Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Y_62kHLnFgYHsQjyjt1aMlZzpRk.roa
File: Y_62kHLnFgYHsQjyjt1aMlZzpRk.roa (raw, json)
Hash identifier: Rcd3m2AEfsiAfXHL6ruIC6PQCpRhiObCw1TLkOXK4WA=
Subject key identifier: 63:FE:B6:90:72:E7:16:06:07:B1:08:F2:8E:DD:5A:32:56:73:A5:19
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01856EA6C1CB96FC0610116801DC7786413B
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Y_62kHLnFgYHsQjyjt1aMlZzpRk.roa
Signing time: Sun 01 Jan 2023 18:45:00 +0000
ROA not before: Sun 01 Jan 2023 18:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 86.106.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:c1:cb:96:fc:06:10:11:68:01:dc:77:86:41:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 18:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63feb69072e7160607b108f28edd5a325673a519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:03:94:88:b8:7e:23:28:02:38:58:a4:ec:47:
bd:47:45:5a:df:bb:1c:a2:7d:79:4c:0c:39:15:ea:
d2:00:79:6c:2d:33:e5:64:e9:87:d5:ec:a2:5c:3f:
86:07:0a:ec:db:10:8d:9c:83:a5:a1:ce:77:11:72:
31:8f:5e:d5:3e:d9:bf:aa:9a:6b:93:9b:b3:f8:80:
f4:74:b7:19:6c:25:f8:01:d3:f6:57:6b:9c:a9:f5:
80:ca:dc:e3:52:59:a4:92:88:8d:8a:29:1f:d1:37:
57:82:e9:ce:f0:98:27:ff:d2:ae:66:07:2c:34:db:
a6:77:a7:b6:fb:8f:65:b1:ae:62:65:40:69:30:ec:
eb:2a:54:b4:7e:2e:de:b3:ff:bb:d4:12:95:1e:76:
60:05:5f:a7:76:84:48:71:11:41:f2:b5:c6:07:da:
8d:60:c8:24:22:f8:a8:cf:4b:8d:8b:03:d9:23:2c:
76:e3:db:78:f0:fd:8c:e4:b1:c2:bb:44:21:61:10:
23:ae:dd:26:83:ff:63:76:4d:a3:f8:26:a8:4f:96:
79:43:20:22:b8:3c:5c:74:e1:4b:d3:e3:59:48:b4:
1a:f4:c4:a8:37:9a:2a:50:85:2d:ec:8c:d1:04:8a:
33:aa:b8:bd:d1:69:2a:e5:7d:86:8f:07:0b:dc:1d:
17:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FE:B6:90:72:E7:16:06:07:B1:08:F2:8E:DD:5A:32:56:73:A5:19
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Y_62kHLnFgYHsQjyjt1aMlZzpRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.97.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a5:bd:c9:9d:1e:e2:b7:84:94:f1:52:3b:d9:52:cd:90:d7:
96:b2:8f:7c:f7:bd:6a:0d:33:cc:8e:16:3b:04:1c:51:a5:92:
d2:9f:d2:2f:4b:df:41:12:cf:cb:43:92:67:41:6e:c7:ab:ee:
23:4a:ae:7c:5c:9f:66:ed:ae:fa:24:9e:f3:64:78:60:3e:5a:
4e:71:2b:ef:47:3e:11:83:d0:6b:dd:43:57:8e:98:33:b6:68:
b8:4c:4c:4b:f2:33:36:44:f0:cd:90:1d:9a:3b:d6:35:ae:6f:
df:f9:ff:91:b4:4a:ee:1c:3e:95:3d:ca:9d:12:ae:3a:b2:a4:
95:fa:61:76:51:55:fe:d0:05:33:4b:d1:05:12:94:2b:c9:76:
4b:45:0a:6e:b3:0b:86:f5:30:78:46:a3:91:a8:6f:f6:2a:ff:
83:89:0f:3e:ba:8b:6e:55:71:47:4e:3f:4c:6c:6b:a5:34:d4:
2f:0e:f0:ad:af:ec:8f:54:63:79:1e:a0:fc:a1:db:0c:89:78:
95:a1:1d:39:5c:f5:24:1a:34:79:9a:25:8e:82:53:df:c3:6b:
34:65:1a:83:99:f7:45:8b:6b:05:7a:27:d7:42:c0:fb:8e:70:
45:5d:be:ca:4a:40:e1:f1:63:c6:9d:31:db:d0:71:18:be:72:
4a:3e:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:54 2023 by rpki-client on console-ams.rpki-client.org