 60:D6:CD:61:D7:7E:F8:51:63:42:93:87:34:9D:FD:37:F5:C8:39:7A
Certificate issuer: /CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Certificate serial: 01856CAF4193A7671A9C65A9EA34AD10136B
Authority key identifier: 14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/YNbNYdd--FFjQpOHNJ39N_XIOXo.roa
Signing time: Sun 01 Jan 2023 09:35:02 +0000
ROA not before: Sun 01 Jan 2023 09:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50783
IP address blocks: 193.3.49.0/24 maxlen: 24
91.214.20.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:41:93:a7:67:1a:9c:65:a9:ea:34:ad:10:13:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Validity
Not Before: Jan 1 09:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60d6cd61d77ef85163429387349dfd37f5c8397a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:27:66:05:04:49:d6:27:b3:a5:db:8d:23:
69:64:28:c5:89:7f:00:ba:1e:f8:b4:36:2a:c0:7d:
73:28:50:c1:c4:2d:b3:e9:92:34:71:bf:78:ef:dc:
7d:e0:bf:1c:d8:62:b5:93:fb:9e:2f:f6:e7:6f:e5:
2b:3e:5e:4c:39:00:74:38:b9:e9:ab:ec:32:af:96:
7c:a7:d7:d0:f9:12:4a:1e:f6:99:51:3a:af:db:c1:
49:74:a8:6c:d6:7f:8d:8d:0a:f8:a4:60:0e:15:c8:
5c:b4:cd:7e:07:49:85:fb:ff:d7:bc:1e:6e:8e:78:
bc:c5:57:36:59:39:83:a4:11:49:3e:f6:72:93:fe:
77:28:6d:e8:18:27:3c:d1:ac:d5:41:03:90:05:97:
29:67:8d:cc:02:ab:98:3a:1c:ad:e2:ee:80:cf:3e:
23:c8:e7:f6:34:3a:dd:de:f2:5f:6e:e9:55:76:27:
3f:a3:4f:52:58:fa:fa:a7:c5:cb:de:3b:6a:95:3c:
54:ed:2d:0f:17:5a:42:7a:eb:5d:3b:5c:7e:7f:78:
67:c4:5f:71:75:66:75:42:ed:11:81:18:65:ab:40:
cb:fa:4a:f2:9c:30:6b:61:32:b5:cf:dc:b7:f7:03:
0a:80:b4:e0:13:38:01:3f:8b:47:e0:a9:29:2f:2e:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D6:CD:61:D7:7E:F8:51:63:42:93:87:34:9D:FD:37:F5:C8:39:7A
X509v3 Authority Key Identifier:
keyid:14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/YNbNYdd--FFjQpOHNJ39N_XIOXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.20.0/22
193.3.49.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e0:79:5c:c7:41:1d:28:e3:26:e0:3f:f6:19:d0:d6:56:4e:
a7:44:48:cb:2a:d9:34:5e:40:80:d9:e6:8e:b9:a2:36:ca:a3:
5f:99:96:43:2a:0d:27:73:ac:94:99:3c:b5:9e:35:1e:43:29:
73:16:c3:68:0c:19:ec:9f:07:86:1f:66:1a:e1:45:68:72:3d:
a5:54:7d:29:68:2b:40:2d:da:67:34:76:f0:db:db:8a:a6:94:
36:be:58:6f:e4:67:aa:be:b2:df:83:e3:49:fb:96:dc:36:5e:
24:0f:51:89:b5:7b:39:6c:bc:5a:c1:d9:ed:2b:06:ef:90:7d:
3c:c5:66:73:b2:e8:d1:2e:6c:63:12:3f:f7:8e:de:9c:37:e4:
8b:bc:80:3e:5e:63:06:82:0c:1f:58:72:1b:74:48:73:08:fb:
2c:b5:de:1f:22:f0:1c:ad:07:3a:87:61:3e:5f:1f:23:44:12:
1f:6c:92:c7:68:38:8d:50:dc:c3:d3:23:c7:e7:ba:f4:ea:ff:
ca:40:86:63:00:d3:77:e1:de:5f:fe:5e:49:95:16:d3:2a:16:
ff:5e:19:d2:2e:f2:64:18:76:12:d9:9f:91:2c:25:f7:19:6e:
af:2d:fe:a3:64:89:ec:2b:8b:13:fc:41:6a:09:2e:f0:be:7a:
60:6d:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:26 2024 by rpki-client on console-fra.rpki-client.org