Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/Yd1vP_FZJWOTX22PYCQOk7zfWjA.roa
File: Yd1vP_FZJWOTX22PYCQOk7zfWjA.roa (raw, json)
Hash identifier: MFLDavGSspSH//9Np26x+rl/rCBA0M5+sqiQpdptzPg=
Subject key identifier: 61:DD:6F:3F:F1:59:25:63:93:5F:6D:8F:60:24:0E:93:BC:DF:5A:30
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 018A0096E9823DD49CE5EF15C188F265C707
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/Yd1vP_FZJWOTX22PYCQOk7zfWjA.roa
Signing time: Wed 16 Aug 2023 23:03:24 +0000
ROA not before: Wed 16 Aug 2023 23:03:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34360
IP address blocks: 93.157.96.0/21 maxlen: 24
213.108.56.0/21 maxlen: 24
2a01:4660::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:00:96:e9:82:3d:d4:9c:e5:ef:15:c1:88:f2:65:c7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Aug 16 23:03:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61dd6f3ff1592563935f6d8f60240e93bcdf5a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:04:f7:c8:0c:79:bc:17:9f:9f:d8:9a:55:
fa:61:b0:99:f7:5a:d8:bc:5c:d2:4e:cf:50:80:9a:
4d:1a:99:5b:aa:fb:b9:c3:81:80:04:17:aa:14:21:
4e:5d:c1:50:a3:0d:32:9e:48:3e:dc:b1:a1:d4:e6:
82:8a:8f:1a:67:dc:6a:69:0b:e6:85:8d:c8:c3:97:
e6:7c:03:df:7e:d5:dd:55:cc:3a:80:17:72:5e:b3:
04:f0:dd:a0:20:87:a3:7c:31:f6:6b:79:1a:71:2a:
2c:74:53:59:a9:31:09:cc:17:06:48:77:dd:fb:fe:
78:e9:ae:3c:38:03:30:d7:ca:25:3e:04:09:47:7d:
02:72:50:7a:f9:aa:74:fc:f5:61:96:b0:82:60:0a:
71:39:52:6e:3e:b4:f6:59:49:24:0c:33:57:cd:b1:
1a:c1:0b:48:b8:09:14:67:2f:17:75:15:fa:71:41:
9e:78:b7:ca:36:de:71:9a:f1:2c:a7:2c:7b:a9:13:
4b:66:bf:ea:23:c3:a7:23:12:50:2b:65:e3:23:c2:
18:47:1f:3a:35:ac:87:cf:27:18:4c:05:70:41:a0:
20:ac:34:4c:95:32:e8:cb:9f:90:58:12:b8:b2:df:
d5:9c:c1:76:db:a2:99:64:cf:f8:2b:7b:a4:18:d0:
47:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DD:6F:3F:F1:59:25:63:93:5F:6D:8F:60:24:0E:93:BC:DF:5A:30
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/Yd1vP_FZJWOTX22PYCQOk7zfWjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.96.0/21
213.108.56.0/21
IPv6:
2a01:4660::/32
Signature Algorithm: sha256WithRSAEncryption
c0:5d:f0:46:9b:36:0a:d5:b9:94:ce:6e:54:93:96:7d:17:a1:
76:84:ea:50:25:5a:e1:de:a3:4b:48:33:e0:06:13:28:1f:a4:
3c:b0:c5:16:a0:8d:c9:45:fa:bc:6e:9f:ad:1c:d3:0f:76:93:
53:47:51:10:2f:b0:c3:07:f6:7f:2b:3a:a6:fa:43:7c:ea:32:
41:98:51:d9:f6:3f:2e:90:90:da:fa:72:45:7f:05:db:e3:79:
ef:78:1a:b7:ee:77:26:3c:3f:99:7c:b7:1f:77:2d:4e:2f:c5:
be:3a:38:e4:53:09:7c:76:67:8f:a4:0c:6e:b3:9d:bb:71:f3:
e0:6a:60:51:32:40:04:f1:e2:c0:87:ad:3e:e0:70:ea:f9:10:
c4:3f:4e:5a:7e:11:b8:ef:1b:f9:a6:45:95:ad:3c:d1:cc:33:
2e:e3:49:29:35:63:d3:e4:48:9c:51:8e:41:c4:cd:da:43:02:
b3:90:bc:7e:93:ff:bd:b4:54:d3:11:b4:c6:7f:a8:85:0e:d9:
bd:85:3b:46:b3:7e:73:7c:af:ca:b5:03:b3:3e:6c:74:7c:67:
2d:23:d9:13:bb:7d:73:8c:42:de:fa:9d:e0:26:ac:8c:e6:e6:
68:2b:f9:57:d0:a6:f2:81:8c:67:6c:48:22:64:46:a3:d3:48:
08:0d:0b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:47 2024 by rpki-client on console-ams.rpki-client.org