Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/446106-f924-4e5c-989c-33dd1f2f71f1/1/0YhIanVp1nQwP8r0NB7XTyqR_xA.roa
File: 0YhIanVp1nQwP8r0NB7XTyqR_xA.roa (raw, json)
Hash identifier: 2un7/l+vXGJoZlSbplnzsZMIV10PacuCo00E6nwCSag=
Subject key identifier: D1:88:48:6A:75:69:D6:74:30:3F:CA:F4:34:1E:D7:4F:2A:91:FF:10
Certificate issuer: /CN=e63784c021402b727b8c35336b55ed5cc347904a
Certificate serial: 0185715E4F75F0717C85BB1205416056BCD6
Authority key identifier: E6:37:84:C0:21:40:2B:72:7B:8C:35:33:6B:55:ED:5C:C3:47:90:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jeEwCFAK3J7jDUza1XtXMNHkEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/446106-f924-4e5c-989c-33dd1f2f71f1/1/0YhIanVp1nQwP8r0NB7XTyqR_xA.roa
Signing time: Mon 02 Jan 2023 07:24:43 +0000
ROA not before: Mon 02 Jan 2023 07:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48876
IP address blocks: 194.79.250.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:4f:75:f0:71:7c:85:bb:12:05:41:60:56:bc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63784c021402b727b8c35336b55ed5cc347904a
Validity
Not Before: Jan 2 07:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d188486a7569d674303fcaf4341ed74f2a91ff10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:cf:80:a7:93:97:1c:40:08:6e:43:f6:dc:
61:a2:5d:c0:68:4e:6b:f9:72:56:b8:5a:69:01:b1:
ea:82:16:28:99:eb:83:95:c0:b3:ee:d2:a6:57:ee:
ef:0a:1c:fd:94:2a:c2:e1:02:dc:47:8d:6b:3e:eb:
17:56:1d:d9:50:49:21:87:c3:68:b8:f0:fb:b2:ad:
cb:18:3c:3e:ff:9d:3c:c9:3f:6b:35:c3:ac:c0:96:
2c:45:b5:15:06:aa:ad:90:fe:36:8b:94:49:5c:e7:
16:bf:6e:29:61:50:b7:70:23:a1:5a:e5:2d:df:fa:
35:78:a4:b7:5e:3f:34:70:da:eb:7d:84:9e:a8:2e:
4b:b6:54:a1:f3:cd:57:03:42:eb:ae:c9:1e:d1:d1:
73:dd:a3:18:54:09:be:2d:e7:9f:d0:4e:9e:dd:38:
6c:e7:15:8c:4c:09:1c:45:06:1d:a7:06:33:7a:31:
0d:bf:80:20:cf:c0:dd:a4:63:12:9d:a0:60:16:71:
5b:10:d9:9b:df:47:4d:7b:7c:8c:ce:21:a0:bc:8e:
f2:2e:1b:d0:f4:b7:c7:a4:8c:e3:4a:1f:f5:64:a1:
58:74:10:d0:f4:29:a4:75:ce:54:52:e6:b4:cf:20:
62:86:e9:d9:92:1e:2e:41:64:33:34:b9:8f:73:4d:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:88:48:6A:75:69:D6:74:30:3F:CA:F4:34:1E:D7:4F:2A:91:FF:10
X509v3 Authority Key Identifier:
keyid:E6:37:84:C0:21:40:2B:72:7B:8C:35:33:6B:55:ED:5C:C3:47:90:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jeEwCFAK3J7jDUza1XtXMNHkEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/446106-f924-4e5c-989c-33dd1f2f71f1/1/0YhIanVp1nQwP8r0NB7XTyqR_xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/446106-f924-4e5c-989c-33dd1f2f71f1/1/5jeEwCFAK3J7jDUza1XtXMNHkEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.250.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:7b:a9:0c:2f:be:98:9e:ac:96:e6:e6:41:78:7c:88:7d:59:
fe:83:56:16:89:c4:cd:85:66:b4:47:7b:69:4e:ac:af:f5:a3:
83:ec:09:21:db:66:67:ea:04:61:82:1e:12:3f:4f:05:a2:c1:
ea:b1:b9:fc:08:69:74:38:28:4e:b4:83:cf:16:71:41:c3:df:
96:b5:12:f2:b7:ff:61:b6:e0:e0:a4:a2:12:ee:a2:28:ea:e5:
96:a5:f7:d2:d0:be:83:b7:6e:3e:6d:46:07:9e:89:a5:0a:38:
40:51:98:73:45:45:8d:d1:ad:b4:18:87:ab:d6:8f:84:f1:98:
de:c4:af:23:2b:12:ad:cd:2f:89:1d:2a:bf:2d:0a:b5:69:50:
2d:91:d3:33:06:94:c3:6c:fa:a8:31:8f:f3:c7:d0:6b:2d:39:
f8:cc:35:9a:0f:a7:00:71:f4:f9:98:a0:ca:fb:84:bd:ab:97:
c8:d6:d3:9f:6a:c2:00:9e:e3:89:11:fc:8f:3e:ca:3c:cb:c3:
63:78:05:79:8a:c9:13:4f:b9:96:63:b0:58:db:7b:22:04:12:
03:f1:0f:12:bd:a3:b4:88:90:82:9f:db:f9:1a:aa:b4:90:14:
03:02:1d:8d:d6:13:1c:bd:71:39:c1:18:97:46:26:6d:8b:07:
21:81:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:58 2024 by rpki-client on console-fra.rpki-client.org