Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/YlaM3PZTEdaidVZkbxGh_rh_XwA.roa
File: YlaM3PZTEdaidVZkbxGh_rh_XwA.roa (raw, json)
Hash identifier: t3Sgo9rEzzVkisPO/tOAMeHm6PycFu24penqeo7SdOQ=
Subject key identifier: 62:56:8C:DC:F6:53:11:D6:A2:75:56:64:6F:11:A1:FE:B8:7F:5F:00
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018572BA6FF236E6DE7E35A7E5F12BE22E4C
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/YlaM3PZTEdaidVZkbxGh_rh_XwA.roa
Signing time: Mon 02 Jan 2023 13:44:59 +0000
ROA not before: Mon 02 Jan 2023 13:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50364
IP address blocks: 217.113.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:6f:f2:36:e6:de:7e:35:a7:e5:f1:2b:e2:2e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 13:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62568cdcf65311d6a27556646f11a1feb87f5f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:b9:f4:39:b0:68:b9:ce:a7:72:05:ef:d7:
c8:13:79:b9:dd:e4:14:0b:87:ef:97:19:6e:91:c1:
0f:0e:50:6a:49:60:7f:54:ee:97:ca:b5:15:03:07:
4a:24:04:13:e5:54:31:a8:d8:a1:40:5f:d6:2e:9b:
2a:c8:d8:69:15:8b:48:32:bf:49:3d:79:62:00:8e:
c4:de:00:a8:ff:6c:06:57:00:eb:de:d9:0b:cf:97:
a1:95:6e:77:5c:5a:61:84:df:37:5c:ff:ca:c8:fe:
e1:f2:14:03:55:38:e0:9c:fa:21:cd:a8:0b:48:b8:
08:fc:de:f4:35:a4:30:95:37:68:ee:ff:93:c2:7e:
e5:c1:16:a5:a4:4b:eb:cb:75:e2:9d:dc:6f:56:ec:
d3:31:ac:4f:61:ac:55:8a:0f:3d:39:cd:5a:86:58:
e5:9f:52:f2:0e:c2:29:a3:53:df:4b:d4:eb:af:8e:
9b:7c:73:aa:9d:c2:e0:fb:f4:42:6d:7e:78:1d:88:
d1:08:9b:e9:2a:b6:5b:b9:1f:25:18:1a:55:cc:e5:
f7:7b:5b:0b:99:d1:94:79:d4:b7:02:5e:34:02:d7:
12:a1:e7:a5:50:36:97:50:a9:59:27:5a:2a:58:05:
19:c9:0b:1d:55:bf:3a:83:6f:62:23:39:28:ee:51:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:56:8C:DC:F6:53:11:D6:A2:75:56:64:6F:11:A1:FE:B8:7F:5F:00
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/YlaM3PZTEdaidVZkbxGh_rh_XwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.9.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ca:3c:03:cc:8f:64:bc:f6:c6:7b:32:4a:0e:bf:62:df:f6:
dc:07:99:26:52:51:99:30:c0:79:62:29:ae:c6:fd:bc:23:04:
e0:13:c3:19:e8:5e:ca:48:7e:4e:32:28:8e:b4:2c:90:ad:d8:
a9:86:e5:c0:11:50:d8:a7:0e:6d:cb:03:c4:74:d1:5d:90:7d:
21:49:b1:0d:63:d1:6a:18:01:f6:a7:86:8f:cb:db:96:54:6b:
82:28:6c:ef:66:d1:85:74:6e:32:0f:de:55:52:51:b3:5f:4e:
a4:7b:59:10:b0:16:19:02:d4:e7:b9:ab:d7:c5:1b:40:13:6c:
ec:18:5f:5f:fd:73:25:99:83:cc:d7:bd:2f:90:f9:2d:d8:95:
04:f4:17:0e:d1:05:0d:23:bc:fb:ed:f9:47:c0:27:89:dd:f7:
ad:66:ce:3e:ad:25:3f:2c:57:39:f3:df:b0:2a:6d:ea:0b:c1:
8b:ce:41:6d:62:4e:85:e7:5b:13:26:ac:1b:5a:db:ef:2f:c0:
74:d5:6f:4c:4d:1c:67:c3:8b:20:41:dd:69:86:f2:2e:ac:e9:
05:86:61:79:6e:91:45:04:56:31:a8:a3:79:6b:3d:15:bb:86:
0e:92:c4:d0:a8:e5:d5:28:94:29:49:74:2a:4f:e0:0b:41:e0:
54:cb:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:40 2024 by rpki-client on console-ams.rpki-client.org