Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/07YQY28aTy6IkVBIOLoiX8xcpCQ.roa
File: 07YQY28aTy6IkVBIOLoiX8xcpCQ.roa (raw, json)
Hash identifier: oFYjxBEsSfiqbqqFeTD1kGtG+Kstbz9JC31nlyXzK4E=
Subject key identifier: D3:B6:10:63:6F:1A:4F:2E:88:91:50:48:38:BA:22:5F:CC:5C:A4:24
Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial: 01856D13DCCF8583A98FC1D79E6452A811A5
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/07YQY28aTy6IkVBIOLoiX8xcpCQ.roa
Signing time: Sun 01 Jan 2023 11:24:56 +0000
ROA not before: Sun 01 Jan 2023 11:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59836
IP address blocks: 194.35.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Sep 2023 15:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:dc:cf:85:83:a9:8f:c1:d7:9e:64:52:a8:11:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Validity
Not Before: Jan 1 11:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3b610636f1a4f2e8891504838ba225fcc5ca424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:9d:cd:cc:ac:d4:0a:18:34:f2:01:d0:57:
04:36:33:b0:ac:2d:fc:d1:c2:64:2b:f6:ed:d0:40:
3d:be:dc:34:93:c8:8e:c1:64:9a:52:fa:24:47:85:
94:55:64:34:6d:d7:7f:94:11:de:d0:83:66:2d:d8:
66:48:c0:06:3c:fb:a1:1d:e0:e3:4c:43:f8:45:12:
89:67:10:af:bf:72:a0:f1:e5:89:f2:88:99:e7:ca:
d7:ec:bf:c8:d9:f8:12:0c:fb:d1:9e:3c:a9:0d:17:
3a:cb:b7:32:80:ab:2e:ed:1b:b5:03:32:c0:1b:6e:
9d:5e:3a:93:79:b5:2c:41:16:97:2b:bf:96:9e:50:
5e:80:0e:61:66:17:fe:87:ab:19:92:97:1f:54:11:
9d:d1:98:48:4e:35:95:f9:8f:04:af:ab:e0:76:9c:
14:e2:c4:54:d5:34:a7:94:7d:aa:48:0f:e5:60:6b:
72:cd:69:15:3c:9b:e7:54:da:84:b2:71:02:69:7a:
0b:14:6a:a2:71:f9:af:f3:e6:a1:cd:16:a5:5f:34:
ce:f0:83:d3:e2:e8:e8:54:5d:d2:16:79:81:f8:5e:
07:ff:ef:c7:e9:90:d8:4a:0a:8c:5c:d0:bb:41:c7:
b1:e3:0d:ea:5d:5e:88:2f:8e:48:c8:7b:01:89:fb:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B6:10:63:6F:1A:4F:2E:88:91:50:48:38:BA:22:5F:CC:5C:A4:24
X509v3 Authority Key Identifier:
keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/07YQY28aTy6IkVBIOLoiX8xcpCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.1.0/24
Signature Algorithm: sha256WithRSAEncryption
70:2a:09:b3:25:de:df:91:3d:98:19:cc:8c:b8:22:41:ac:cf:
b5:b8:e6:d1:c8:c1:38:d3:c1:cc:5d:40:dc:33:34:b6:3f:4e:
38:23:d9:00:56:fe:06:6a:80:eb:e1:1f:77:67:31:0f:ef:ec:
cf:3a:09:82:b0:d4:95:47:80:17:ea:1c:30:c1:5b:0f:ef:ab:
ee:3f:c3:22:9b:b5:55:8f:49:b1:dd:1e:89:28:83:9b:5c:9c:
c8:dc:4a:c9:b4:ac:7a:a1:32:ec:70:c9:f4:e7:76:1c:97:ef:
8f:75:3d:26:6a:04:d7:be:9d:11:2d:95:77:15:fb:d3:63:57:
69:ca:a6:77:ad:c0:b2:a2:86:a6:56:ca:e2:8b:5e:fb:8b:3a:
46:8a:63:81:40:7b:6a:5f:13:fb:7d:48:3d:af:87:e1:c1:22:
28:71:e1:e4:7d:05:0f:37:16:77:25:79:83:3d:2d:56:ec:75:
a6:3e:d9:20:23:e3:0b:03:ce:8b:a9:6e:40:5a:3d:0f:20:23:
b5:97:23:dc:1b:dc:c5:8a:09:b7:2b:c4:f2:6f:6e:83:9d:88:
35:f7:82:93:94:e7:70:3a:ce:2d:12:07:cb:68:4a:60:61:7d:
8f:a8:de:73:0f:c7:66:1d:ce:4f:9a:61:ad:7e:fc:3a:a8:0a:
99:91:18:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:28 2024 by rpki-client on console-fra.rpki-client.org