Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RySap4bH3htDkVz1A-luwv2YUfI.roa
File: RySap4bH3htDkVz1A-luwv2YUfI.roa (raw, json)
Hash identifier: Jk9XMLgHuZbkMYGVqXFqSw4Z856Yz3uw2qFepJ+NcSk=
Subject key identifier: 47:24:9A:A7:86:C7:DE:1B:43:91:5C:F5:03:E9:6E:C2:FD:98:51:F2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E78D41AD53380BF23F7DB67DFEE3B9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RySap4bH3htDkVz1A-luwv2YUfI.roa
Signing time: Mon 02 Jan 2023 05:15:01 +0000
ROA not before: Mon 02 Jan 2023 05:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60802
IP address blocks: 193.58.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:8d:41:ad:53:38:0b:f2:3f:7d:b6:7d:fe:e3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47249aa786c7de1b43915cf503e96ec2fd9851f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:f2:85:ea:4c:cc:85:e6:1d:dc:9c:3a:68:
33:74:28:d7:85:03:9a:77:33:bb:d0:cf:c5:5b:a1:
96:f2:79:cc:95:0d:47:df:ec:66:56:9a:7c:c0:cb:
dc:0a:a7:d9:4d:84:d0:bf:22:eb:f2:d4:d4:8f:c5:
62:aa:ba:6c:ba:98:43:6f:11:bc:78:92:31:b8:c1:
53:25:63:ec:69:db:52:ef:e4:6e:3a:b9:66:6b:76:
56:da:ef:95:cd:eb:44:90:c7:77:b0:f0:0d:79:0b:
8c:63:b8:cc:eb:70:f8:10:1a:45:85:a2:3d:22:4e:
e6:52:e1:48:a3:a5:02:9b:d2:78:ae:29:65:2a:38:
1f:d2:3d:d4:7b:27:28:8f:23:9c:69:db:94:c7:b9:
a3:e3:df:74:fd:64:02:f5:d5:86:aa:7c:d3:6c:0e:
90:96:31:16:59:d5:7c:64:5d:76:1b:59:92:e8:a3:
f3:a4:c1:1e:8f:e5:bf:7c:c5:55:b0:ae:04:ae:d0:
e7:b9:35:68:55:49:06:37:cd:5f:02:2f:e6:dc:81:
53:2d:ef:c9:1e:ae:5c:2f:f9:38:c0:c7:fa:37:a8:
71:d9:ec:a7:33:af:20:e7:72:43:b5:bc:a1:59:0b:
a1:df:e6:69:80:5f:b7:26:8e:82:06:29:16:8d:96:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:24:9A:A7:86:C7:DE:1B:43:91:5C:F5:03:E9:6E:C2:FD:98:51:F2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RySap4bH3htDkVz1A-luwv2YUfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.239.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:e3:5b:60:8f:c9:46:af:1a:4b:17:a4:32:ac:ba:ec:10:70:
48:8b:5c:a0:6f:77:87:b0:c7:be:58:ab:fb:3d:a2:84:5b:fd:
84:00:81:ac:26:ae:f6:bb:b6:7c:6b:72:72:f2:a9:4c:f8:fd:
82:c1:be:b7:5c:4a:39:ca:e8:d0:dc:65:da:ad:8a:ea:fc:f9:
c1:f8:41:ee:e6:ce:c9:ba:5f:94:83:75:fb:c9:af:20:d5:8b:
bf:9b:61:0f:02:6e:6c:14:3d:97:17:ea:aa:9c:ee:cc:b7:28:
fd:c5:04:7b:e7:f3:fe:15:56:fb:42:43:64:2c:de:ac:d7:57:
8f:ac:24:b2:db:83:3a:70:96:d9:f4:ec:95:2c:d3:98:9b:85:
71:15:aa:e8:18:19:86:cd:2e:a2:d4:f3:2b:7a:03:a3:55:67:
4c:c8:c2:1c:16:4e:ec:05:c1:f2:2e:9b:9e:ef:4c:da:52:d8:
23:c5:40:f2:b9:02:95:1f:8f:d8:44:b9:3a:eb:8e:8e:03:05:
bb:c8:96:4b:e5:3e:26:9e:14:70:42:e5:db:f6:4d:1f:8b:bf:
4d:e1:c8:96:ef:d0:fa:72:28:a2:12:84:cb:d8:cb:42:a3:92:
7f:03:60:1e:35:46:b7:52:57:5c:55:72:6d:4e:cf:94:c5:57:
cb:ac:cf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:31 2024 by rpki-client on console-fra.rpki-client.org