Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/YjtBBxMTGu7Nk5VoBuGr9_zMF9o.roa
File: YjtBBxMTGu7Nk5VoBuGr9_zMF9o.roa (raw, json)
Hash identifier: bB9goKTPekEurnZEDy4keJ3tyYyaxzgtpG4gzuKLCP4=
Subject key identifier: 62:3B:41:07:13:13:1A:EE:CD:93:95:68:06:E1:AB:F7:FC:CC:17:DA
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0188F82693C4EDE1191667BE52F4704BD70F
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/YjtBBxMTGu7Nk5VoBuGr9_zMF9o.roa
Signing time: Mon 26 Jun 2023 14:40:57 +0000
ROA not before: Mon 26 Jun 2023 14:40:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140641
IP address blocks: 193.239.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f8:26:93:c4:ed:e1:19:16:67:be:52:f4:70:4b:d7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jun 26 14:40:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=623b410713131aeecd93956806e1abf7fccc17da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:77:2d:36:9a:f7:0e:24:94:32:50:9e:aa:21:
98:68:5b:14:d4:52:3f:7a:7b:74:c6:b0:eb:43:ba:
46:6c:0a:16:67:e2:3c:29:ca:22:36:f7:c7:85:b0:
12:82:4e:6c:6a:c0:e6:f6:86:e9:3e:c3:79:35:b5:
8f:05:09:3a:b6:49:28:d8:6d:32:f4:8e:b2:8d:60:
86:59:40:9f:3b:d1:50:99:7b:f8:e9:5c:4e:06:ce:
47:80:35:57:3e:47:cd:69:45:0d:51:e0:f9:8c:f7:
56:34:58:cb:5b:d3:9c:25:58:92:0e:b1:29:61:36:
2b:41:53:59:0e:9d:7b:2f:ea:77:b1:3e:a1:31:ae:
ad:ab:4c:9b:86:16:de:21:f5:2f:82:29:d6:d0:7f:
44:12:b5:7e:b0:66:35:d0:ef:c7:e7:f7:bc:2c:fd:
5d:84:24:f8:5e:09:24:bf:05:a0:f6:9f:dd:06:0a:
7b:ef:0e:41:4e:75:bc:16:08:33:4a:73:37:1e:7d:
98:e4:7b:71:48:d5:d3:9d:73:05:c9:b7:7b:e3:46:
36:58:12:3f:e8:29:4d:79:fa:55:e9:69:ff:a5:db:
e6:6e:17:c8:0f:e4:25:82:8b:8d:c9:43:13:db:5f:
2e:75:ed:4a:85:8d:91:9e:71:ef:5a:ee:df:53:1d:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3B:41:07:13:13:1A:EE:CD:93:95:68:06:E1:AB:F7:FC:CC:17:DA
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/YjtBBxMTGu7Nk5VoBuGr9_zMF9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.237.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:59:32:45:86:51:81:66:19:5d:cb:03:01:7a:c3:4d:87:f7:
24:af:c8:0e:4a:0b:da:81:f7:72:e0:e4:89:07:8e:51:a9:69:
b2:ff:cb:a5:f7:5e:7b:39:ee:a5:68:ab:21:c3:17:78:58:25:
b2:19:2a:96:23:0f:bc:30:6b:30:17:32:c0:63:6c:c4:d1:da:
16:dc:01:64:a1:ef:1c:0c:8e:37:04:5c:be:35:1b:2e:e5:ef:
b0:f8:d5:87:49:ba:ba:27:34:3c:c8:77:24:7e:9b:41:92:e9:
c1:3f:3e:ec:94:49:d6:dd:de:ed:6f:d1:47:b0:0f:9c:4b:f3:
49:f3:03:fd:93:af:dc:47:86:86:d4:aa:ce:76:6e:f5:92:6f:
ea:e1:e6:a6:f7:d9:e0:1d:56:a8:c6:52:9d:95:64:fd:4f:d8:
06:f3:17:77:aa:28:61:27:ab:7e:c0:d6:19:f0:a3:d9:4a:8e:
3a:1a:8e:14:da:7a:d5:f6:43:e4:14:b3:3c:32:7b:c1:17:05:
5f:f5:1c:d7:ab:13:94:d5:fd:b9:e2:2f:df:4e:b6:64:7f:6f:
86:d2:70:e2:1c:3d:22:85:b0:ac:41:b5:ed:74:5f:04:84:62:
d8:39:33:b1:f0:e3:9d:7d:74:cb:18:f7:c0:fb:d2:14:79:c2:
fa:71:d5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org