Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/AYbg_-mXZFoSS1w6RcTV-i9BYsA.roa
File: AYbg_-mXZFoSS1w6RcTV-i9BYsA.roa (raw, json)
Hash identifier: Q0Uq6CyucsNvWEdWRmDkIELnW4kzEhlFFaqm9nLKoZ4=
Subject key identifier: 01:86:E0:FF:E9:97:64:5A:12:4B:5C:3A:45:C4:D5:FA:2F:41:62:C0
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018CC50119FD6502B5A3C146C731A75777D2
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/AYbg_-mXZFoSS1w6RcTV-i9BYsA.roa
Signing time: Mon 01 Jan 2024 12:30:32 +0000
ROA not before: Mon 01 Jan 2024 12:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62163
IP address blocks: 193.56.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 12:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:19:fd:65:02:b5:a3:c1:46:c7:31:a7:57:77:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 12:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0186e0ffe997645a124b5c3a45c4d5fa2f4162c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:9c:66:7b:f7:34:36:0a:89:8c:54:31:d3:
8c:07:e2:0b:a6:8c:da:50:25:6b:59:e4:cc:28:0a:
de:c1:7d:86:d4:df:5e:5f:ae:49:a3:54:4c:de:d7:
f1:e6:81:e3:d2:af:2e:41:a5:50:05:62:c6:a5:06:
57:44:13:ee:67:44:99:ce:88:41:ab:d9:06:ab:40:
5a:ee:ce:64:c4:48:1b:94:e7:13:e1:9f:f4:6a:ff:
f2:45:66:40:48:5f:62:a2:9e:28:5f:99:bc:62:fa:
1c:43:52:f0:2b:1b:24:a6:7f:b6:c9:d0:b2:95:ce:
fb:22:55:47:28:9e:5a:5c:92:55:fb:6b:6f:3e:8a:
92:02:58:7e:99:cb:35:8a:2d:31:7d:c7:80:2f:87:
ba:0f:9d:a9:ef:2a:cb:76:71:06:44:af:7a:51:5c:
c6:5c:96:99:d0:13:01:d6:cc:94:d1:2d:64:f9:e2:
89:31:c3:e6:f0:c2:73:bb:80:ea:3d:97:6a:fe:d8:
10:d9:85:96:db:9e:f8:4e:a7:7c:7e:2b:e2:b7:59:
88:7a:f4:ae:e3:57:2d:75:9c:35:65:e0:c3:4b:f3:
16:35:c1:34:4e:b2:ff:af:9c:dc:b2:0b:d4:24:2a:
4d:15:c5:13:3a:9d:fe:66:af:c5:a0:75:21:ae:3f:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:86:E0:FF:E9:97:64:5A:12:4B:5C:3A:45:C4:D5:FA:2F:41:62:C0
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/AYbg_-mXZFoSS1w6RcTV-i9BYsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.239.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0f:ae:8d:28:f4:dc:2b:93:19:d5:b6:2c:2c:1b:e6:61:95:
00:2b:a4:85:27:da:85:aa:2d:e5:47:9c:a8:ab:a8:ee:08:bb:
d9:d0:68:df:59:76:b5:7a:3f:03:dc:e3:64:21:3c:34:b8:f6:
5b:1f:16:b5:5c:5f:2e:57:7e:ae:91:9d:0e:90:9b:f1:37:0d:
73:a0:cd:57:b0:21:08:9d:11:e3:05:69:17:7c:3c:cd:01:ad:
07:bb:98:62:46:6b:36:3a:a5:45:7d:da:c0:48:9b:a4:a8:42:
be:21:b6:a5:7f:31:3b:92:92:f0:63:64:62:2b:1b:f7:b0:e4:
95:92:d6:be:1a:e8:b8:5a:f2:d6:98:12:51:29:e9:d4:a5:d4:
e2:20:b1:05:97:4e:2d:0c:7f:58:70:48:2d:2a:19:63:f2:3e:
7a:e6:b6:d8:0d:59:c0:c7:0b:40:4c:8c:08:6a:da:cc:3f:19:
3b:14:37:23:1c:77:ac:b8:ab:94:b0:3e:d6:2b:e0:20:50:89:
89:13:3c:99:09:cb:ac:45:da:b2:81:a9:18:39:da:78:f7:53:
09:b9:82:25:73:df:fe:b7:46:e8:ef:45:58:21:83:c2:f5:a4:
8d:5f:e6:ae:c6:f4:b6:3a:64:dd:5f:80:e9:82:e7:5b:3a:36:
5e:b1:ef:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org