Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/yRURTgS4ntA5kcfTn48GFHtrGxs.roa
File: yRURTgS4ntA5kcfTn48GFHtrGxs.roa (raw, json)
Hash identifier: SsD91ut+Pr8LkgguxcJIYUhO4dBhIZp8OGWqJTJJM/s=
Subject key identifier: C9:15:11:4E:04:B8:9E:D0:39:91:C7:D3:9F:8F:06:14:7B:6B:1B:1B
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01857039A507BAE876F0DE2B3753C48221A6
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/yRURTgS4ntA5kcfTn48GFHtrGxs.roa
Signing time: Mon 02 Jan 2023 02:05:04 +0000
ROA not before: Mon 02 Jan 2023 02:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 194.233.56.0/22 maxlen: 22
195.179.240.0/22 maxlen: 22
195.179.244.0/22 maxlen: 22
195.179.252.0/22 maxlen: 22
195.179.248.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a5:07:ba:e8:76:f0:de:2b:37:53:c4:82:21:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 02:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c915114e04b89ed03991c7d39f8f06147b6b1b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:c1:fd:aa:ac:de:53:9e:27:5e:b3:9c:dc:
77:60:6f:cf:6e:19:b5:15:31:77:c6:c0:a0:f6:29:
db:14:da:eb:18:b3:4b:0b:7e:7e:5d:d5:e5:16:fc:
3f:94:ee:4d:cd:25:99:39:5a:75:40:f9:2f:f9:d6:
13:82:7f:cc:3e:99:5e:d0:84:82:17:66:9a:44:eb:
ee:11:50:1a:f3:ec:af:7d:10:36:b2:1a:ca:6c:7d:
56:a4:0a:5c:0a:17:77:98:50:a4:c7:3c:36:89:8b:
87:f3:12:c3:4e:51:9e:44:32:62:47:e4:e9:2a:84:
45:d7:e5:d6:45:12:d2:b1:4e:3f:27:77:73:6c:b9:
a9:ab:52:db:a0:6d:22:da:5a:a1:4a:d0:22:5e:16:
82:80:93:07:51:4b:de:ad:a7:05:34:c4:7d:25:6f:
88:72:0c:e4:5c:5f:1f:5c:b0:20:32:e0:b8:ae:84:
7c:b8:ca:2f:d8:08:27:9f:75:28:7e:44:0b:41:ff:
a7:ae:eb:8a:ed:ad:8c:da:67:84:c4:d7:51:9f:99:
d1:bf:9c:d2:5e:87:8e:18:55:e3:0b:78:58:87:0b:
6a:c0:69:fa:b0:c0:a0:57:26:68:b7:91:fe:48:32:
29:b8:10:1e:16:cd:b8:79:a3:47:8c:13:a6:7d:1e:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:15:11:4E:04:B8:9E:D0:39:91:C7:D3:9F:8F:06:14:7B:6B:1B:1B
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/yRURTgS4ntA5kcfTn48GFHtrGxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.56.0/22
195.179.240.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:af:88:97:82:09:1d:11:2d:8a:06:ed:77:f5:31:e0:5f:7c:
d0:64:12:3d:28:e7:a1:c5:33:3c:40:be:b3:d8:23:44:15:b2:
82:65:d6:8a:ad:9c:27:d7:d8:17:07:e5:53:69:d5:c4:d9:25:
98:a4:5c:e3:00:c1:0b:0b:06:bf:5a:48:50:70:da:51:55:e1:
f2:a4:8b:3e:4c:99:8e:c0:ed:cf:67:98:4a:07:ea:14:f3:52:
1b:70:e7:f3:cd:1b:4c:6a:d7:9e:bb:06:69:3c:26:cc:1a:e2:
1a:e9:8e:c7:0a:1e:e2:9b:b3:9b:10:5b:9e:12:64:bd:62:98:
bf:95:ae:20:fb:3c:fb:ee:a9:13:09:49:2d:54:bc:e9:f7:1b:
e2:88:a8:d9:c1:0f:35:06:1a:e0:6c:9c:f2:9e:ef:24:8f:57:
8c:44:29:5c:c1:fc:98:40:b0:dd:b4:6c:90:61:45:8d:ec:5c:
18:11:0b:8a:88:af:ee:24:00:3f:0b:e2:82:2d:15:1e:0b:88:
b6:70:bb:c9:5f:81:da:0d:3a:76:1a:ab:f2:34:74:72:7e:46:
35:d5:3c:09:e2:51:50:a1:39:2d:87:42:8f:2c:df:39:af:f2:
65:b0:2b:96:13:73:d7:b6:83:1c:cb:f4:08:11:5f:a6:b5:07:
e8:6d:9d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 10:03:27 2023 by rpki-client on console-ams.rpki-client.org