Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/YDytAgCkmMUr1smwE_kSo_hV2Ic.roa
File: YDytAgCkmMUr1smwE_kSo_hV2Ic.roa (raw, json)
Hash identifier: raPp5AvEqBl2LdYPrvv3cVFnqGEGqS5okfJoP+Q+Gsk=
Subject key identifier: 60:3C:AD:02:00:A4:98:C5:2B:D6:C9:B0:13:F9:12:A3:F8:55:D8:87
Certificate issuer: /CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
Certificate serial: 0188BB5534505833133295F286B39D5BC69F
Authority key identifier: C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/YDytAgCkmMUr1smwE_kSo_hV2Ic.roa
Signing time: Wed 14 Jun 2023 19:15:03 +0000
ROA not before: Wed 14 Jun 2023 19:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47788
IP address blocks: 91.208.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bb:55:34:50:58:33:13:32:95:f2:86:b3:9d:5b:c6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
Validity
Not Before: Jun 14 19:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=603cad0200a498c52bd6c9b013f912a3f855d887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:93:0c:74:65:02:56:f0:67:66:ec:b1:a3:
07:52:f9:ed:5f:ff:77:53:29:47:2a:d9:4a:2d:75:
a5:fb:8d:7a:b6:5c:f2:ee:7c:75:8e:b5:02:21:c1:
2c:e5:c0:c5:1d:89:f2:a6:46:b2:6b:b6:b0:6f:cf:
23:db:a4:bc:79:d4:7f:9e:3d:71:45:3d:9a:c2:18:
ab:48:d0:57:69:08:ad:fa:45:94:e6:16:c9:7b:2b:
5c:66:89:20:9a:ac:d0:4d:4c:67:91:af:50:94:9e:
37:d0:02:e4:39:46:bb:02:54:47:fb:a2:fc:32:65:
0f:ec:ff:c0:eb:a3:77:b7:1c:42:f5:27:6c:7e:a3:
56:ed:70:0e:58:a5:73:07:b2:77:c2:f1:9a:44:8e:
f6:ec:0f:85:dd:cd:f7:74:a7:a2:0e:42:25:bd:df:
6b:f1:14:58:d5:7b:0f:c2:2d:6c:07:9e:d6:da:d8:
03:39:a2:46:93:ae:5a:40:22:1a:06:86:09:c7:1a:
20:dc:bc:ed:8f:33:20:a1:43:f7:dd:8d:68:f4:ee:
b5:c7:1e:38:b2:f7:f9:04:11:de:66:a7:fa:a9:26:
8b:91:33:82:1a:3a:2d:5c:75:1c:bb:c5:cd:38:9e:
71:fd:ad:cd:d0:54:17:fe:29:f7:0d:38:d5:75:5f:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3C:AD:02:00:A4:98:C5:2B:D6:C9:B0:13:F9:12:A3:F8:55:D8:87
X509v3 Authority Key Identifier:
keyid:C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/YDytAgCkmMUr1smwE_kSo_hV2Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.153.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:dd:97:39:49:8e:4d:66:32:df:2a:41:ef:6c:04:d3:4f:e0:
8c:e1:00:d1:d2:d2:3e:d3:2d:90:d3:58:5f:19:cc:70:d0:88:
55:7c:7d:f3:f8:b1:cc:44:bd:0d:9b:c8:d6:e0:8a:8f:7e:f1:
31:6b:a4:53:d1:f0:50:6d:ba:a9:63:8c:a6:30:31:c6:55:2d:
9f:ce:45:01:0f:aa:7b:16:65:3e:71:b6:f3:09:f0:f6:89:35:
21:6f:7e:49:ff:11:7c:6a:20:4f:cd:a7:85:bc:7c:4f:36:47:
b0:3f:ac:65:18:2c:15:6a:3b:78:a6:a3:58:d3:b6:31:7a:46:
7f:b6:90:94:c2:ea:be:ef:6f:65:21:b9:37:e1:6d:7e:9f:cf:
57:a1:eb:f7:ea:3f:e0:57:8e:85:4a:37:fd:a1:8e:71:65:7d:
59:7f:4e:37:44:8d:7b:7b:e3:92:e5:ee:19:d6:1d:c0:42:e5:
65:68:07:6f:aa:04:c7:cb:da:64:a4:b2:87:8b:cc:8e:f7:ea:
fc:4d:63:ab:78:85:a9:b4:d5:7b:bb:78:98:5a:f0:be:8d:99:
b0:0b:97:c4:f8:02:74:81:f9:f3:14:1f:21:8e:2e:12:68:23:
ca:99:9e:22:0e:a9:f8:6e:39:4d:98:d6:da:da:c2:c6:f4:24:
09:07:34:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:49 2024 by rpki-client on console-fra.rpki-client.org