Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/y-s7DeksIFlWH0I1VRBj3eZ7H6Q.roa
File: y-s7DeksIFlWH0I1VRBj3eZ7H6Q.roa (raw, json)
Hash identifier: sHM5Q2b5aN3QS53np/V0vl6qs3EgY/FbnRnVnDPpXG8=
Subject key identifier: CB:EB:3B:0D:E9:2C:20:59:56:1F:42:35:55:10:63:DD:E6:7B:1F:A4
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 01886CE8EE4450A904257FF99AD0EC429DD4
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/y-s7DeksIFlWH0I1VRBj3eZ7H6Q.roa
Signing time: Tue 30 May 2023 13:46:24 +0000
ROA not before: Tue 30 May 2023 13:46:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 91.199.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:e8:ee:44:50:a9:04:25:7f:f9:9a:d0:ec:42:9d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: May 30 13:46:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbeb3b0de92c2059561f4235551063dde67b1fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:ad:49:53:98:fb:70:0c:2b:00:70:e2:e6:
06:d2:4b:f3:d8:fe:1d:50:7c:de:0d:9b:74:ba:9e:
af:d9:21:bc:19:09:78:9d:d0:d4:af:19:3c:35:31:
c6:65:82:06:61:75:79:9c:e7:d2:b6:19:53:a7:04:
78:58:5a:94:15:ac:7c:75:1e:be:b9:5e:26:8e:d6:
73:6a:b1:20:f6:7e:7a:99:61:ac:d7:8c:47:d9:61:
2d:5a:29:13:cb:82:97:e1:11:a6:88:a8:95:9b:ae:
02:2f:d3:fa:b8:97:e9:ac:5f:0b:37:70:10:ec:26:
0a:39:20:39:47:ce:d4:81:b2:85:e3:00:bf:54:9c:
d3:91:c2:d0:93:c4:c9:98:f8:bf:96:31:50:c1:b4:
ff:4b:89:fb:09:64:fe:99:ae:b0:5e:5c:f2:a7:1c:
b3:b3:5a:91:43:ad:0d:f3:62:e2:d8:88:0a:f5:92:
d7:d8:19:17:3a:ab:ca:35:63:f2:fc:fd:e0:4b:2d:
45:ec:06:24:63:df:ab:93:76:6e:7b:b9:24:1e:a2:
2d:fb:44:04:86:4e:59:58:f2:6f:dd:57:67:e5:2c:
b7:ee:b6:5c:51:4d:01:09:e7:ca:23:87:0b:6f:9f:
4c:4a:ca:a1:f2:a3:77:4e:fd:ad:7d:17:e8:d7:60:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EB:3B:0D:E9:2C:20:59:56:1F:42:35:55:10:63:DD:E6:7B:1F:A4
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/y-s7DeksIFlWH0I1VRBj3eZ7H6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.173.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:de:73:84:9d:47:ad:ef:f8:56:5d:5f:3d:fa:a5:ae:3b:d1:
eb:d8:2e:20:b0:3a:68:3a:ac:e0:10:5c:59:a0:1c:d6:bb:9d:
35:2e:4e:1c:ac:b4:54:33:47:75:a5:d7:65:c4:16:4e:bd:98:
e5:74:f7:3d:d0:2c:c6:03:f9:5f:93:fd:42:6a:1c:ec:ae:c8:
b0:ec:88:c5:45:d1:b8:e7:2a:fd:8c:36:70:55:1b:de:9d:07:
0e:d6:42:db:f9:f3:0a:2c:fe:33:d2:93:ed:23:dd:7b:6e:b7:
80:4f:9b:aa:e2:8e:cf:bd:c8:ac:0a:b1:de:ca:ed:f4:33:1f:
11:72:3b:4b:f9:16:12:a0:90:91:41:ac:a6:8f:98:c5:b7:c9:
4d:e9:53:fb:e8:5e:98:40:c6:04:34:d0:1c:c9:0a:3a:22:e8:
68:6f:ae:e0:b7:3a:e2:12:0d:ce:9c:64:bd:34:3d:5a:0a:a0:
f6:19:78:d6:51:e2:6b:84:9b:a4:f0:9c:8c:c4:38:a7:d3:43:
e5:eb:78:dd:f2:31:af:a9:2a:9e:8f:f8:8d:68:6b:04:4c:16:
58:26:43:bd:6b:3b:eb:27:a7:89:e3:2d:89:f0:c7:9e:26:b4:
6e:46:a9:c8:f8:86:96:80:2b:af:cf:08:d0:87:b8:14:6c:e0:
0a:06:de:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:13 2024 by rpki-client on console-ams.rpki-client.org