Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/Y9ytb-btxS_Xwdy-i5P5x1oVT_s.roa
File: Y9ytb-btxS_Xwdy-i5P5x1oVT_s.roa (raw, json)
Hash identifier: OpHYdC+G6eQAlLUwnPFXTzc8YygqB79EZi3KLtcy8VM=
Subject key identifier: 63:DC:AD:6F:E6:ED:C5:2F:D7:C1:DC:BE:8B:93:F9:C7:5A:15:4F:FB
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 018747B14CB94D310C276F3684A854256533
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/Y9ytb-btxS_Xwdy-i5P5x1oVT_s.roa
Signing time: Mon 03 Apr 2023 15:16:54 +0000
ROA not before: Mon 03 Apr 2023 15:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208486
IP address blocks: 194.147.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:b1:4c:b9:4d:31:0c:27:6f:36:84:a8:54:25:65:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Apr 3 15:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63dcad6fe6edc52fd7c1dcbe8b93f9c75a154ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:3d:fc:a2:38:6a:f7:e0:9a:78:ee:a8:51:
90:f4:56:0b:10:16:bf:66:8c:23:f8:f5:f2:44:05:
f6:14:19:af:32:b2:bc:80:23:66:28:ff:1d:5d:ef:
94:af:8e:c5:e7:92:70:b9:5b:84:fd:1f:cd:ae:f6:
7d:2f:bb:10:72:c9:f5:59:f2:30:ee:a4:8f:84:1d:
13:8a:b3:f6:18:61:6d:0e:db:c6:d4:d7:03:b1:a3:
e6:a2:b2:01:fb:3c:92:64:50:a2:8a:71:97:49:d1:
ea:6e:25:78:d6:5d:32:be:1f:28:6e:9f:10:95:bf:
0f:a2:65:ab:a0:72:9b:37:27:d3:dc:54:43:05:ab:
70:38:2c:3d:46:78:6e:d5:79:43:04:09:13:d5:80:
a5:ff:4e:b1:f5:5b:b5:2b:35:3f:af:a3:aa:74:be:
10:ca:eb:1f:03:76:2d:ad:42:ca:45:ff:19:59:4d:
f8:16:b2:be:9a:93:83:44:80:9b:aa:ca:bd:20:e1:
48:bd:fd:fe:26:20:e2:47:4d:3c:04:68:9f:8a:32:
5d:17:96:1f:df:2f:ad:7c:64:83:b7:99:c2:75:c7:
0f:9e:10:51:c4:50:7e:59:57:3a:b0:b9:e4:83:e9:
da:5f:f8:11:39:ff:d1:68:1a:22:55:af:ae:80:e6:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DC:AD:6F:E6:ED:C5:2F:D7:C1:DC:BE:8B:93:F9:C7:5A:15:4F:FB
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/Y9ytb-btxS_Xwdy-i5P5x1oVT_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.226.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:36:57:d0:75:56:e1:ad:1a:b8:62:6e:dc:e0:47:47:03:ec:
41:dc:11:02:14:fc:11:90:84:c4:25:7a:4b:38:73:51:76:b4:
81:40:9d:36:06:f0:be:21:ed:9b:99:d5:21:fd:77:d8:9d:f6:
b7:b7:b5:da:44:79:01:a3:be:8e:94:d1:54:8a:d3:a5:bf:f9:
b0:df:7d:45:e4:ac:41:55:ab:78:b7:72:9c:2c:85:c7:03:43:
97:82:9b:d1:ad:bf:7f:40:4f:b4:47:bd:0c:04:29:ea:a6:53:
f8:c5:22:46:79:38:64:a7:8e:57:76:ee:2a:22:fd:43:b6:af:
d6:52:3d:11:61:2f:23:08:7b:58:7d:00:f7:33:0e:30:e0:ec:
8b:ec:a3:89:f5:8e:7f:a9:42:f7:9e:0c:56:ba:02:61:2f:66:
a6:04:4d:64:ea:1b:90:fa:0a:64:82:89:52:58:e7:1a:11:a8:
7b:c4:be:8b:40:ba:26:50:7c:c1:a2:87:af:fa:78:4d:09:7d:
26:38:e9:58:46:09:bd:89:37:b5:18:49:bb:89:0d:d7:60:e6:
c0:aa:4b:ee:ec:0c:40:bf:01:f8:fb:30:ad:c2:70:28:24:33:
c1:93:34:59:a9:1f:c0:eb:b2:e1:49:27:1a:ab:b0:f7:91:1e:
d3:4f:fb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:01 2024 by rpki-client on console-ams.rpki-client.org