Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/YogjyHHEaH3uJaeGamZoCrqG39A.roa
File: YogjyHHEaH3uJaeGamZoCrqG39A.roa (raw, json)
Hash identifier: UcCVkli0XsKdeEuEY2eTCyOSzvPE8Cykpsowj0Kdkq0=
Subject key identifier: 62:88:23:C8:71:C4:68:7D:EE:25:A7:86:6A:66:68:0A:BA:86:DF:D0
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 0191035C946266866584EB88EFC484E16855
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/YogjyHHEaH3uJaeGamZoCrqG39A.roa
Signing time: Tue 30 Jul 2024 11:18:04 +0000
ROA not before: Tue 30 Jul 2024 11:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212150
IP address blocks: 193.151.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 12:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:5c:94:62:66:86:65:84:eb:88:ef:c4:84:e1:68:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Jul 30 11:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=628823c871c4687dee25a7866a66680aba86dfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:e0:16:4b:d3:a6:6a:65:20:e4:3d:97:57:
d7:3d:e8:a5:f5:14:b8:7a:2e:45:74:b4:c0:af:67:
76:9a:99:0e:56:b2:59:7d:58:e7:81:6f:03:01:16:
f3:b5:79:b4:ef:3e:5d:80:52:75:62:f3:38:16:e0:
b1:3d:14:b2:48:a3:ce:7e:89:e5:f8:ff:d6:0b:1d:
38:d4:86:da:ec:f7:e6:d3:54:c8:fe:41:49:6b:02:
24:7c:61:a1:cb:ea:dd:d7:df:aa:02:5d:dc:8a:44:
b9:34:14:ba:a7:c1:3d:bf:73:50:4c:d4:26:be:0f:
c9:d7:85:ac:08:08:d2:70:20:4d:1b:a2:52:fe:d3:
63:69:bc:63:db:6e:3b:0d:79:ac:79:c9:02:01:c0:
cd:53:80:fc:aa:37:03:fc:a2:de:4b:d5:42:ab:21:
83:3b:bc:8d:e8:83:a9:6b:16:ee:da:cd:ad:42:d2:
8c:cf:01:8f:f4:13:8a:75:d2:7c:4a:ad:0d:99:1b:
5b:37:52:be:93:ab:db:6a:7e:bc:38:b5:dd:7d:da:
ce:a0:85:a3:c8:ce:86:5c:ac:cc:5c:59:eb:ba:61:
5b:7f:e2:88:bc:7e:9c:11:7f:3d:ed:18:7d:ef:58:
8d:10:c5:ff:f1:5b:20:55:48:cf:82:0a:59:74:96:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:88:23:C8:71:C4:68:7D:EE:25:A7:86:6A:66:68:0A:BA:86:DF:D0
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/YogjyHHEaH3uJaeGamZoCrqG39A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.163.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a1:53:56:65:c1:7d:b2:8c:28:69:cb:01:8c:e2:6a:30:04:
a1:7d:47:9c:ce:14:f7:86:71:af:7d:40:c8:55:47:4e:17:08:
69:5e:74:d0:c2:83:38:dc:ea:0b:17:95:3a:b4:42:33:02:63:
f5:c8:2c:9c:cb:d1:34:02:7a:c0:98:c6:e4:42:63:35:70:02:
f6:0f:5b:69:d2:59:9f:27:31:0a:c7:fd:e6:36:4d:f1:00:20:
24:df:fe:e1:d5:39:d8:d2:9a:ca:f6:c0:91:0e:8d:bf:0d:96:
ff:d0:9d:12:ea:ab:a9:9f:df:3d:30:4e:1e:aa:a8:06:3b:10:
c4:07:2f:76:72:5a:d7:25:0f:a6:f6:cb:31:be:8d:9a:e4:3f:
c4:a1:0f:62:db:12:b6:98:ac:be:e6:cd:eb:d8:b5:94:da:d6:
d2:d9:61:d4:3f:7b:15:51:da:64:eb:91:2f:00:54:a3:92:53:
97:2a:05:9b:94:53:5b:43:78:25:93:ba:13:8e:d5:3d:66:0b:
41:08:79:57:f4:b9:31:21:b0:aa:33:db:c8:0f:42:5b:55:9c:
da:01:ca:24:b5:d2:bc:b4:cf:91:11:56:9e:3b:c0:53:fe:59:
2b:9e:f8:52:42:8c:a1:6f:15:b9:46:aa:3f:c7:bf:f8:0f:73:
9e:93:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 15:22:07 2024 by rpki-client on console-fra.rpki-client.org