Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/YsnusGqo6Ba0w2YgUJp2iDIJpe0.roa
File: YsnusGqo6Ba0w2YgUJp2iDIJpe0.roa (raw, json)
Hash identifier: VYBzdZ6f01zGrWIQXf2gjiOkzhs4bGgrSrMvi1s4/lQ=
Subject key identifier: 62:C9:EE:B0:6A:A8:E8:16:B4:C3:66:20:50:9A:76:88:32:09:A5:ED
Certificate issuer: /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial: 018CC8703C7654B93B291611CA4C9B929885
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/YsnusGqo6Ba0w2YgUJp2iDIJpe0.roa
Signing time: Tue 02 Jan 2024 04:30:47 +0000
ROA not before: Tue 02 Jan 2024 04:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15615
IP address blocks: 92.63.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 17:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:3c:76:54:b9:3b:29:16:11:ca:4c:9b:92:98:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Validity
Not Before: Jan 2 04:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62c9eeb06aa8e816b4c36620509a76883209a5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:be:aa:17:de:88:57:a0:74:f0:03:c4:c5:
1c:1c:91:1c:35:1e:ae:15:91:33:f6:b5:3c:30:d7:
bf:2d:a0:57:02:f1:3c:f0:ea:a6:4a:ea:36:f3:ce:
90:e4:52:ba:8c:c3:d4:4f:c7:0e:1d:8f:8d:a7:7f:
ad:1b:5b:6e:a3:43:db:62:c3:5f:dc:18:af:ed:0f:
ce:f5:df:59:16:dd:1e:2a:dc:cd:e0:26:b3:db:b5:
7b:cf:46:63:0a:0b:c9:34:fe:e6:6d:33:11:de:4e:
07:17:0f:d5:89:55:ff:24:1f:64:e3:2a:fd:4a:b3:
38:6b:79:3e:60:5a:82:61:5f:61:33:f1:89:74:19:
41:80:a1:50:53:9e:52:a8:b6:1f:4a:ba:00:1a:b3:
58:b5:6e:fb:69:50:32:10:09:44:aa:16:5a:2f:00:
6e:ec:74:09:b1:f4:14:60:4b:8d:82:2e:b8:6a:b4:
be:b1:e3:cc:e5:36:49:0f:11:2c:ea:83:79:c8:1e:
fb:6c:07:69:aa:e8:aa:5f:c0:70:f4:b9:a2:e1:9f:
3a:3e:ad:e1:c4:df:77:17:ce:f3:4f:df:32:8a:37:
3a:ad:6f:f9:02:54:3c:f8:ed:23:ba:29:ed:dd:8e:
17:97:de:d0:f2:d3:ec:4d:fe:c6:c3:b8:25:f6:99:
d6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C9:EE:B0:6A:A8:E8:16:B4:C3:66:20:50:9A:76:88:32:09:A5:ED
X509v3 Authority Key Identifier:
keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/YsnusGqo6Ba0w2YgUJp2iDIJpe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.87.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c9:0d:67:8d:93:87:d0:d6:7d:bd:0e:39:b2:75:34:5a:2b:
50:81:bb:d7:48:e6:40:2a:c6:d4:54:a2:17:6d:a8:aa:24:f8:
79:5e:cc:52:d5:6e:a6:53:a9:58:fc:a2:4c:dd:11:8d:af:46:
6e:2a:e4:d4:48:90:73:c2:88:6a:a8:65:09:aa:62:f6:c2:ec:
46:e3:39:37:ea:d6:6b:a4:69:f9:16:9f:a6:c7:05:3d:40:4a:
6b:ad:bf:03:ff:06:9c:91:27:54:de:d5:d6:92:d6:7e:48:22:
77:33:c6:38:ea:2c:8f:92:1a:42:21:c1:70:99:10:ee:6a:11:
de:9a:ed:fd:92:b1:25:43:77:b0:3a:67:de:70:8a:d3:db:d8:
2c:91:76:aa:3e:e1:93:a0:79:6e:5c:2b:14:a2:87:fb:77:77:
b1:83:6c:a6:cd:ab:63:d8:b8:2c:42:c4:64:bc:47:c4:c4:57:
65:fa:d3:4a:07:36:6b:ea:f5:16:81:c4:85:38:2c:1d:67:de:
5a:01:75:d8:fe:34:7e:4e:0d:c9:94:de:c1:d9:eb:99:7b:e1:
c1:d7:62:3c:7d:ad:db:26:c9:3e:b1:3d:4f:f7:93:db:0c:9d:
ad:74:20:14:73:52:48:03:83:a3:9f:ba:64:1d:e2:c7:dc:c3:
71:99:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:06 2024 by rpki-client on console-ams.rpki-client.org