Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/yBLJvso2PhBPCB9JbXytAWuFlk0.roa
File: yBLJvso2PhBPCB9JbXytAWuFlk0.roa (raw, json)
Hash identifier: lXKlMUzZTmQ0dJGlf9Xp3ycS9iftYWv/8ePtlOyLMVQ=
Subject key identifier: C8:12:C9:BE:CA:36:3E:10:4F:08:1F:49:6D:7C:AD:01:6B:85:96:4D
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01856C5CA2868AB2C33C8E8B4EF51F832669
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/yBLJvso2PhBPCB9JbXytAWuFlk0.roa
Signing time: Sun 01 Jan 2023 08:04:48 +0000
ROA not before: Sun 01 Jan 2023 08:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 86.62.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Apr 2023 14:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:a2:86:8a:b2:c3:3c:8e:8b:4e:f5:1f:83:26:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jan 1 08:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c812c9beca363e104f081f496d7cad016b85964d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:2d:28:4c:4d:0e:7d:76:37:28:e3:eb:d7:
f7:e1:77:b4:1b:90:c7:36:7f:c3:36:ec:d4:3d:3c:
70:eb:66:e1:25:77:7a:19:c1:32:29:74:c1:77:6b:
da:ce:da:ea:f5:98:37:c2:78:aa:d4:61:ce:ed:4e:
37:6b:6a:6e:e6:b8:e5:9e:5c:89:73:30:05:2a:8d:
9e:6e:8d:ba:f3:aa:62:ac:48:ff:29:82:90:28:33:
c2:c8:5e:b9:3d:26:7f:18:aa:19:3a:13:c5:6b:80:
5a:8b:17:d7:07:4c:dc:37:31:6e:d1:ed:47:8e:1c:
6f:a8:17:19:b9:76:7b:d3:b9:31:7d:fb:c6:f5:32:
a2:8a:90:ef:9d:35:ce:59:ae:13:f7:46:69:8f:24:
7b:b9:30:da:0f:23:50:5a:01:2d:00:8c:91:1c:94:
1c:73:76:5d:86:18:b3:e0:ea:2d:93:b1:fe:d6:4d:
72:88:79:c5:50:2d:e9:56:71:91:82:9d:a4:be:e1:
9f:86:fc:cc:29:4a:ee:41:f1:9b:e0:18:87:e4:f5:
6d:1c:2b:f5:46:d3:ca:4e:3b:cc:5d:a0:9e:41:3d:
c5:d5:d9:97:ee:ba:38:f6:8a:56:cc:20:29:f5:e6:
53:67:9d:d3:2f:ca:60:4a:ec:4a:cb:29:af:e7:7c:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:12:C9:BE:CA:36:3E:10:4F:08:1F:49:6D:7C:AD:01:6B:85:96:4D
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/yBLJvso2PhBPCB9JbXytAWuFlk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.28.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:2a:ad:de:35:87:13:7e:0d:91:bd:70:a9:e4:5d:b3:1f:fe:
34:d3:bc:6f:bc:f1:5c:5d:2e:ea:c4:32:c7:ec:82:00:14:af:
2a:b0:b2:f7:78:9e:12:ad:23:df:ff:98:70:3f:96:f6:4e:22:
b2:61:13:ea:63:9e:2f:30:d1:37:e3:8e:7f:a0:3d:9c:c7:b8:
eb:cd:f2:7a:13:5d:26:71:37:0c:9c:d5:f3:09:3e:7f:57:8f:
28:a4:40:15:11:51:e4:f1:46:33:65:96:f6:bb:b6:a7:4d:81:
85:3c:a8:45:c2:5a:e0:13:cc:77:f0:f3:4f:4a:72:e6:02:96:
1c:6b:4e:af:a3:cb:cb:23:79:b5:e3:bc:a0:44:9b:94:75:77:
77:1f:1b:42:07:a2:77:6d:96:31:5b:85:08:d7:d0:5b:e5:2e:
68:7a:5b:4c:0a:47:52:d9:e0:24:b3:7b:36:29:5b:57:2f:83:
9c:04:ba:f9:11:33:e9:6a:df:eb:40:e6:5c:05:ff:59:77:41:
c8:20:96:68:ab:c6:d4:ac:99:a5:a3:c5:d4:ca:c6:7c:a7:31:
7e:8d:da:32:94:19:d7:e3:83:0e:fa:ae:1e:df:3b:23:70:0d:
ac:18:a3:e9:b6:3c:63:48:27:96:ac:70:0c:1f:2d:c2:e1:67:
88:6c:0f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org