Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Y4Fe5WMZyFZjt_QSnO8rtOVnI4M.roa
File: Y4Fe5WMZyFZjt_QSnO8rtOVnI4M.roa (raw, json)
Hash identifier: Zx3bqbWdHIdVr6hyarmT2TWxAKYSnC8n8zFHMBmjh9I=
Subject key identifier: 63:81:5E:E5:63:19:C8:56:63:B7:F4:12:9C:EF:2B:B4:E5:67:23:83
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018BC99A2556C34746C8DD4CB791114F13FC
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Y4Fe5WMZyFZjt_QSnO8rtOVnI4M.roa
Signing time: Mon 13 Nov 2023 16:53:24 +0000
ROA not before: Mon 13 Nov 2023 16:53:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396998
IP address blocks: 194.69.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:9a:25:56:c3:47:46:c8:dd:4c:b7:91:11:4f:13:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 13 16:53:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63815ee56319c85663b7f4129cef2bb4e5672383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cd:21:f3:a5:1b:fc:a5:5b:cb:39:26:52:b8:
66:a0:ca:b5:50:27:7d:06:13:9d:17:6d:7d:e2:02:
fd:24:b6:77:eb:dc:01:55:15:73:15:23:2f:cb:d2:
39:e1:11:ba:e9:fe:07:ca:33:d4:2f:52:9a:06:57:
18:b2:98:9d:f5:64:2f:04:e9:0d:04:7d:30:c5:0a:
da:87:52:55:bb:e0:c1:79:8e:d4:35:80:a5:21:e5:
ba:4d:03:3e:a0:9a:61:4b:6b:7d:58:96:46:7e:6b:
d3:cd:a7:87:f5:25:a1:79:db:5b:f1:f1:62:15:84:
0d:78:4a:48:20:c6:6c:d4:8f:83:70:0f:26:c1:9f:
7e:c0:f1:7a:94:81:13:4e:3c:4e:be:8d:1d:4a:b6:
a6:a9:45:0a:01:82:fd:62:5b:56:f5:b8:9c:45:88:
b4:7b:db:dd:96:bd:b5:84:f2:e8:1c:6a:9f:5f:95:
39:e8:06:aa:ed:84:51:d8:7c:7f:ae:04:b0:aa:cd:
d3:88:17:d2:9f:20:58:a0:42:6c:33:05:b2:ff:29:
68:c3:e9:23:ce:50:32:35:01:fc:1a:00:fd:17:1f:
c5:53:fb:2b:cd:ea:37:fb:9d:f6:d5:83:05:fa:0d:
35:47:a2:42:6e:5a:07:ee:0e:3c:65:47:65:4b:a0:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:81:5E:E5:63:19:C8:56:63:B7:F4:12:9C:EF:2B:B4:E5:67:23:83
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Y4Fe5WMZyFZjt_QSnO8rtOVnI4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:14:27:02:be:ed:22:56:7c:87:4e:84:e5:8c:92:7d:81:01:
68:9f:a9:eb:cf:1f:17:4e:86:04:41:61:41:94:43:da:88:35:
f9:03:48:e2:2e:7e:0f:3f:71:f0:66:12:95:ee:b1:30:ea:ad:
41:fa:a2:4e:3a:20:b1:75:93:62:43:30:4d:07:1c:b3:1c:e9:
36:f3:25:da:9a:ce:6d:62:97:1e:13:5a:ec:f4:23:b2:12:af:
c2:36:09:d5:e4:eb:c7:a5:2d:9c:98:f9:ef:f5:4f:81:da:19:
41:b7:5b:10:ef:a3:02:64:11:19:c5:f7:94:f9:0a:32:3f:e1:
6d:18:b2:df:68:b0:78:86:71:d0:3e:fe:fa:00:d7:e7:d6:da:
47:81:4d:31:7e:06:19:81:e1:62:56:0c:60:f2:51:6a:31:83:
f9:8d:e9:77:b9:c2:62:d7:da:37:62:93:12:ac:9d:90:5e:67:
d2:e2:8a:10:1b:b0:a1:79:2d:59:26:a9:59:e5:4c:82:47:c1:
1a:c1:e9:91:d2:2e:85:62:b2:fe:2e:f2:9e:ed:08:8b:e7:32:
8c:55:dc:1f:4e:f5:40:6d:71:18:19:78:e3:d0:18:92:01:5e:
32:78:cb:12:39:e3:0f:74:76:33:78:88:a2:2f:65:09:aa:d9:
52:32:00:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:21 2024 by rpki-client on console-ams.rpki-client.org