Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/y-vlqz5RQrZ9QtXbntLm0Uh_kEA.roa
File: y-vlqz5RQrZ9QtXbntLm0Uh_kEA.roa (raw, json)
Hash identifier: GFcxSs6U5vOLaOpTDW1JnPkRXawTkMnyiWOU7ocZVtQ=
Subject key identifier: CB:EB:E5:AB:3E:51:42:B6:7D:42:D5:DB:9E:D2:E6:D1:48:7F:90:40
Certificate issuer: /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial: 01856C782E40BDE297C56CEEEE2FEB08A42F
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/y-vlqz5RQrZ9QtXbntLm0Uh_kEA.roa
Signing time: Sun 01 Jan 2023 08:34:53 +0000
ROA not before: Sun 01 Jan 2023 08:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 193.134.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:2e:40:bd:e2:97:c5:6c:ee:ee:2f:eb:08:a4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Validity
Not Before: Jan 1 08:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbebe5ab3e5142b67d42d5db9ed2e6d1487f9040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:bc:b6:aa:60:d6:a7:77:07:0f:61:69:b8:
a2:10:28:68:a9:f1:50:a4:4c:75:67:2a:1c:9d:1d:
8b:dc:9d:2f:61:35:1f:e4:b5:fc:00:7a:8f:f0:36:
bc:ee:0c:93:67:8b:53:39:a7:cd:dc:35:a1:ac:e6:
49:0e:8d:5b:0d:1e:53:d1:0c:d1:dc:22:56:2d:83:
81:09:be:bb:e7:77:4f:c9:1d:e8:80:a8:2e:5c:14:
f1:54:64:a5:a2:a8:b5:ea:56:99:76:80:e6:71:9a:
fd:01:75:8e:b0:21:06:de:48:c8:b5:df:6a:d9:f7:
c4:b7:f9:8f:22:b5:32:48:51:50:67:2d:a1:c1:18:
f0:51:27:50:6f:6d:0f:ac:0c:3f:45:95:c0:29:b4:
05:88:a9:f4:c7:54:85:97:48:50:95:76:28:9a:55:
2b:19:e6:3c:65:a2:f5:09:9f:14:c7:2e:87:8e:a5:
85:e0:57:71:07:a8:8a:a2:47:2d:06:1a:e5:f6:f5:
b9:63:fc:db:53:62:65:20:08:2f:ad:9e:67:dc:c4:
c1:f2:8d:83:c8:96:18:de:c9:be:5b:b3:14:f6:63:
cc:e4:56:25:ba:3d:94:87:17:e2:60:e6:7f:16:1d:
ce:cb:dc:81:a9:c7:d3:bf:9c:85:33:55:0e:0c:d7:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EB:E5:AB:3E:51:42:B6:7D:42:D5:DB:9E:D2:E6:D1:48:7F:90:40
X509v3 Authority Key Identifier:
keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/y-vlqz5RQrZ9QtXbntLm0Uh_kEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.159.0/24
Signature Algorithm: sha256WithRSAEncryption
80:5d:f6:43:3c:01:16:15:5c:ff:4d:a2:72:93:d0:de:48:01:
49:d5:8f:38:80:19:f8:5b:40:95:aa:e5:64:64:0b:70:f1:b6:
47:63:89:c3:c9:88:79:3c:95:1f:5b:07:f1:d6:39:90:88:aa:
b9:ee:89:ed:0d:90:97:d8:e1:a3:91:3b:60:0a:28:3e:c2:fe:
73:a7:3c:d8:d5:73:34:a1:6a:1f:07:9d:bb:3c:00:ef:f5:02:
76:28:fb:97:12:99:72:74:da:23:2e:bf:71:08:f7:69:67:97:
d4:d1:dc:7d:e7:2f:57:44:6a:a1:7c:fa:b3:61:ad:04:90:81:
24:1f:50:dd:7b:e7:5d:04:a7:7b:db:52:3c:26:05:7f:fc:11:
75:86:a3:23:88:bb:1e:c4:0e:2c:6c:10:de:3a:bc:32:0c:8f:
f8:1c:5d:77:39:a4:0f:df:a6:28:18:8b:a8:28:79:25:8a:22:
af:4d:f9:20:b7:be:b4:fa:a9:62:bb:62:7a:45:55:e0:30:76:
39:a8:13:2f:d4:67:e1:70:b9:19:81:d4:a8:1b:6f:12:10:58:
cf:e4:5b:08:a4:c6:e6:23:f9:be:40:57:d0:ec:40:8d:7c:34:
b4:9c:1e:06:79:bf:14:ae:9d:6a:c9:f3:fd:4e:72:74:67:e7:
01:45:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:42 2024 by rpki-client on console-ams.rpki-client.org