Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/ygNRE28EuckX_e6bc_sU43LbbZk.roa
File: ygNRE28EuckX_e6bc_sU43LbbZk.roa (raw, json)
Hash identifier: n/gkFi0yL5usyCPwkY9kD5xq/dKzkQ0+o7l7QVpG3Gk=
Subject key identifier: CA:03:51:13:6F:04:B9:C9:17:FD:EE:9B:73:FB:14:E3:72:DB:6D:99
Certificate issuer: /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Certificate serial: 01856B4A08F1024861CEC6DBE916D998F954
Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/ygNRE28EuckX_e6bc_sU43LbbZk.roa
Signing time: Sun 01 Jan 2023 03:04:52 +0000
ROA not before: Sun 01 Jan 2023 03:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 176.124.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:08:f1:02:48:61:ce:c6:db:e9:16:d9:98:f9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Validity
Not Before: Jan 1 03:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca0351136f04b9c917fdee9b73fb14e372db6d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:cc:75:0a:8f:a6:f3:a5:b3:30:27:cb:f1:
c4:76:44:3b:80:d3:d3:19:94:99:fb:12:c2:cf:69:
7d:7d:66:53:5a:43:5c:c7:7e:51:7f:0a:97:44:17:
15:79:6e:cc:77:ed:20:f3:c5:3e:54:6b:cc:68:09:
06:55:f3:59:b8:78:57:f5:52:11:f3:0b:c8:e9:b7:
d2:2d:62:88:d6:03:e9:ee:56:b9:16:58:7a:27:cb:
70:d6:57:09:61:e9:e0:96:d9:8f:39:ca:97:5b:43:
40:ec:0c:b0:d7:43:15:10:0b:1b:b9:38:d8:ea:2b:
bd:b5:2d:12:60:7b:f4:c8:9c:7e:89:b3:39:ed:23:
83:6d:8a:13:e6:ef:b5:5b:e6:d7:02:26:06:3d:7f:
8a:fb:50:36:e6:c5:70:1a:ea:09:94:da:dd:a6:a7:
ae:97:19:c4:c1:ce:eb:ae:f8:3a:c4:57:78:ec:e3:
c6:fb:62:51:7e:8c:72:9d:52:46:c3:28:47:d6:d0:
ab:06:69:1c:9f:d1:29:c7:ad:4d:50:3b:df:08:b2:
f8:c4:59:35:82:cd:92:76:1d:1e:17:b7:72:a9:8b:
37:ad:1c:13:b3:42:4e:6b:41:28:22:a0:3c:30:47:
da:a0:51:43:c3:df:44:90:60:7f:da:2d:b9:4a:2c:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:03:51:13:6F:04:B9:C9:17:FD:EE:9B:73:FB:14:E3:72:DB:6D:99
X509v3 Authority Key Identifier:
keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/ygNRE28EuckX_e6bc_sU43LbbZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c4:0b:e1:eb:0e:d6:a1:26:a1:55:48:b7:5b:91:09:3c:e8:
94:f7:d7:76:38:2c:ad:5b:03:c8:43:09:58:73:64:ea:a7:1b:
76:89:d6:d5:d0:6d:8b:dd:43:27:37:f9:3e:f5:15:6b:a1:9c:
c9:85:24:75:e9:b6:4e:db:ab:c0:70:bb:ef:50:9e:76:5d:28:
d9:80:98:6c:52:8d:d5:ef:0e:43:09:c9:80:0d:17:62:03:27:
df:64:fd:bb:6d:c0:e4:dc:9a:5c:14:cf:ce:05:c6:9a:a0:75:
d3:45:25:1e:0b:1d:c8:1f:04:ea:9f:b7:b7:0a:60:95:18:e4:
6d:6e:9c:20:7b:99:34:65:0e:4e:30:26:40:07:71:bf:50:39:
16:4a:c0:7c:f3:7b:fa:90:c5:63:b8:d5:d0:a8:4a:6a:a4:8a:
b5:1f:1b:1a:2b:10:e5:1e:d8:d9:4f:f5:41:9b:06:53:37:5b:
f3:7f:ac:ad:cc:8c:b2:38:c2:f1:3f:66:f9:7d:c2:89:ca:3f:
ce:f9:13:15:ae:d6:fa:ee:cd:76:f3:aa:e4:c6:b5:5e:5d:fc:
88:78:13:8b:9e:c1:f2:f3:3a:f7:e3:ab:2e:29:a8:c0:75:32:
c9:ae:37:27:f8:75:fb:6f:4a:78:27:fc:5d:d4:27:1a:0f:25:
f6:a7:8c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:27 2024 by rpki-client on console-ams.rpki-client.org