Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/7yxwxYR4MMWwR0en6eyt7BCA_YI.roa
File: 7yxwxYR4MMWwR0en6eyt7BCA_YI.roa (raw, json)
Hash identifier: RLJeBONpO/Qy4CQ5yt2OLANT/wcoRo502Xx78aOP3M0=
Subject key identifier: EF:2C:70:C5:84:78:30:C5:B0:47:47:A7:E9:EC:AD:EC:10:80:FD:82
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01865310C395595CB6E21B29DFD3AD797F54
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/7yxwxYR4MMWwR0en6eyt7BCA_YI.roa
Signing time: Wed 15 Feb 2023 03:14:12 +0000
ROA not before: Wed 15 Feb 2023 03:14:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 194.169.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:53:10:c3:95:59:5c:b6:e2:1b:29:df:d3:ad:79:7f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Feb 15 03:14:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef2c70c5847830c5b04747a7e9ecadec1080fd82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:96:5a:d4:55:b4:d4:77:8c:46:0c:a6:06:d3:
ac:52:3f:8f:53:18:62:bb:ae:2d:ca:20:eb:1b:95:
49:3f:1f:03:1b:c7:66:5c:10:ef:20:1e:f4:6b:21:
51:ee:e6:b9:ec:7e:ac:4f:e8:cf:80:08:10:1a:05:
a6:99:6b:4d:75:73:f2:1e:fc:63:10:5f:f2:fd:55:
2f:c5:24:bd:22:09:14:0c:3d:f2:16:49:60:d4:95:
6c:4f:1f:cd:76:1c:31:5f:cc:af:aa:6e:79:05:6c:
2f:3e:64:af:67:60:4d:50:2a:40:5a:18:13:91:8c:
d3:fd:ce:1a:a2:2c:ed:2b:fd:aa:cc:b6:04:5d:7f:
8e:d1:e2:cf:43:af:98:7c:77:b1:a8:ae:1a:37:65:
15:25:34:7a:69:d6:62:6c:1e:f6:07:2f:2c:84:cd:
3e:9b:1c:eb:d3:e1:61:a3:f9:1b:f3:68:cd:fe:8c:
34:b6:7a:1b:43:ed:28:2b:3a:d2:ef:14:22:0f:32:
c3:71:b0:6c:87:42:12:5a:fd:5a:01:56:8a:8f:1a:
28:c2:d4:45:f3:62:e9:63:0c:ee:03:85:48:d7:ca:
af:25:61:8f:ae:2a:d9:3b:7b:dc:af:c7:fc:09:54:
c0:09:ee:8d:51:c3:88:b9:e8:a0:e4:93:92:b6:1a:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2C:70:C5:84:78:30:C5:B0:47:47:A7:E9:EC:AD:EC:10:80:FD:82
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/7yxwxYR4MMWwR0en6eyt7BCA_YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.48.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3d:11:d4:5b:65:d5:ce:06:e0:4b:53:95:01:6f:db:46:d5:
d6:b9:a9:e3:c7:0b:09:c3:fe:95:85:11:22:67:9d:61:34:c3:
5b:c0:f9:21:6a:bd:f1:ae:02:f2:b1:69:01:c1:fe:2e:e1:a3:
f7:2a:b2:23:3a:53:3a:16:e7:57:6f:ea:5a:b2:08:39:9c:ae:
88:4d:0f:f3:28:99:9b:81:49:c4:ae:bc:a7:26:7a:a0:41:15:
42:bb:f4:ae:f0:56:99:b1:7f:6c:3f:e9:43:b7:a5:91:92:02:
75:a3:89:1f:41:10:8f:f2:6a:85:e9:c4:29:f7:2f:25:dd:52:
7e:4b:ea:5b:5c:32:c2:67:d1:80:8a:a7:40:7c:1c:8b:19:ed:
b0:13:df:07:53:d0:46:35:d3:6f:ec:14:82:da:20:97:80:27:
f9:9e:c1:cf:20:6c:f2:b9:85:db:59:2f:26:17:f3:cf:22:e9:
e4:6a:fa:b0:7f:c1:7e:9b:06:ef:56:00:8b:88:7d:6c:9e:dc:
dd:5b:02:09:76:92:d2:73:0a:a4:1b:5d:8f:5f:77:33:ce:2e:
df:86:73:7e:c4:b5:06:00:55:92:a1:77:8d:78:f6:e3:3f:86:
54:23:69:e5:88:9e:ba:57:4d:f1:8b:2e:df:c8:8c:58:b9:53:
66:81:ad:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:00 2023 by rpki-client on console-ams.rpki-client.org