Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/yb_al9YSBupb93gJpsdq7cJW3oo.roa
File: yb_al9YSBupb93gJpsdq7cJW3oo.roa (raw, json)
Hash identifier: J7X+xIJ9RQp5GttqQ8DaoOjp3s3D94PyHgYsjmVzaHE=
Subject key identifier: C9:BF:DA:97:D6:12:06:EA:5B:F7:78:09:A6:C7:6A:ED:C2:56:DE:8A
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 01856ED4A4343D0C00C4F3EE2FC460B9E4FB
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/yb_al9YSBupb93gJpsdq7cJW3oo.roa
Signing time: Sun 01 Jan 2023 19:35:07 +0000
ROA not before: Sun 01 Jan 2023 19:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46261
IP address blocks: 194.93.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 14:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:a4:34:3d:0c:00:c4:f3:ee:2f:c4:60:b9:e4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jan 1 19:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9bfda97d61206ea5bf77809a6c76aedc256de8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:38:c8:91:a0:f8:09:a3:d0:74:cc:18:2a:
31:96:d6:7c:ff:6c:3d:88:54:88:32:fb:23:63:ca:
63:5d:9b:5c:49:ed:b9:a4:43:7a:45:79:ed:67:13:
f3:e3:03:0f:95:4a:d3:55:72:6b:54:7d:7f:d4:cd:
ce:08:8a:55:40:e7:71:e8:93:74:8e:1c:b7:a4:7d:
c3:98:e3:54:e7:d3:e5:1f:4b:68:3a:db:4f:3f:4e:
f3:44:c0:79:03:e6:7f:41:a2:32:e8:64:1a:b2:2c:
f0:ba:70:a9:31:7a:3c:b3:0c:00:3a:d2:f9:cd:20:
53:fe:5f:32:89:dc:b7:c8:85:f4:cc:bf:ac:7c:08:
a4:e4:c2:95:00:d4:21:bd:d4:24:79:3d:9e:21:5b:
11:a6:02:3c:81:ec:36:81:1f:7b:a5:2e:9f:2a:13:
55:65:6d:95:7c:82:ea:c6:56:b5:f8:dc:f2:e6:ca:
ef:8d:5a:54:44:54:78:bc:ec:63:42:ea:95:46:8f:
64:ae:85:7e:45:dd:52:71:16:6e:a3:71:b2:ad:42:
83:2b:c6:54:f9:27:76:59:25:ae:a9:19:c2:63:52:
e5:06:8b:88:75:2a:9e:35:0b:5f:c0:d8:fa:8e:f4:
5e:a1:ce:20:63:66:7d:c7:e1:de:4c:ea:eb:fe:47:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BF:DA:97:D6:12:06:EA:5B:F7:78:09:A6:C7:6A:ED:C2:56:DE:8A
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/yb_al9YSBupb93gJpsdq7cJW3oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:cb:c0:96:5e:b4:fa:fd:e3:3b:ad:25:41:d2:a7:b1:79:c9:
a0:16:48:8f:b8:e7:5a:dd:6a:99:37:33:9d:92:b7:ab:21:4c:
fa:63:12:90:93:4c:0a:c5:af:dc:bc:59:22:2d:3d:54:a1:dc:
d7:88:c9:4b:5d:f7:5e:c6:b3:ae:db:7f:4e:cd:20:1c:07:d1:
be:62:a2:30:1d:55:a4:f0:ad:14:89:da:e5:4d:d0:9a:5d:74:
c2:d0:d1:9d:66:1f:ff:af:f1:18:f4:84:e8:32:8e:fa:1d:da:
7c:ca:dd:c4:20:36:e9:81:56:9e:aa:79:92:e3:e6:7e:92:93:
dd:c9:0d:00:2b:e7:b7:f2:7c:38:cc:9b:14:63:74:63:a1:0b:
78:e5:b5:38:05:37:75:a4:e1:39:a2:fd:1c:d1:48:37:b7:a3:
73:e1:06:16:4c:2d:e6:59:ac:b3:37:2a:3b:39:ed:6f:26:10:
2b:8d:0b:d1:c9:5d:32:0c:45:57:d1:ed:c5:01:a5:8f:16:0b:
67:5f:90:b6:63:80:36:a1:d4:63:41:f9:e6:68:11:98:28:88:
1d:ab:aa:91:29:72:bd:d6:43:97:15:3c:ff:45:59:9d:57:2f:
85:24:34:50:a0:78:ae:82:c8:73:b6:06:83:f8:b9:09:22:06:
3a:ca:4a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:40 2024 by rpki-client on console-ams.rpki-client.org