Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/ypamzKliqEFixHLtXfoURX6LPq8.roa
File: ypamzKliqEFixHLtXfoURX6LPq8.roa (raw, json)
Hash identifier: M1hjKdz3L8Oa3T/5rcXLfcfjw0S6DRIDC1QSkMdIz+A=
Subject key identifier: CA:96:A6:CC:A9:62:A8:41:62:C4:72:ED:5D:FA:14:45:7E:8B:3E:AF
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 01856CCAB3A4F4C5DFA0005671F0E07656D8
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/ypamzKliqEFixHLtXfoURX6LPq8.roa
Signing time: Sun 01 Jan 2023 10:05:01 +0000
ROA not before: Sun 01 Jan 2023 10:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1930
IP address blocks: 192.68.224.0/24 maxlen: 24
192.92.148.0/24 maxlen: 24
192.92.147.0/24 maxlen: 24
192.190.174.0/24 maxlen: 24
192.132.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:b3:a4:f4:c5:df:a0:00:56:71:f0:e0:76:56:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Jan 1 10:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca96a6cca962a84162c472ed5dfa14457e8b3eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:3d:05:3a:54:fa:07:0f:12:42:c3:45:7d:
a3:f7:4c:3e:3e:94:43:67:93:51:6e:95:44:c2:5b:
0b:d1:39:d5:92:88:e7:88:8e:03:2c:38:8f:5d:06:
20:6d:dd:71:29:88:99:29:f9:72:98:0c:69:4e:87:
3d:03:3c:03:28:fd:79:97:cb:bc:20:a5:96:7e:83:
65:83:cf:22:16:87:69:5d:22:33:dd:00:1a:8c:d6:
1b:f7:28:a9:65:c3:ba:07:2b:9f:08:c2:a9:ec:25:
fb:55:f0:cf:df:eb:f0:2b:6a:83:d3:d2:0a:15:38:
e8:19:f6:47:53:6f:9b:24:ed:a3:38:ef:c0:a1:8b:
35:bc:6f:5d:45:65:fb:0f:bf:b7:c8:eb:eb:d4:fa:
27:cf:ed:c6:8a:58:a7:b0:de:df:02:51:df:88:e0:
07:67:b9:e7:aa:9f:92:a2:e8:22:6d:df:a8:0e:45:
88:54:22:32:20:81:c6:69:01:4b:8a:33:49:27:fa:
8f:9a:99:df:2f:ca:cd:1a:99:5d:da:90:4e:d0:6d:
35:60:4b:5e:d6:24:0b:fe:62:72:28:08:8d:57:4c:
c1:46:27:4a:e8:d6:bf:c5:22:2f:bb:85:f9:1b:65:
6d:2a:50:13:38:9b:0a:53:c4:8d:47:9d:35:19:71:
56:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:96:A6:CC:A9:62:A8:41:62:C4:72:ED:5D:FA:14:45:7E:8B:3E:AF
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/ypamzKliqEFixHLtXfoURX6LPq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.68.224.0/24
192.92.147.0-192.92.148.255
192.132.53.0/24
192.190.174.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8f:68:16:d7:67:2e:27:22:b5:c3:4a:03:fe:f6:1f:ac:02:
c4:83:fa:ae:e2:47:f5:cc:65:bd:32:9a:45:06:07:b5:a3:ef:
67:3c:c9:ac:72:4f:45:b1:0c:f1:07:f0:28:5b:38:c5:5f:02:
ad:78:68:3f:80:b4:4c:18:26:b2:9e:1b:2b:17:98:e9:86:44:
c5:6c:20:24:9d:12:41:ff:5a:8e:10:4c:05:5a:fc:57:e1:b9:
54:fb:86:7c:ba:0c:97:51:7c:c6:09:e8:b3:7c:9b:6e:02:18:
c2:c7:80:1f:28:c7:9b:55:7b:d2:a2:53:fc:a5:f7:17:24:3a:
9e:b6:8e:53:e8:1d:5f:b8:70:ab:b9:fd:63:4e:68:be:e6:18:
40:fe:b1:57:95:cd:1c:80:ea:58:1d:f3:fc:5e:5a:7b:6a:cb:
39:5b:1c:90:70:d5:d3:d1:3d:c1:9b:e9:8a:54:e6:4f:01:b4:
73:9e:db:9f:44:1e:22:11:8c:79:ab:ce:c3:d2:39:ba:49:bd:
ba:03:fb:e9:b1:09:84:3b:24:90:b0:50:0f:c5:60:6c:d1:6d:
b7:23:11:0f:e3:43:56:01:14:50:38:da:2b:38:87:2b:4f:1e:
2a:95:9f:97:c7:68:78:99:68:9e:42:e5:20:d5:99:87:5e:e6:
46:05:b5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:03 2024 by rpki-client on console-ams.rpki-client.org