Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/yw8LWizw53a6g2qC0b0L2kWVhCU.roa
File: yw8LWizw53a6g2qC0b0L2kWVhCU.roa (raw, json)
Hash identifier: QyK5oyLoNHfy2Rx0BNN5a71t7mr9s4HxD1glAdXakxc=
Subject key identifier: CB:0F:0B:5A:2C:F0:E7:76:BA:83:6A:82:D1:BD:0B:DA:45:95:84:25
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 01856D015F70FDD43D5B952F46F8FDC24CBD
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/yw8LWizw53a6g2qC0b0L2kWVhCU.roa
Signing time: Sun 01 Jan 2023 11:04:44 +0000
ROA not before: Sun 01 Jan 2023 11:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 193.5.152.0/22 maxlen: 22
193.247.182.0/24 maxlen: 24
193.246.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:5f:70:fd:d4:3d:5b:95:2f:46:f8:fd:c2:4c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Jan 1 11:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb0f0b5a2cf0e776ba836a82d1bd0bda45958425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c7:47:40:2e:d5:19:c7:77:ab:df:b6:09:ae:
2e:63:b8:c6:b5:4d:39:75:c9:55:d4:83:c3:5e:32:
0e:38:53:c1:1d:f7:7d:45:73:95:a7:09:97:16:4f:
65:41:0a:e2:55:e8:7c:5b:fc:07:57:54:79:06:6a:
47:b3:88:88:f7:e2:cd:17:f6:ae:88:76:75:1c:64:
76:b1:6d:7a:16:3f:2f:66:26:10:56:db:83:3a:5b:
e7:9b:4e:30:bd:a7:7b:97:ba:55:d8:9e:ce:66:9a:
d5:48:75:55:21:85:a6:2a:43:a5:05:9d:bd:00:19:
36:d6:91:2f:49:e5:81:1b:e5:af:42:5e:85:23:b0:
7e:a3:cf:1c:4d:2a:de:a5:e1:a5:b2:3c:ab:91:7b:
16:22:ae:61:fa:b0:37:66:a7:a3:84:71:a5:42:90:
87:c1:8b:c1:64:a2:b2:67:d5:a5:1d:3f:8d:e4:be:
6c:83:4d:9e:19:c8:7a:3d:61:3a:6e:f8:a4:b0:c7:
a9:66:20:ef:9d:80:14:93:78:51:5d:6a:76:45:63:
df:86:94:c5:9e:bf:3c:85:8a:7d:ab:a4:d8:57:d4:
17:2a:ae:10:ff:4f:6e:13:d3:37:10:05:e9:32:8c:
7d:1e:94:c0:6d:bc:6c:70:d4:9a:c4:dc:fe:81:1e:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0F:0B:5A:2C:F0:E7:76:BA:83:6A:82:D1:BD:0B:DA:45:95:84:25
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/yw8LWizw53a6g2qC0b0L2kWVhCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.152.0/22
193.246.121.0/24
193.247.182.0/24
Signature Algorithm: sha256WithRSAEncryption
15:bc:ac:e4:8e:e2:4e:4c:80:51:d5:7c:8a:7c:dc:47:66:5c:
85:22:13:01:1b:5f:6d:21:47:82:ef:b4:65:b3:ed:48:80:18:
ee:7a:d3:04:6e:b0:3c:e6:20:1f:22:83:a4:b7:4c:1b:8b:55:
ed:c7:63:79:dc:95:0a:6e:dc:e7:c8:2d:55:ea:51:06:ac:fb:
67:f7:8a:5f:75:09:cc:07:38:48:6f:33:b7:8a:a3:5c:db:be:
b9:7f:7e:8b:13:d8:d1:8b:4f:62:a3:3c:ae:7d:4a:20:b4:15:
41:53:98:63:ff:81:dd:5e:48:85:46:10:ec:88:16:3f:e7:b6:
37:92:fd:04:a9:ee:fb:57:24:cc:59:07:b4:dd:2e:fe:67:59:
fb:fd:af:dd:58:ce:98:43:5e:75:df:c9:14:5a:e9:8c:d7:24:
4a:62:d5:54:2e:87:61:75:b5:81:2a:90:b0:e2:f2:bf:f5:f9:
1b:ba:4c:55:6c:c3:60:cb:e2:c5:da:c6:d3:45:48:b6:7a:f8:
cc:49:6a:50:5a:3d:05:99:4c:9c:4c:5e:26:b4:84:2f:42:3a:
2f:52:be:42:ce:c9:bd:e3:ea:4d:89:d4:16:2d:a7:db:02:9a:
11:d9:6c:c4:de:b3:b8:f4:e1:63:79:36:95:8f:07:0a:96:10:
ff:3f:aa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:37 2024 by rpki-client on console-ams.rpki-client.org