Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yedvvqzhhfx5EUVTqmaTGFzKphc.roa
File: yedvvqzhhfx5EUVTqmaTGFzKphc.roa (raw, json)
Hash identifier: OR8rC/cT8nKrxb70rWxCpVwZEcMvLl+aP7LpnGEwzqA=
Subject key identifier: C9:E7:6F:BE:AC:E1:85:FC:79:11:45:53:AA:66:93:18:5C:CA:A6:17
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018572471762B197C11C1F638F3CD43FD40A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yedvvqzhhfx5EUVTqmaTGFzKphc.roa
Signing time: Mon 02 Jan 2023 11:38:59 +0000
ROA not before: Mon 02 Jan 2023 11:38:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205601
IP address blocks: 5.8.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:17:62:b1:97:c1:1c:1f:63:8f:3c:d4:3f:d4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9e76fbeace185fc79114553aa6693185ccaa617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:99:b4:7a:e8:9b:b1:d3:c3:58:aa:a2:e5:
6b:0b:7a:45:09:74:26:05:02:44:6a:4e:a6:60:69:
b4:b5:30:bb:6c:63:9e:f5:e4:5e:b3:35:1a:49:af:
fa:d0:09:d4:9c:20:a9:33:23:ca:cf:30:59:9c:94:
dd:7e:fa:18:d1:58:c9:22:a8:da:a7:63:85:2b:b7:
6b:66:30:f5:e2:91:b6:19:8c:50:c1:ed:15:df:19:
07:9e:95:2f:5e:ba:30:67:e5:af:87:01:83:c5:45:
b3:f9:fd:b4:39:ca:ca:61:8c:6c:58:3c:3c:d1:16:
41:6a:a8:fe:b9:0e:6d:b3:a0:a5:b1:45:67:45:a5:
b4:33:e5:5f:81:02:35:1d:11:2b:be:bc:53:de:90:
fa:87:44:62:f4:52:dc:71:4f:2f:d2:e5:58:18:d4:
d2:d1:b5:bc:f8:c9:80:85:c4:e7:a9:9b:fc:f7:3f:
56:65:9d:19:b9:77:11:8d:0c:92:ed:21:39:42:10:
c9:0c:b9:9d:94:c5:ea:e0:6b:77:31:9a:32:78:5f:
95:42:8f:95:74:68:10:59:ac:1a:7f:27:f6:d4:c9:
1f:70:a9:7f:dc:f6:44:78:7b:61:6c:3a:9e:a8:3f:
94:b2:de:91:83:ba:21:c4:64:d4:a4:1b:0a:b8:4b:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E7:6F:BE:AC:E1:85:FC:79:11:45:53:AA:66:93:18:5C:CA:A6:17
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yedvvqzhhfx5EUVTqmaTGFzKphc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.17.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:03:aa:61:79:36:bc:6d:58:9e:0b:36:b1:bd:e4:b4:15:c7:
1b:bf:3f:56:28:b9:3d:7e:98:c0:57:00:9a:03:66:b5:2e:0e:
17:9a:97:f0:0b:45:87:04:34:9e:39:5c:ad:2b:27:db:76:74:
94:25:fb:d7:ee:8e:52:f2:69:18:2e:67:4c:00:3f:fa:fa:b3:
cc:bd:34:70:39:96:2a:5a:00:e8:8e:5d:66:24:dc:cf:1e:8d:
38:77:8b:a7:2c:df:70:23:4c:ba:4d:b4:53:f7:3e:5f:22:ba:
7d:50:f5:7c:23:16:1d:65:ba:f1:4d:1e:76:09:18:b8:f1:34:
7f:68:40:21:24:45:62:a7:c5:db:c6:af:0b:1f:8b:32:5d:7b:
4b:6b:33:10:5e:94:e7:c3:85:c5:77:21:97:5a:41:81:8c:8d:
a2:41:e0:b2:17:9d:eb:8d:2d:b1:3f:a6:06:cc:cf:bd:6a:e9:
cd:fe:47:35:23:7b:32:2b:40:e0:c0:e4:61:a2:c1:c9:65:5e:
c7:d7:c3:a9:2c:f7:3c:51:aa:6c:75:b5:36:ae:d1:0d:8e:62:
d3:91:05:5d:4f:03:fa:59:96:6d:62:d8:63:9a:01:f6:5d:09:
fa:19:7f:8c:42:d5:ff:2c:a5:c7:cf:16:26:40:18:34:7f:4d:
f4:d2:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org