Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/yNicPtK8ZSre8kwgOBab4GzGz4w.roa
File: yNicPtK8ZSre8kwgOBab4GzGz4w.roa (raw, json)
Hash identifier: sZ9biLzkqox5/AJ+E+0dA0miIgshBZch+AATeh+RTk4=
Subject key identifier: C8:D8:9C:3E:D2:BC:65:2A:DE:F2:4C:20:38:16:9B:E0:6C:C6:CF:8C
Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial: 01856F795AC81E869D05982A3724A18864F8
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/yNicPtK8ZSre8kwgOBab4GzGz4w.roa
Signing time: Sun 01 Jan 2023 22:35:02 +0000
ROA not before: Sun 01 Jan 2023 22:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44186
IP address blocks: 193.200.126.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:5a:c8:1e:86:9d:05:98:2a:37:24:a1:88:64:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Validity
Not Before: Jan 1 22:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8d89c3ed2bc652adef24c2038169be06cc6cf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:04:04:9f:24:ff:72:81:01:e8:c7:c2:64:
2f:d4:6c:cd:c0:7b:93:3a:2e:63:a4:7f:f9:62:16:
93:3b:8b:b9:69:c1:14:e3:e6:7f:dc:c0:65:ea:46:
f2:96:80:56:ea:60:b9:ed:3b:fb:b3:8e:5d:a8:77:
8c:c1:5f:b8:bf:01:f2:06:09:fc:c4:09:7b:80:3f:
56:7e:07:fd:f1:85:8a:d0:c4:66:0d:4f:d9:1a:f4:
bb:6e:23:e8:ce:26:37:7d:62:b4:db:fe:66:9d:02:
cb:e3:05:f4:1d:0e:e1:e0:d1:d6:3a:f8:a3:3a:15:
49:90:f7:cb:3b:8a:9c:c0:b0:15:95:f6:2b:88:86:
81:29:b9:fe:16:46:30:83:05:1c:be:61:3c:07:1a:
e0:ef:ed:da:f6:49:8c:49:f7:a7:c2:58:55:17:b2:
ac:6a:24:80:7c:fb:7b:67:6f:1a:aa:77:3a:f1:87:
78:86:a8:9f:12:d9:22:62:8e:f6:c6:c0:f3:01:c5:
65:e9:f5:ad:1d:ef:bd:16:02:9c:e4:b4:97:1a:ed:
bb:09:30:84:4d:29:90:f4:50:6e:09:04:6f:5d:94:
ee:1c:95:bf:e9:7f:e2:b5:7d:b8:61:60:f6:c1:bd:
ff:42:1d:29:78:95:4b:38:8b:56:1d:71:9e:55:65:
fd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D8:9C:3E:D2:BC:65:2A:DE:F2:4C:20:38:16:9B:E0:6C:C6:CF:8C
X509v3 Authority Key Identifier:
keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/yNicPtK8ZSre8kwgOBab4GzGz4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.126.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:f3:31:c2:69:de:88:fc:28:04:e7:db:76:40:85:95:83:16:
51:24:7b:ab:d7:dc:46:e6:fc:4f:f4:c0:d7:d2:5d:ea:4d:93:
8a:c1:a3:90:35:81:09:0a:8e:f4:28:b0:e0:b0:56:6a:8c:f8:
c0:72:b9:48:d0:b5:d7:4c:86:98:d0:9b:28:c7:36:2c:87:9d:
17:45:bd:cc:3b:a4:fd:55:e7:fb:b2:91:88:d2:27:ef:92:de:
de:c8:c7:17:d1:10:52:b1:eb:c8:12:2c:fd:6f:2d:49:80:58:
44:52:47:4c:e8:97:e7:1a:5b:07:36:65:ac:ea:ee:f5:b8:28:
77:ae:51:59:cd:e0:da:0f:57:bf:1b:7d:64:5e:28:1e:21:c7:
cc:74:50:83:25:83:ac:d6:96:15:17:2d:37:ec:e4:ac:29:7b:
8f:b8:5c:1b:8f:65:b1:fa:df:81:40:0c:03:0b:74:51:19:62:
b4:37:e8:e3:2d:75:ea:77:2f:13:8e:dc:65:4c:80:b9:97:7b:
a0:93:3a:70:ca:a1:be:10:6c:d0:4b:92:7a:3f:92:95:d9:a8:
77:e6:f4:ea:c0:6f:8b:04:74:dd:a1:78:8d:0e:54:af:0f:f6:
5b:9e:63:e9:86:18:1a:8c:9e:64:67:98:71:fa:c5:c8:f5:ab:
05:dc:c4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:12 2024 by rpki-client on console-ams.rpki-client.org