Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/YjAUGgCrS2AOVqO6mYcOIzPCuGM.roa
File: YjAUGgCrS2AOVqO6mYcOIzPCuGM.roa (raw, json)
Hash identifier: E0UnFYDuL07XYens4yfsZk8qvhQV6XAwQuCD5F58ZvY=
Subject key identifier: 62:30:14:1A:00:AB:4B:60:0E:56:A3:BA:99:87:0E:23:33:C2:B8:63
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 018CC94BFFCAD51098760397D8B2E66EC65D
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/YjAUGgCrS2AOVqO6mYcOIzPCuGM.roa
Signing time: Tue 02 Jan 2024 08:30:50 +0000
ROA not before: Tue 02 Jan 2024 08:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24971
IP address blocks: 92.63.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:ff:ca:d5:10:98:76:03:97:d8:b2:e6:6e:c6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jan 2 08:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6230141a00ab4b600e56a3ba99870e2333c2b863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:c7:cd:ca:e5:59:f2:db:5d:54:f6:38:3c:
dd:ba:a5:7c:0d:53:2b:db:b8:7e:c2:98:78:53:89:
32:06:9e:ca:92:57:fd:5b:fa:a4:cf:01:5d:1f:9a:
95:7a:9e:0a:32:5a:82:6a:7c:0c:53:e6:02:13:29:
52:cd:47:93:fb:fb:fa:d0:fd:10:49:b3:db:72:5c:
7a:40:be:39:1a:c8:33:cb:dd:23:62:d5:0b:11:1c:
17:06:27:0f:05:65:9e:b3:7b:9e:16:92:0c:96:9e:
10:6a:a3:9c:53:0d:c0:95:58:e1:d1:7d:a8:9a:b5:
a6:d2:3a:67:7d:f2:17:f2:7b:24:a5:d2:f4:7d:c0:
18:43:19:fc:63:86:c9:eb:68:80:d2:c1:c1:5c:e1:
cd:0e:c4:78:be:b7:93:e8:29:60:8c:39:93:b5:f7:
81:37:db:8a:80:ec:5c:f5:e7:91:7f:03:c2:58:5f:
6c:47:d5:7c:32:23:be:24:5d:0e:fb:3a:80:d6:60:
fb:12:a3:b2:8b:53:f7:66:de:36:fe:91:1a:8e:8d:
71:38:97:0f:f6:0c:23:04:3b:c0:9c:ec:48:c9:67:
9e:cd:ed:f8:50:41:30:5d:f8:c3:c4:c0:ee:50:bd:
c8:4b:25:c8:8f:b1:a8:75:29:1c:d3:44:52:35:36:
c6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:30:14:1A:00:AB:4B:60:0E:56:A3:BA:99:87:0E:23:33:C2:B8:63
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/YjAUGgCrS2AOVqO6mYcOIzPCuGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.56.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:31:37:8e:67:27:5a:18:68:8e:f4:08:60:79:35:10:3e:e8:
94:c7:90:ae:75:d6:42:57:c8:97:ba:8c:25:13:0c:85:cb:8a:
33:ae:d9:0e:92:db:3c:0c:05:fa:ff:93:5b:ee:f5:60:bf:18:
bf:f6:34:86:23:f6:1a:88:0f:34:a1:e4:e8:11:64:4e:9b:7e:
7f:01:61:4b:c8:70:8d:4e:7d:98:1f:97:05:c2:40:b0:2c:7a:
82:1a:68:35:d4:ba:da:af:26:fb:b0:a9:1f:ef:94:a1:97:7e:
a6:eb:ee:69:99:85:16:04:0d:51:ca:02:a1:7f:31:df:ae:5d:
98:74:63:38:70:59:7b:54:1e:f0:f0:f4:9a:99:7e:1a:60:14:
b0:cb:95:1a:ed:e1:60:d9:a0:cb:c7:1a:0d:ea:8f:a8:fc:d6:
3a:87:b5:83:a4:95:46:ac:3e:44:69:eb:3e:fe:19:3b:d9:27:
5f:6a:d4:31:ee:7e:8c:9d:eb:e0:8e:27:53:8e:5a:c0:3e:04:
bd:82:e6:9a:dd:75:d6:87:79:36:8a:37:22:62:15:83:39:c5:
56:16:44:af:7c:e9:f8:5f:21:e9:53:a8:c5:31:bb:d8:df:b2:
4a:dc:0d:92:b5:dc:8f:b8:ed:e9:9f:d4:f8:2f:bb:5d:d0:97:
29:8a:20:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:16:18 2025 by rpki-client