Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/YcF6Hk5qz3GOVkO7mBdZf_3SYHQ.roa
File: YcF6Hk5qz3GOVkO7mBdZf_3SYHQ.roa (raw, json)
Hash identifier: WBe6hmlt45nh0Meb6usxlL1zKE8zKwgwRGLUka2B5RI=
Subject key identifier: 61:C1:7A:1E:4E:6A:CF:71:8E:56:43:BB:98:17:59:7F:FD:D2:60:74
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01856FF02282086B195F5D73DC37544780DA
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/YcF6Hk5qz3GOVkO7mBdZf_3SYHQ.roa
Signing time: Mon 02 Jan 2023 00:44:46 +0000
ROA not before: Mon 02 Jan 2023 00:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57100
IP address blocks: 94.154.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:22:82:08:6b:19:5f:5d:73:dc:37:54:47:80:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 2 00:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61c17a1e4e6acf718e5643bb9817597ffdd26074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:97:8b:ea:9e:fa:80:2f:12:4d:ba:d5:66:
0b:5f:92:d9:3c:6d:44:6d:60:cf:16:19:51:a2:8b:
d7:89:c1:03:a2:90:68:87:e6:50:67:14:d2:e1:1a:
19:22:9d:78:08:10:e2:e7:4b:29:36:0f:94:d9:4e:
63:b5:14:86:4d:7a:9f:08:e6:ac:ae:e8:68:99:67:
73:5b:71:bd:b4:76:26:a2:c7:e5:6d:82:55:db:b3:
c4:37:40:8c:6e:e2:da:5d:cb:dd:17:f6:40:b5:fe:
be:cb:00:c0:85:be:ba:da:7f:e9:dc:f5:fd:0e:8d:
fd:3b:10:53:0e:c9:30:ab:5f:61:e9:08:02:d2:2c:
43:2c:a0:83:49:79:9a:ec:ca:34:fc:fc:60:cc:51:
54:c4:dc:99:3b:83:df:0f:21:ac:0d:e8:04:c4:58:
0a:b2:2c:4e:11:36:cf:58:4f:d7:83:84:a2:cc:7c:
72:df:ba:1e:cd:d5:19:bf:6a:78:96:a0:39:9f:23:
67:67:c9:0f:88:ce:b3:59:09:f6:f9:40:ff:63:c8:
6c:31:5e:35:47:48:82:ec:37:10:24:4d:46:75:d5:
c0:ac:27:ab:02:08:eb:0d:4d:fc:6f:ff:34:c7:da:
c5:38:dd:a7:23:82:dc:fe:fc:03:a6:3c:44:fd:4f:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C1:7A:1E:4E:6A:CF:71:8E:56:43:BB:98:17:59:7F:FD:D2:60:74
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/YcF6Hk5qz3GOVkO7mBdZf_3SYHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.39.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a4:73:11:bc:dc:d5:c2:f7:2a:50:51:42:e3:a1:5a:55:3b:
85:72:a5:b7:a9:0f:b7:69:ad:c3:5a:71:0b:60:e6:d2:46:dc:
37:7e:6e:a5:43:b6:5a:4f:e0:85:06:0e:a4:c9:a2:45:f8:5e:
79:74:81:a5:0a:0b:47:e3:6f:ac:62:0b:6f:4e:25:1f:e2:a7:
e9:f5:7e:fa:99:b3:d9:64:03:28:57:3e:7b:3e:9e:a8:61:2d:
51:bf:25:d8:61:fd:56:dc:44:20:52:c7:4f:0c:d1:45:dc:d6:
0e:97:de:3c:15:1c:e1:0c:27:0e:84:b6:15:85:99:24:0b:ad:
2d:fe:3f:b5:08:bb:e0:6a:5f:1a:a9:64:09:7f:58:f6:cf:50:
82:0d:65:dd:fa:32:38:92:ee:24:4c:0d:d3:3c:68:88:2f:d7:
5d:94:be:b6:d5:6d:84:8f:83:da:56:6a:91:39:d6:1f:54:8a:
ab:c2:d5:cb:5d:40:d5:b8:42:61:07:d4:16:d2:18:75:a1:4e:
2d:62:02:d6:ea:46:ec:54:61:a6:5d:5d:7e:34:26:26:25:d9:
fd:b6:dc:25:2e:ab:2d:7b:a6:16:79:29:18:55:02:8f:ba:f6:
89:b9:3c:a8:5e:de:ed:89:7a:c1:af:e2:f4:71:ce:e7:1a:e0:
2d:f3:f2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:32 2024 by rpki-client on console-fra.rpki-client.org