Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Y-tPsrGGBBERL-vbVjEB0D3chjc.roa
File: Y-tPsrGGBBERL-vbVjEB0D3chjc.roa (raw, json)
Hash identifier: yxBBejSyzHZd6tXD8aO5nopMvBHOQdlancSugJ45QBE=
Subject key identifier: 63:EB:4F:B2:B1:86:04:11:11:2F:EB:DB:56:31:01:D0:3D:DC:86:37
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 01856D0AE9AA529E26A50AD4FBBF477AF693
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Y-tPsrGGBBERL-vbVjEB0D3chjc.roa
Signing time: Sun 01 Jan 2023 11:15:09 +0000
ROA not before: Sun 01 Jan 2023 11:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44270
IP address blocks: 79.173.112.0/20 maxlen: 21
94.243.240.0/20 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e9:aa:52:9e:26:a5:0a:d4:fb:bf:47:7a:f6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Jan 1 11:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63eb4fb2b1860411112febdb563101d03ddc8637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:4e:03:19:d1:00:c9:34:3c:b2:b4:59:18:
d4:4e:b4:f4:62:b0:09:27:8c:c5:da:95:13:0c:82:
82:71:11:3c:57:61:f8:85:86:b4:9c:7f:15:e4:69:
ba:20:01:d7:5a:f3:78:82:44:f7:9b:e3:84:36:af:
9d:a0:78:fe:12:e4:ae:96:72:62:f1:fb:87:00:5d:
42:ac:e1:42:87:9e:45:f9:57:9d:b7:9d:8a:34:62:
9c:62:ac:42:f7:bc:fd:7b:2f:2d:af:54:1c:91:e5:
fe:2b:82:a3:ba:9a:c1:52:cf:9c:c6:bc:89:1b:3e:
be:f3:12:07:02:6e:0f:87:84:bb:fa:82:20:1a:65:
7d:8e:75:ab:3a:74:f3:6f:6d:04:ff:b1:54:41:f1:
ca:58:15:4b:85:a5:17:91:ab:74:e1:58:30:88:ff:
6b:7d:b0:ca:88:9a:ab:01:c8:60:2f:f4:44:69:47:
77:b6:14:a0:99:bf:25:5c:40:fb:6f:ce:6b:cf:4f:
51:07:6b:b4:35:76:92:bd:4d:76:5a:1c:fb:e8:8a:
ee:f6:6d:c9:ab:f1:00:65:e8:7e:40:ad:44:1f:8c:
c7:a4:c7:f0:4d:93:ca:e1:78:50:29:cd:d1:52:96:
84:c4:c1:98:22:74:35:aa:25:1d:32:db:41:e5:2d:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EB:4F:B2:B1:86:04:11:11:2F:EB:DB:56:31:01:D0:3D:DC:86:37
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Y-tPsrGGBBERL-vbVjEB0D3chjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.112.0/20
94.243.240.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:bf:c9:93:70:30:44:cf:78:34:38:49:3c:17:70:b2:64:6a:
95:f1:7a:6f:09:c4:20:e2:1f:9f:0a:38:bd:bb:48:46:7a:f0:
b6:16:be:0e:f1:38:83:1e:9b:d6:73:f1:70:c0:d6:85:a8:00:
dc:17:58:c3:14:1f:89:b8:60:be:54:50:df:c1:f6:2a:74:73:
c7:d7:93:08:ac:f5:0b:91:1d:90:38:f5:c7:aa:2a:ac:68:00:
aa:85:27:10:2a:2f:bc:49:6f:0b:92:0b:e3:1b:3c:63:8f:23:
67:5b:8e:c0:e5:03:4c:a1:8f:0c:78:a3:50:dd:dd:2f:5c:88:
37:ed:70:3f:0f:5f:11:c9:ce:01:47:d0:22:60:87:59:c4:f1:
34:23:2e:5d:8b:5e:6e:66:0f:04:83:31:09:87:3a:7e:e3:63:
e4:fd:f9:ad:d8:60:f3:f3:5c:3c:2a:d3:a4:b9:4a:69:da:0d:
50:bd:64:6f:d4:6f:d7:0d:b6:82:23:45:bd:67:49:f9:b5:2d:
2a:b3:7f:47:62:bc:56:ef:b9:13:ac:28:b4:fc:3f:87:e2:12:
ab:9e:df:6f:ae:f2:24:ba:8a:6b:6a:2f:18:25:be:3c:e6:91:
e6:82:d1:18:6a:16:15:f6:66:66:94:82:2b:77:c1:82:49:35:
03:b1:01:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:43 2024 by rpki-client on console-ams.rpki-client.org