Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yj45q7J-vbi11rRQ4cm9BFbcxeA.roa
File: yj45q7J-vbi11rRQ4cm9BFbcxeA.roa (raw, json)
Hash identifier: NoBl7YfzpCHp6vimpEtVBnyZDbgaohLu4y3zz2T3q3U=
Subject key identifier: CA:3E:39:AB:B2:7E:BD:B8:B5:D6:B4:50:E1:C9:BD:04:56:DC:C5:E0
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0189590AE034282BC16FC6302700E7A79033
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yj45q7J-vbi11rRQ4cm9BFbcxeA.roa
Signing time: Sat 15 Jul 2023 10:13:52 +0000
ROA not before: Sat 15 Jul 2023 10:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28753
IP address blocks: 188.255.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:59:0a:e0:34:28:2b:c1:6f:c6:30:27:00:e7:a7:90:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 15 10:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca3e39abb27ebdb8b5d6b450e1c9bd0456dcc5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:d1:8c:6e:12:5c:c8:c5:f4:c6:18:d1:41:
c0:82:32:f5:dc:4b:2a:a0:90:99:f3:24:1c:31:d6:
6f:35:75:7a:5f:b2:f5:ed:f8:95:27:55:25:34:ea:
3b:22:5f:b6:d5:fd:6f:d8:e2:c0:66:d4:d7:79:56:
6f:e1:5a:96:dc:80:b7:a9:de:fa:e5:7c:bc:6f:bf:
47:d7:2b:a6:ae:cf:b7:83:2b:e0:9d:21:b8:4e:61:
ea:a1:7f:46:31:3c:b3:d7:8b:d8:f0:1c:eb:2e:84:
fd:be:55:95:c2:ee:87:b1:e6:7a:df:4f:a7:b4:41:
13:9d:c0:d0:b7:a1:2a:27:be:fc:4c:62:16:8a:8a:
d1:f1:61:db:96:8c:71:8b:37:ad:5c:a9:fb:88:ef:
d9:1f:4e:8e:3a:91:12:5b:ce:f9:1d:57:3e:5e:96:
91:4b:0b:e5:3b:76:80:7d:7c:d4:3d:67:b6:c8:dc:
0d:8b:70:c6:39:62:3d:2b:be:dd:b3:cb:e0:32:b9:
25:14:11:f7:c2:c3:95:86:d9:1a:bf:6a:f0:0b:ac:
7b:fc:b0:cb:77:cc:d4:5b:d1:76:12:a6:0a:55:f7:
4e:c3:76:1a:0f:32:5b:06:2c:c8:af:b2:a5:fd:26:
aa:1b:a2:b2:24:9a:93:9f:44:4a:50:0a:0a:66:b7:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3E:39:AB:B2:7E:BD:B8:B5:D6:B4:50:E1:C9:BD:04:56:DC:C5:E0
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yj45q7J-vbi11rRQ4cm9BFbcxeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.141.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b3:1b:a9:63:7b:3c:ba:c9:fd:87:93:3f:35:90:bf:9b:cc:
49:fb:ed:60:2d:4c:e0:71:fb:70:d1:6e:9d:76:5e:7d:64:c5:
83:2e:fb:17:06:64:3f:1d:05:9b:d2:fa:bc:3b:c7:c4:de:df:
0c:f0:e6:a2:d0:84:b7:6a:c5:ea:da:dc:ec:1a:fa:e0:f0:8a:
f0:a0:cf:33:7b:54:ae:e2:9b:96:97:fd:28:f7:30:35:1b:32:
f4:0e:9c:1e:4b:fa:8d:ba:47:da:92:91:69:27:6d:96:8b:d2:
09:c5:69:43:15:8c:2c:4a:93:a7:b7:7d:fb:3b:49:95:7e:64:
d5:eb:6b:37:f7:91:a8:c0:e1:fd:fa:36:de:26:e4:6d:ac:0c:
fd:72:3f:c4:57:85:83:41:a9:6f:76:01:9d:ae:90:e7:8d:5c:
7c:ed:8e:d6:51:cf:8c:ab:72:a8:04:49:34:05:f0:be:83:86:
0d:ce:b5:c2:17:5c:84:31:85:0c:5a:1c:fb:97:c4:46:13:58:
68:5f:17:ff:30:8f:8f:bc:0d:cf:b9:fd:4f:59:c6:8f:20:64:
90:eb:64:f0:99:0d:a8:6b:53:9c:6e:67:62:e2:d0:63:50:37:
f0:01:a3:ca:bd:54:1b:b2:fa:af:51:56:2c:66:ce:86:eb:46:
93:01:6c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 13 05:27:46 2023 by rpki-client on console-fra.rpki-client.org