Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/lY1IZn1qtAkj81oaYi7f2vOHpAc.roa
File: lY1IZn1qtAkj81oaYi7f2vOHpAc.roa (raw, json)
Hash identifier: LBnr6yD4S5ABnRUIKSSCThioBzmiu3mueW/rjo/bkvE=
Subject key identifier: 95:8D:48:66:7D:6A:B4:09:23:F3:5A:1A:62:2E:DF:DA:F3:87:A4:07
Certificate issuer: /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial: 01856CCAD906077CEE8646E3FE7FB07F13DA
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/lY1IZn1qtAkj81oaYi7f2vOHpAc.roa
Signing time: Sun 01 Jan 2023 10:05:11 +0000
ROA not before: Sun 01 Jan 2023 10:05:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49646
IP address blocks: 193.169.156.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d9:06:07:7c:ee:86:46:e3:fe:7f:b0:7f:13:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Validity
Not Before: Jan 1 10:05:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=958d48667d6ab40923f35a1a622edfdaf387a407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:5f:2f:17:2b:f7:95:14:00:99:a6:28:7f:
08:7a:ca:3a:76:2d:f6:be:21:92:48:e1:51:31:7a:
ce:e1:ea:a6:45:26:2d:e4:97:a7:06:2d:22:26:53:
5d:28:29:a8:72:d4:80:74:83:eb:5b:5a:13:64:50:
76:d7:1d:97:12:8a:11:76:40:b0:97:67:aa:85:f3:
73:61:f1:90:1e:d0:8f:77:15:52:71:d9:1f:01:82:
4b:08:3b:63:a9:5b:17:04:9a:29:a1:5d:fa:34:45:
73:ab:a0:f7:1c:0c:92:f5:ad:21:c7:b8:d3:55:7d:
d2:71:49:af:d6:3b:4a:cf:b6:f8:7b:87:81:2d:bd:
e3:c5:7c:d5:d2:d5:5d:3c:28:9f:43:b4:5f:b4:e8:
52:a7:0c:6a:e2:07:7e:6f:f9:23:82:29:48:77:f2:
1a:51:6d:59:c6:5a:a2:74:4f:f6:1b:ae:30:dd:fe:
b6:45:65:bf:d1:09:56:fa:4b:58:6c:14:be:51:a4:
9c:a1:5d:5c:b9:9b:e8:2f:ff:ea:1f:10:06:3c:fd:
51:c5:b4:d9:8d:0e:b0:dd:67:24:3b:2d:f4:86:b5:
7b:c9:4e:59:72:c7:42:e0:09:8e:5e:de:57:c9:63:
d9:8a:8f:54:e9:a9:f5:81:41:24:1e:3b:8c:f3:05:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8D:48:66:7D:6A:B4:09:23:F3:5A:1A:62:2E:DF:DA:F3:87:A4:07
X509v3 Authority Key Identifier:
keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/lY1IZn1qtAkj81oaYi7f2vOHpAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.156.0/23
Signature Algorithm: sha256WithRSAEncryption
55:a6:02:96:a0:76:f9:ea:20:ea:4c:fc:f7:a1:80:1c:6f:53:
20:92:6d:d9:61:c0:23:73:dc:fe:f9:c2:96:d7:a4:a2:9d:a9:
f8:2a:db:18:65:31:b7:9d:5e:45:db:45:52:bc:e1:38:6f:86:
be:bc:88:0e:aa:ef:37:cc:af:03:fb:d7:d5:54:65:38:8b:5d:
0a:90:36:eb:21:0f:d5:df:55:05:c6:a2:56:99:9c:24:02:ae:
72:ba:87:2f:10:a7:5a:92:7b:0e:ca:1c:45:09:7f:6b:bd:b2:
7b:98:d9:3c:95:46:d6:13:5f:b7:17:2e:2f:49:32:33:bd:93:
1e:6c:98:86:eb:38:61:ac:cd:50:38:86:3b:54:78:aa:67:76:
d4:3b:96:3b:f3:f9:55:61:b8:b6:db:ae:cb:a5:cf:3d:a4:a0:
1e:a8:bb:14:8e:3b:a5:d1:06:4a:c7:80:b8:4b:fd:91:a9:37:
f7:5b:a1:a5:02:4e:28:31:04:e6:b7:02:54:21:67:93:da:36:
55:da:ae:72:f6:18:15:7b:c3:20:d4:42:fe:c1:df:3f:66:2a:
49:0f:17:93:f4:a6:fa:25:64:ae:13:2b:a7:0f:5e:8f:60:e6:
70:aa:76:79:3b:bd:5f:04:4c:5a:94:27:12:92:64:ba:6a:4e:
be:61:e2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:45 2024 by rpki-client on console-ams.rpki-client.org