Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/YYdenJqbI5_s0TG0Q_llChOZc9k.roa
File: YYdenJqbI5_s0TG0Q_llChOZc9k.roa (raw, json)
Hash identifier: tpRPG1oQm0zG4skA6DcSVppS3yjiW3pO8Y0s81oILak=
Subject key identifier: 61:87:5E:9C:9A:9B:23:9F:EC:D1:31:B4:43:F9:65:0A:13:99:73:D9
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 01856F549D669088ABE013B092698840A58C
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/YYdenJqbI5_s0TG0Q_llChOZc9k.roa
Signing time: Sun 01 Jan 2023 21:54:54 +0000
ROA not before: Sun 01 Jan 2023 21:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.140.230.0/24 maxlen: 24
2001:67c:144::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:9d:66:90:88:ab:e0:13:b0:92:69:88:40:a5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Jan 1 21:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61875e9c9a9b239fecd131b443f9650a139973d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:23:c0:5a:0d:94:a7:ad:b7:5f:c5:3f:47:
98:12:a2:58:c7:45:16:1d:88:9b:60:eb:c2:13:38:
37:b3:16:3c:18:66:8f:aa:d2:32:b3:00:d7:05:f3:
fa:c2:61:20:c7:01:e8:6d:26:dc:02:78:f0:7f:03:
52:30:14:da:24:a9:64:42:d1:76:c3:17:89:f5:41:
4c:2f:83:ac:47:79:62:ef:96:b4:fc:98:1a:5a:cc:
73:e2:60:3b:5d:c7:bb:d2:6f:b4:01:95:58:32:81:
f3:76:f6:c8:de:51:97:55:94:d4:f8:3a:e0:43:27:
87:0a:b4:12:88:57:6b:20:bf:4b:2c:bf:a8:5e:30:
01:42:ed:95:1d:da:e0:60:7d:58:a3:b2:da:4a:43:
81:30:a9:aa:ae:eb:7a:64:2a:d3:3f:c5:31:dd:81:
c6:79:79:3b:9b:75:c9:b2:51:7a:86:fe:56:80:c2:
1b:b3:db:a1:1d:38:bc:2c:b1:58:4a:e4:f5:0b:d3:
fe:58:c1:9e:3b:b9:ef:e3:6c:6f:72:df:ae:b5:9a:
5f:34:c1:b6:58:91:4f:01:26:77:6e:f0:60:3d:85:
ee:07:f2:7f:c5:7b:df:d2:2e:e1:9b:48:67:ce:5f:
9e:45:d1:0b:51:bf:29:b2:e9:15:04:c9:fa:99:6a:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:87:5E:9C:9A:9B:23:9F:EC:D1:31:B4:43:F9:65:0A:13:99:73:D9
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/YYdenJqbI5_s0TG0Q_llChOZc9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.230.0/24
IPv6:
2001:67c:144::/48
Signature Algorithm: sha256WithRSAEncryption
78:2f:91:2d:fe:db:d8:e3:29:ac:c9:98:af:e7:dc:5c:72:fa:
75:46:54:74:c3:9e:d6:0b:be:e1:f1:47:e0:e9:bb:15:b3:35:
c4:49:7d:30:58:e7:68:35:b2:02:64:d1:70:a9:f7:cb:53:43:
36:c1:a0:0a:3b:66:b7:e0:be:08:a1:11:2a:0a:ae:89:37:da:
98:1d:28:19:74:7e:31:84:d0:9f:c1:c8:18:61:ea:24:84:c0:
13:38:75:c6:b2:1e:85:55:99:ab:ce:3b:f4:9e:2c:06:4a:b4:
06:b4:f8:b0:68:ba:5a:38:48:df:03:f1:5a:65:fc:d7:c6:cc:
15:8c:db:2c:d2:2b:bb:ed:50:ee:8a:f2:d1:15:8f:c1:96:7c:
f9:d6:55:b2:11:80:3a:64:91:b4:23:67:34:b2:d6:99:61:e4:
e8:07:6c:97:14:04:ec:bf:e5:0f:d3:87:e8:72:b5:3c:ae:21:
94:74:f9:9f:54:bb:60:d7:76:00:77:53:f7:36:45:a8:1b:84:
46:d7:1e:e6:ab:9a:1b:d9:6f:ac:ad:67:4a:6f:04:77:fb:21:
49:df:96:7a:93:e0:2d:54:e7:7f:bc:3c:de:ab:e0:d3:d7:ad:
0b:07:57:f4:b7:e0:39:d8:5d:6b:b0:76:1f:d8:7c:68:18:2e:
6d:2a:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:42 2024 by rpki-client on console-ams.rpki-client.org