Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/YagKarVcnVEirax7K3GvQ6VsMyg.roa
File: YagKarVcnVEirax7K3GvQ6VsMyg.roa (raw, json)
Hash identifier: kSQsevrGbcopyUIQfcBtvnyll0rRwNQrPLZSw/8yemQ=
Subject key identifier: 61:A8:0A:6A:B5:5C:9D:51:22:AD:AC:7B:2B:71:AF:43:A5:6C:33:28
Certificate issuer: /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial: 01886BD29CCFE94B6B81BD57C182CF1DAE12
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/YagKarVcnVEirax7K3GvQ6VsMyg.roa
Signing time: Tue 30 May 2023 08:42:24 +0000
ROA not before: Tue 30 May 2023 08:42:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213027
IP address blocks: 91.203.106.0/24 maxlen: 24
2001:678:f70::/48 maxlen: 48
2001:678:f74::/48 maxlen: 48
2a11:a00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:d2:9c:cf:e9:4b:6b:81:bd:57:c1:82:cf:1d:ae:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Validity
Not Before: May 30 08:42:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61a80a6ab55c9d5122adac7b2b71af43a56c3328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:e2:c4:8b:bd:c6:45:e7:00:0d:3c:7a:ea:
b0:e6:2f:1f:d8:24:04:63:d2:02:05:03:bf:d4:2a:
63:20:95:09:13:90:69:ce:9d:3a:e7:60:00:18:31:
4b:ca:45:4f:6c:35:74:59:38:dc:32:ef:ad:7e:b2:
ef:b9:29:22:38:b5:5c:b4:bf:82:8d:15:49:70:e6:
56:fa:d6:07:66:3d:28:b8:0d:32:49:e8:8a:32:37:
e9:59:c5:ac:5d:e1:8f:ed:f0:e7:b2:44:fc:ee:66:
4f:9b:78:6d:be:39:f0:ee:97:49:6c:91:d0:fe:b1:
76:22:ee:b2:60:64:69:62:df:6a:ba:ca:ec:21:5f:
18:1a:f3:f4:69:20:6b:f7:07:1d:dd:4b:17:d0:84:
70:a4:4b:ab:cb:de:f2:10:d8:dc:b1:22:25:56:de:
f6:98:da:43:52:7a:c0:92:2c:a3:4a:eb:2c:04:05:
64:0c:54:2d:1a:74:89:65:cf:2a:b3:0a:79:7b:70:
21:a9:63:a1:12:1b:da:5f:14:08:bc:42:46:64:de:
f3:01:07:32:e5:b1:be:eb:e8:e1:a3:c9:39:96:be:
7a:52:18:2e:41:71:e7:db:0b:02:2c:fc:47:1f:2c:
cb:d3:05:54:a8:71:76:ca:61:d3:a4:a7:97:3f:f9:
d5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A8:0A:6A:B5:5C:9D:51:22:AD:AC:7B:2B:71:AF:43:A5:6C:33:28
X509v3 Authority Key Identifier:
keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/YagKarVcnVEirax7K3GvQ6VsMyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.106.0/24
IPv6:
2001:678:f70::/48
2001:678:f74::/48
2a11:a00::/29
Signature Algorithm: sha256WithRSAEncryption
8e:95:2a:4e:da:35:fb:ae:d7:4d:2f:31:f0:2f:c3:5a:97:a3:
96:a0:ee:ea:46:5d:30:2a:be:15:3d:a1:78:44:d4:34:6a:85:
d5:a6:e9:80:39:6f:6f:3b:8f:c7:2d:82:7f:d7:06:6b:e6:3d:
50:8b:bf:7b:7d:f6:fc:38:5e:76:c3:06:2c:bc:f7:f4:f5:e9:
cc:35:e1:03:74:b5:d3:c1:38:1e:5e:6a:fe:c1:82:aa:fc:3b:
6b:81:fd:37:d3:a8:cd:3c:fb:24:fe:ae:e0:4f:ea:8a:16:2d:
07:db:9d:ae:55:01:0b:6a:97:e5:79:b0:13:2c:4c:39:87:70:
d8:d1:ce:f4:25:54:3e:5d:11:e6:d4:4c:a9:c7:8d:f1:ba:6a:
a0:27:c0:cb:52:80:5a:ac:b4:5a:34:e0:a8:cb:a2:b9:ed:25:
96:a7:55:75:d2:94:68:ca:25:5f:47:fb:39:66:ca:24:46:55:
ae:fd:60:34:27:e2:81:07:24:08:c4:80:a8:a2:25:8d:39:47:
0d:30:07:9c:6a:28:e9:05:0e:b7:e4:96:fd:1f:cd:ba:9e:84:
9b:fd:6c:46:82:87:48:b1:0b:e6:7d:1b:74:21:b3:9a:b3:58:
fc:f3:7b:a9:99:3e:1d:d6:d7:79:3f:01:e8:b2:7f:3d:18:c8:
85:38:3f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:32 2024 by rpki-client on console-fra.rpki-client.org