Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/yfgaENzgsbXbkv_-StuNnH93rrs.roa
File: yfgaENzgsbXbkv_-StuNnH93rrs.roa (raw, json)
Hash identifier: pWGNqAAacOVMZzrGMZ/dVwGKIyFhx6ntBRP6KO6BTDU=
Subject key identifier: C9:F8:1A:10:DC:E0:B1:B5:DB:92:FF:FE:4A:DB:8D:9C:7F:77:AE:BB
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 01856DCAFFAAC9B6EECC5D6577A44608803E
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/yfgaENzgsbXbkv_-StuNnH93rrs.roa
Signing time: Sun 01 Jan 2023 14:44:58 +0000
ROA not before: Sun 01 Jan 2023 14:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211180
IP address blocks: 193.218.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:ff:aa:c9:b6:ee:cc:5d:65:77:a4:46:08:80:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Jan 1 14:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9f81a10dce0b1b5db92fffe4adb8d9c7f77aebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:03:cb:eb:7d:31:3c:9b:7c:2b:2a:b5:ba:
18:75:7e:f7:29:d1:b3:f9:a2:e7:fb:33:fd:cf:b0:
eb:b4:a7:cd:3f:82:64:52:20:ee:07:0e:c9:ad:cc:
f7:18:91:03:97:ba:21:cd:16:30:89:e2:fb:3e:18:
fc:88:fa:0c:22:5b:10:69:c5:32:97:c9:32:20:b2:
12:c1:e4:f0:b3:27:90:92:f4:5e:91:b7:11:56:48:
1f:ea:55:75:63:04:a7:fd:a3:77:bd:fa:f2:aa:fc:
8a:39:f1:9f:69:eb:92:21:62:2d:72:2e:70:7b:8c:
58:be:a6:49:04:1e:0f:6a:2e:af:79:35:a0:2b:d9:
48:44:81:ca:1f:71:72:d7:ba:21:7c:a3:f1:5d:6c:
25:6b:0d:f3:5b:a9:29:af:b7:e6:f1:3d:e7:b3:a9:
88:ec:da:08:da:68:fa:1c:da:6e:52:47:6b:ec:4d:
82:a5:a3:48:57:4d:6f:dc:05:c8:c6:8c:a7:30:7e:
34:a9:6a:fc:f5:13:14:7f:de:6f:99:79:c9:1c:6c:
82:44:66:f8:ca:4a:54:e7:08:6e:7c:e7:26:03:01:
f1:0e:49:ea:21:03:d9:be:32:dd:eb:ad:ce:5c:4a:
1f:8b:63:69:84:e7:1b:57:91:e4:a4:cc:68:95:d2:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F8:1A:10:DC:E0:B1:B5:DB:92:FF:FE:4A:DB:8D:9C:7F:77:AE:BB
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/yfgaENzgsbXbkv_-StuNnH93rrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.204.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e8:a3:10:d2:62:ca:36:56:ed:c3:77:d5:0a:3d:c4:16:95:
a5:2f:aa:6c:5a:0a:d3:24:39:97:a7:b9:49:84:25:0b:d9:7c:
6a:81:d4:8f:c8:77:e1:c8:78:25:a2:f2:2b:17:94:bd:fc:1f:
5c:b2:91:b0:40:97:13:d2:a6:ee:b3:c4:2e:97:a9:41:ca:ec:
79:e4:d3:6e:1a:0d:fd:75:e5:e1:08:f5:c4:37:61:4c:fb:66:
a3:94:1f:9a:5b:a3:d2:fa:c2:01:0a:5f:4b:83:20:89:0f:af:
7a:7b:73:b7:89:ea:b3:52:de:a2:0d:14:87:56:15:ed:40:15:
40:97:79:5a:08:98:1b:19:fc:a1:b6:cf:43:b5:56:53:3f:e0:
bc:22:54:80:2e:cb:42:a7:d2:b8:c8:40:16:0d:11:b3:25:5c:
56:b1:a7:c3:ae:e2:f2:f0:a6:1c:b9:09:6c:df:bd:2e:9e:f9:
f9:9d:74:6c:23:3a:0c:84:5b:12:0f:ef:f3:ce:30:81:14:60:
45:10:75:de:53:61:ab:9a:7d:62:85:c1:df:ff:94:8a:8f:8e:
0b:f4:87:2b:13:d3:c1:a1:df:08:32:01:bc:09:33:18:01:77:
0b:5e:1f:92:52:a0:db:f0:83:eb:12:be:2f:2f:97:92:13:88:
2d:2a:27:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 06:35:51 2023 by rpki-client on console-fra.rpki-client.org