Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YYKHRG7N1hH2CBw22yuMqiRXAuw.roa
File: YYKHRG7N1hH2CBw22yuMqiRXAuw.roa (raw, json)
Hash identifier: YEX8tgBDfw4Cjx00XG3hU7srGoF4Vi5mp6NdFD4Ygw8=
Subject key identifier: 61:82:87:44:6E:CD:D6:11:F6:08:1C:36:DB:2B:8C:AA:24:57:02:EC
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0185CF5870EEA7CF9AD83045ECD54C0E13E8
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YYKHRG7N1hH2CBw22yuMqiRXAuw.roa
Signing time: Fri 20 Jan 2023 13:22:37 +0000
ROA not before: Fri 20 Jan 2023 13:22:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 109.233.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cf:58:70:ee:a7:cf:9a:d8:30:45:ec:d5:4c:0e:13:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 20 13:22:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=618287446ecdd611f6081c36db2b8caa245702ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:7f:89:ca:fa:57:b2:7d:8f:08:8d:3c:f4:
55:43:27:d4:89:6c:d2:eb:d1:9e:23:e5:df:42:4a:
3b:c2:b8:a2:b0:d7:e5:61:a8:9a:dc:31:7c:dc:9b:
96:16:91:46:4b:a5:ff:7b:0b:a9:4a:7b:eb:38:c2:
0e:ec:d8:18:5f:4f:d1:42:46:b1:cc:6d:a4:62:01:
a4:3c:27:23:6f:6a:a5:ae:01:3b:07:44:3f:a8:e5:
44:b7:2f:6c:44:8d:a8:70:72:c3:d7:8c:05:79:2e:
02:70:c8:d2:df:10:76:d7:62:62:4f:a7:bd:30:9d:
bd:e7:98:1b:84:fe:34:a4:e1:c2:6e:7f:98:fa:9c:
69:10:7f:2c:df:28:8f:f8:1a:f9:8c:38:d4:6e:64:
2e:9b:db:90:b7:60:02:0a:5f:33:a8:19:a6:cc:40:
f5:16:e2:94:fc:ae:09:07:18:33:c4:1d:3f:c6:72:
be:9c:11:91:1e:ba:7a:78:d6:80:22:b7:4f:e6:34:
12:00:76:35:25:4f:af:c7:e1:07:fd:2a:93:0c:c8:
ec:ee:c0:30:20:83:02:03:f8:c6:e9:05:1b:83:cc:
e4:a8:b9:32:c8:b2:25:62:06:7d:45:fe:15:bb:ed:
be:90:db:9b:4f:b7:b3:85:b7:9e:43:ca:15:5e:a8:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:82:87:44:6E:CD:D6:11:F6:08:1C:36:DB:2B:8C:AA:24:57:02:EC
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YYKHRG7N1hH2CBw22yuMqiRXAuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.185.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b9:59:2b:69:60:87:0d:b9:40:2e:f6:88:26:b0:d9:08:3b:
0d:08:b0:ba:ee:f0:50:57:45:40:17:db:b8:e3:4e:c6:23:e4:
b1:c2:5e:aa:20:96:50:3b:5b:e4:f6:8c:bb:2b:0a:24:51:b5:
4d:92:a0:d2:6f:2f:3e:80:27:e8:44:48:0d:4a:21:43:c7:9a:
97:54:cb:48:c3:08:93:4c:62:86:9c:81:31:f8:06:7c:4a:34:
4d:aa:4e:bc:79:02:f3:02:72:2c:ea:86:88:7f:d0:f0:5f:a4:
b8:1b:a3:61:9d:a6:dc:2c:10:a1:37:b7:33:e2:c6:30:6b:ff:
04:22:0c:39:1b:1a:5b:2a:45:de:63:bd:de:60:00:03:b3:21:
66:30:09:eb:d0:53:71:8d:31:f8:76:9b:cf:36:da:ef:58:59:
9b:57:17:f4:03:e9:30:73:c2:ff:76:4d:9d:37:de:62:c7:78:
f8:83:8e:e6:fb:30:0f:0a:e7:ed:62:d4:05:76:4c:49:53:60:
6d:ad:a0:15:c7:16:bb:a3:68:bb:b4:32:7f:41:f0:3e:a1:ff:
0c:0f:b7:3f:d4:70:71:15:4a:d1:c0:7e:74:d2:02:6c:50:7e:
fa:e7:a7:6b:76:8e:ab:63:0d:00:f7:13:26:65:05:a3:d7:e7:
bb:f6:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org