Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/yElpX51ot1DqJ1mM7SrqbupuR4Y.roa
File: yElpX51ot1DqJ1mM7SrqbupuR4Y.roa (raw, json)
Hash identifier: Y4xqE8Eny77SGO8lxbP8Qw/HGoP+koVRAJiHB4TSC8M=
Subject key identifier: C8:49:69:5F:9D:68:B7:50:EA:27:59:8C:ED:2A:EA:6E:EA:6E:47:86
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0185DE640E0B8F6AA80B36607D4AC33111B9
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/yElpX51ot1DqJ1mM7SrqbupuR4Y.roa
Signing time: Mon 23 Jan 2023 11:29:37 +0000
ROA not before: Mon 23 Jan 2023 11:29:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 194.107.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:64:0e:0b:8f:6a:a8:0b:36:60:7d:4a:c3:31:11:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jan 23 11:29:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c849695f9d68b750ea27598ced2aea6eea6e4786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:f4:c4:27:fa:91:b6:4b:23:44:c7:2d:44:
a3:91:4c:16:cc:b3:2d:29:7e:2a:7a:14:5d:45:40:
d1:75:1e:ad:67:03:f8:52:31:a3:37:f9:63:75:16:
fa:f5:17:80:27:4b:03:ab:08:e1:8d:9e:d0:5b:b5:
af:e0:09:71:f5:6b:49:41:f0:52:2d:f0:ea:9c:7e:
77:30:1a:92:0e:54:24:e5:41:a2:38:30:03:71:a0:
b7:45:b3:73:fb:1f:5d:af:dc:36:15:14:d0:df:25:
f3:11:7b:94:05:d4:e5:1d:36:25:77:51:48:0c:88:
75:fd:a1:91:2e:89:54:55:bc:7a:c4:28:6f:e1:b6:
0b:75:ad:f7:73:5f:1e:03:a8:e7:75:bb:b5:ce:bc:
a3:4f:68:7e:b3:b7:5f:b3:47:25:46:34:e3:1e:2d:
51:f1:43:72:d8:d0:d5:88:f8:d5:82:79:ef:b1:79:
05:aa:e9:8c:50:ba:c2:26:bb:84:1d:31:21:71:24:
ea:5d:c1:f8:35:6f:56:6e:ff:70:fd:17:c6:a6:51:
f1:c9:85:39:ec:c2:7e:28:a9:b3:20:7f:33:ff:a6:
04:2e:d2:27:be:0a:b5:28:0d:17:6e:21:65:59:01:
e4:ef:c0:fe:fa:7a:a7:e2:f4:9a:d3:a9:19:78:3d:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:49:69:5F:9D:68:B7:50:EA:27:59:8C:ED:2A:EA:6E:EA:6E:47:86
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/yElpX51ot1DqJ1mM7SrqbupuR4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.161.0/24
Signature Algorithm: sha256WithRSAEncryption
90:42:8d:23:8b:ad:30:b6:26:98:ec:d4:ff:fa:ea:90:b1:9e:
15:fa:40:0e:46:75:35:a7:10:41:4c:9f:91:79:1e:36:d1:9a:
65:7b:ec:40:46:92:ad:15:a2:64:3a:78:09:6b:0b:7f:5c:8f:
40:79:72:a2:6c:cf:c8:7b:42:63:1b:ef:97:96:1c:01:89:5d:
f2:83:b3:95:a5:84:fc:41:f0:73:5a:62:c3:3c:2f:dc:db:d1:
e2:9e:d8:34:48:47:d2:50:fa:24:30:0c:36:c6:29:be:c9:f8:
09:81:11:9f:35:c4:38:7b:b0:e0:8c:aa:c6:5f:d4:d9:6d:57:
31:18:b3:02:80:6c:a8:6e:db:cf:7c:b0:3f:c9:50:05:2d:14:
72:60:41:50:c1:9f:aa:80:f1:b5:13:4e:35:7d:a4:b4:06:9a:
66:03:af:a4:89:8d:85:a8:45:f6:cc:f5:7c:75:0e:fd:3e:8d:
68:4a:6c:00:ba:aa:48:e7:43:01:7a:87:70:77:54:b1:0f:8a:
58:f6:2c:bf:d8:99:84:75:a9:0c:d3:3c:52:80:48:30:3d:5f:
83:50:0d:2f:5a:a7:5a:a6:2d:71:dc:2c:96:76:9f:83:e1:84:
61:6e:4f:c1:f9:61:8b:97:02:9a:f3:70:2d:ea:47:7c:9f:94:
79:13:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:50 2023 by rpki-client on console-ams.rpki-client.org