Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/yU67kTQAXFlbwLLn8CMsSkaYYKQ.roa
File: yU67kTQAXFlbwLLn8CMsSkaYYKQ.roa (raw, json)
Hash identifier: e+kaYdB5m7IknW3ej/e+QkziD7GW/YZNmMjJKjUIpbs=
Subject key identifier: C9:4E:BB:91:34:00:5C:59:5B:C0:B2:E7:F0:23:2C:4A:46:98:60:A4
Certificate issuer: /CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Certificate serial: 018C2543FD06C47D131B37F50D8E2B211564
Authority key identifier: 59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/yU67kTQAXFlbwLLn8CMsSkaYYKQ.roa
Signing time: Fri 01 Dec 2023 12:04:21 +0000
ROA not before: Fri 01 Dec 2023 12:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.56.108.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:43:fd:06:c4:7d:13:1b:37:f5:0d:8e:2b:21:15:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Validity
Not Before: Dec 1 12:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c94ebb9134005c595bc0b2e7f0232c4a469860a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:16:20:2e:ae:64:7a:01:19:ad:93:43:92:f0:
b4:b1:f4:1e:f4:2c:de:88:0e:cc:79:57:56:b2:5c:
96:9a:49:e8:aa:b4:83:ca:90:32:b7:21:6b:e5:f5:
d2:3d:01:ab:f5:19:88:6e:85:f0:1f:8e:2d:e4:15:
9a:9a:d0:eb:0c:2a:3b:12:96:ce:45:9e:69:5e:83:
bd:ea:36:10:c0:03:d4:86:25:b7:51:67:2f:67:ce:
86:4a:fc:52:47:ff:1e:16:9a:bc:ef:84:52:21:3b:
ac:92:de:3a:3f:09:33:a0:23:21:2f:27:e9:dc:61:
04:f2:b3:f0:4e:ba:a9:f0:b7:ef:27:88:8a:a9:c8:
92:a3:1a:2a:9e:bf:4f:fb:59:da:85:69:9e:81:4e:
f6:e2:12:90:dc:3b:1e:e5:17:9d:fd:90:aa:85:ae:
da:66:47:9e:7a:79:80:b4:f1:94:72:2f:c8:ff:5d:
4f:c3:e0:40:d2:e5:05:64:e0:17:29:d5:94:8b:d4:
6e:df:43:ae:f0:8e:b5:25:77:44:7b:86:cb:00:e7:
38:c4:b9:93:af:f7:16:84:b8:86:b2:eb:a8:e7:12:
02:56:5e:fd:f3:ac:63:71:a8:f0:65:3a:61:49:6d:
58:68:61:78:de:85:2d:5d:b1:84:3f:9c:e9:1c:ad:
d5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4E:BB:91:34:00:5C:59:5B:C0:B2:E7:F0:23:2C:4A:46:98:60:A4
X509v3 Authority Key Identifier:
keyid:59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/yU67kTQAXFlbwLLn8CMsSkaYYKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:bb:40:27:02:c0:e9:8a:66:70:5d:ee:75:7a:a8:54:81:ae:
09:36:4b:50:96:0a:2c:36:8b:ec:08:c5:63:81:a5:4a:9f:8c:
4d:70:e6:2d:f0:46:e0:1a:28:e2:43:be:3e:f4:50:e4:fa:4f:
bc:fe:a1:e3:99:c8:a0:3a:4f:ff:f4:78:83:25:7a:9a:91:3e:
50:5f:35:e8:b5:cc:9a:f3:42:e9:66:2e:55:88:53:f8:88:1a:
a9:49:d7:d7:cb:2d:85:b2:16:47:cc:a1:28:22:0a:9b:f9:f3:
15:53:aa:22:32:d7:63:80:d8:44:8f:31:b5:9d:83:ff:7c:92:
7d:66:16:f6:38:d9:65:52:ad:31:7f:b2:65:52:28:0f:74:75:
1c:f8:e7:63:34:36:00:72:06:d3:13:b4:a2:48:c0:7d:5d:4c:
2c:de:f3:5e:6b:12:3a:fd:ca:6a:4f:d3:6f:25:1b:39:1b:08:
be:1c:7f:38:93:9f:f4:bc:91:44:72:b9:1e:bd:ca:11:bb:83:
2a:89:7a:fd:1d:c2:05:66:bb:88:49:67:2b:1d:80:db:f8:56:
6f:7b:df:ab:33:12:89:71:e2:ab:78:77:d5:57:02:6f:91:46:
d3:06:d3:ff:0e:87:c8:df:a0:bc:6f:f3:83:c7:a5:7f:77:31:
e9:2d:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:04 2024 by rpki-client on console-fra.rpki-client.org