Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/yoio-l1PuowYxIGa3XByX8W7mA0.roa
File: yoio-l1PuowYxIGa3XByX8W7mA0.roa (raw, json)
Hash identifier: jnbqID0LzfFFesZd4RVQqimxpeKf07aNOxduSsqRNxU=
Subject key identifier: CA:88:A8:FA:5D:4F:BA:8C:18:C4:81:9A:DD:70:72:5F:C5:BB:98:0D
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0189FE8C1A935479E736BDA1A4F9B5C7BB25
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/yoio-l1PuowYxIGa3XByX8W7mA0.roa
Signing time: Wed 16 Aug 2023 13:32:21 +0000
ROA not before: Wed 16 Aug 2023 13:32:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 193.233.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:8c:1a:93:54:79:e7:36:bd:a1:a4:f9:b5:c7:bb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Aug 16 13:32:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca88a8fa5d4fba8c18c4819add70725fc5bb980d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:5a:5a:9d:ae:e8:1d:a4:4b:9d:e1:f5:ee:
68:ed:bb:37:c2:67:40:67:f2:06:c9:52:13:0a:7d:
84:fe:8f:b2:47:44:fb:9a:58:47:65:56:9d:c8:b6:
2c:48:e6:4f:80:ae:dd:41:d8:46:aa:ee:2f:ac:19:
d3:da:e4:89:07:6e:e4:f4:67:9d:3d:64:0d:52:f3:
e5:84:e2:1c:13:58:c5:d4:d4:4c:58:75:f0:b5:fd:
a6:a9:03:dc:54:a3:48:0b:c8:62:22:fb:2e:e7:4a:
79:a6:7f:0c:12:9c:f8:f2:b4:a2:62:df:ba:60:73:
61:33:5a:d1:2d:b6:78:b7:cc:de:5a:4e:bf:22:d7:
8c:51:6c:98:0b:45:40:57:9e:ea:44:22:d0:ef:ed:
9d:63:a5:ab:98:71:17:23:45:a6:ad:a5:b1:cc:06:
d5:ef:ac:00:3e:5a:35:11:b3:c7:99:51:7c:7f:35:
d4:d9:d9:30:86:4e:22:32:13:be:ae:39:fe:e0:f3:
52:87:9c:b1:c7:11:fe:ca:41:d2:17:d9:67:2e:ff:
65:05:f6:4b:17:e5:f0:4c:57:7e:77:74:70:66:6a:
77:53:b8:8d:7a:a2:23:3c:bf:a0:81:fd:b7:71:23:
72:c1:6b:68:de:30:a6:ea:3e:32:a9:ea:ae:1c:be:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:88:A8:FA:5D:4F:BA:8C:18:C4:81:9A:DD:70:72:5F:C5:BB:98:0D
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/yoio-l1PuowYxIGa3XByX8W7mA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.193.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ca:00:a2:f7:29:14:f9:9d:d6:eb:02:51:e6:b2:f1:01:b0:
ec:5c:00:8c:8f:d1:40:70:78:2a:c2:32:78:91:24:5c:63:03:
63:8c:b1:98:55:c3:7b:c3:f7:65:31:76:65:5a:3b:7e:d3:f1:
18:63:68:78:d6:ba:f3:6d:40:91:0e:42:cd:87:78:5f:35:76:
0c:d2:b5:57:57:4f:46:eb:9b:09:3d:74:aa:c4:9e:37:6f:3b:
c6:c4:63:1d:2d:2c:1f:7f:b5:89:ca:72:77:81:d8:b1:06:e8:
72:6c:f5:74:20:1a:30:e3:c1:cc:e6:3f:ad:bb:65:6b:9b:b9:
d8:bf:92:c7:14:16:f1:11:30:69:d4:c4:f3:4a:82:ca:8f:9e:
13:51:cc:8e:ce:4a:3d:5f:a1:ca:fd:60:f2:85:e0:07:f6:69:
8c:9f:87:cc:35:13:6f:aa:2f:12:03:37:7a:c7:03:ef:58:a2:
da:35:e8:ea:f2:24:b2:64:15:ac:1c:e4:14:26:4d:37:3d:1f:
26:c7:36:69:12:41:0c:aa:9c:e1:25:d5:38:db:9a:ed:66:28:
e5:c9:77:5d:a5:78:d4:01:ce:ba:0e:89:a7:07:30:95:82:17:
bc:40:e3:8a:fe:5d:7b:51:a6:f3:7e:c3:b9:22:df:d2:fe:ca:
f5:a5:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 10:04:21 2023 by rpki-client on console-ams.rpki-client.org