Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/YOVVauUCfydQIdPoQAsUF-EV-GI.roa
File: YOVVauUCfydQIdPoQAsUF-EV-GI.roa (raw, json)
Hash identifier: YbM23xN/dChxUxyeKpKDPt2+UPOe8KtWqguZvOVclfw=
Subject key identifier: 60:E5:55:6A:E5:02:7F:27:50:21:D3:E8:40:0B:14:17:E1:15:F8:62
Certificate issuer: /CN=3ec2c20d6b3acf84802c2b7ca0722deb72c670bb
Certificate serial: 0186CBC5A4F1D3D07923D22F87B6E693B7F4
Authority key identifier: 3E:C2:C2:0D:6B:3A:CF:84:80:2C:2B:7C:A0:72:2D:EB:72:C6:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/YOVVauUCfydQIdPoQAsUF-EV-GI.roa
Signing time: Fri 10 Mar 2023 13:46:13 +0000
ROA not before: Fri 10 Mar 2023 13:46:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213305
IP address blocks: 195.211.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:c5:a4:f1:d3:d0:79:23:d2:2f:87:b6:e6:93:b7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec2c20d6b3acf84802c2b7ca0722deb72c670bb
Validity
Not Before: Mar 10 13:46:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60e5556ae5027f275021d3e8400b1417e115f862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:39:f3:be:c1:92:15:02:d0:c4:de:b5:c2:
3d:6b:5e:25:2e:44:b2:78:89:4e:11:28:58:f8:72:
02:ec:a9:85:79:87:3c:39:74:52:80:81:53:56:ef:
2a:57:6d:c9:78:21:51:46:13:be:52:f0:46:4c:71:
54:29:b1:36:38:44:78:27:8e:d8:82:71:7a:25:3d:
0b:fc:85:84:5e:ae:ac:07:4d:51:78:da:b3:b1:8b:
f3:cc:24:20:05:7b:9b:53:1a:4f:74:34:59:68:d1:
29:a6:bb:1b:cd:77:0e:d6:26:1f:8d:93:40:5a:43:
61:34:44:6e:15:8e:85:1d:5b:88:03:7a:f9:4f:0f:
c5:95:69:f2:b8:fa:51:a8:c6:79:18:80:45:d6:32:
dd:64:48:a0:22:bd:a1:9d:5f:f4:d2:de:e5:cb:b3:
0d:73:e8:c2:8a:de:77:13:c5:e3:a4:74:29:72:74:
6a:f7:19:9e:28:18:ef:8b:a7:6e:ae:7e:4c:09:3b:
89:ab:2c:07:04:24:c5:d5:a0:40:7f:ad:b0:ac:21:
88:30:1a:4d:5a:8b:ba:7a:bf:8b:c1:c1:48:c5:1f:
25:65:68:f7:a1:8c:0a:e8:dc:69:79:0e:8a:c0:34:
44:7f:a1:0a:7f:ea:ce:8d:62:a8:34:21:7d:75:01:
8f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E5:55:6A:E5:02:7F:27:50:21:D3:E8:40:0B:14:17:E1:15:F8:62
X509v3 Authority Key Identifier:
keyid:3E:C2:C2:0D:6B:3A:CF:84:80:2C:2B:7C:A0:72:2D:EB:72:C6:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/YOVVauUCfydQIdPoQAsUF-EV-GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/PsLCDWs6z4SALCt8oHIt63LGcLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.167.0/24
Signature Algorithm: sha256WithRSAEncryption
83:d6:80:33:63:06:40:ff:fc:32:51:b9:ec:3c:9b:b8:c6:78:
ab:09:f4:ba:76:81:e4:d8:1e:af:e6:cd:ae:84:27:9a:02:d4:
af:89:69:af:7e:b7:b6:a8:0b:a5:a0:76:11:f3:ea:6b:bb:a9:
b7:a8:43:fa:ec:ce:ae:58:b9:c3:18:70:6c:8c:2a:48:30:94:
a2:a1:c5:33:10:ed:65:c3:67:8c:2f:11:84:69:5a:33:b3:77:
19:4e:90:cb:42:01:34:c7:c1:ca:4e:57:11:b7:96:d5:78:3d:
67:a2:06:02:ff:5a:91:92:36:99:3a:e9:7d:19:7f:f9:c2:70:
2f:a4:40:eb:3a:b4:56:cc:44:e0:35:76:ff:52:2a:dd:ae:d4:
69:36:b2:02:63:79:61:47:3b:49:a0:f4:e6:28:d8:66:68:1b:
c9:d9:ca:43:06:d1:fc:31:f3:1d:63:7a:1e:96:65:70:48:53:
b0:b0:af:57:1a:6f:01:35:c7:a3:ae:f0:20:a6:e4:94:d0:42:
f3:c8:69:f8:aa:43:17:93:71:6b:a7:23:25:9c:6d:37:79:88:
0c:b5:46:ef:0d:cc:40:60:c2:46:f6:43:a3:b9:ac:23:e9:99:
ce:e9:18:52:31:a1:9b:12:dd:fa:94:5b:36:e4:a0:3a:3f:81:
d2:6a:b1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:57 2023 by rpki-client on console-ams.rpki-client.org