Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/yqPQ6oGjovFM6npIIztfjbRVkGI.roa
File: yqPQ6oGjovFM6npIIztfjbRVkGI.roa (raw, json)
Hash identifier: TkDBZ4Me2F14GSS4AfFsy8nU04Rw9wF4bJPRgmiOvA0=
Subject key identifier: CA:A3:D0:EA:81:A3:A2:F1:4C:EA:7A:48:23:3B:5F:8D:B4:55:90:62
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 018E85417BED7703D7EEA1B09664DCC94B5D
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/yqPQ6oGjovFM6npIIztfjbRVkGI.roa
Signing time: Thu 28 Mar 2024 13:30:44 +0000
ROA not before: Thu 28 Mar 2024 13:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212150
IP address blocks: 193.151.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Apr 2024 11:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:41:7b:ed:77:03:d7:ee:a1:b0:96:64:dc:c9:4b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Mar 28 13:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=caa3d0ea81a3a2f14cea7a48233b5f8db4559062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:8e:16:9b:88:c1:4c:4f:9d:72:ba:f9:b8:
60:79:71:c7:59:f6:51:b5:13:44:87:4c:15:2b:3c:
df:c8:b8:96:61:f3:e0:b4:62:1e:be:5f:0f:32:76:
08:8c:1d:ff:2d:02:0a:ba:7d:14:13:31:48:e2:28:
21:db:76:e1:a4:17:1b:71:8c:fc:49:1a:91:b8:23:
81:e8:17:a5:1a:eb:db:b5:7d:e2:ea:d1:d1:3e:7e:
14:65:66:e5:4a:56:61:62:62:72:23:d1:b0:58:85:
71:f8:b3:82:e7:93:ba:84:29:4e:a6:f9:e5:4c:7d:
b3:81:1e:19:14:bf:75:4a:90:86:17:97:45:b3:89:
b3:e4:ae:5a:75:6a:5e:6c:a5:a5:57:da:34:34:e8:
cf:c2:23:3f:17:ee:35:d5:79:20:a1:02:74:7e:ae:
20:36:a3:d3:aa:04:03:8d:f1:99:4b:52:33:7f:99:
70:04:5f:1c:44:cc:75:d6:f7:30:69:b7:dc:a7:4f:
25:69:74:78:ba:3b:7e:b5:b3:d4:67:20:92:73:c4:
fa:87:04:e9:2d:e2:6f:a6:76:86:38:ca:47:3f:1a:
35:ee:66:30:0d:16:13:5b:49:4d:6f:1b:de:e7:4b:
74:55:d0:22:0b:e5:f7:2c:29:18:7b:c3:1b:35:6c:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A3:D0:EA:81:A3:A2:F1:4C:EA:7A:48:23:3B:5F:8D:B4:55:90:62
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/yqPQ6oGjovFM6npIIztfjbRVkGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.162.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:8c:70:d0:f4:05:83:51:ba:2e:c1:1c:09:de:32:57:10:9f:
32:ac:11:56:d8:b2:a0:47:f6:ce:9a:e3:a3:f6:17:8c:2b:45:
9c:15:4d:9d:84:d1:a0:8b:d0:c4:95:6b:f2:49:f9:59:8d:83:
aa:ed:a2:06:8b:cd:64:ad:79:84:e4:ef:3d:ac:28:ed:61:91:
76:6e:4e:a0:b5:78:f7:1f:d7:94:83:86:4a:c0:9c:a4:cd:81:
9f:ec:f8:25:c3:73:ce:b7:24:2d:8f:89:45:07:d6:01:a0:c6:
56:da:e7:28:4e:3c:3f:1a:29:c4:1b:fd:64:4d:a7:f5:2d:8e:
4d:1d:ed:20:48:5b:d5:9d:9a:7e:5d:50:f1:3d:8c:3e:83:1d:
7f:92:d0:57:31:d9:11:6e:83:64:c1:c4:ef:a8:92:93:cb:9f:
0f:97:38:32:cc:74:2b:36:2b:48:6b:00:56:02:0d:fd:67:51:
1d:bb:cd:79:bc:04:60:56:07:2d:81:55:65:00:cd:67:86:8e:
27:8e:47:89:18:b1:eb:b5:e1:30:d7:a6:4c:74:92:5d:9a:65:
0b:1d:c0:4f:6f:94:c2:48:90:6b:d5:5e:dc:e8:5c:6c:33:6e:
c3:f3:13:50:38:27:a9:4b:7e:39:b3:df:af:96:0d:a6:96:ce:
de:25:84:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:22 2024 by rpki-client on console-ams.rpki-client.org