Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/YJJcrpyQdQI_W8RtWYjZJIL7RzM.roa
File: YJJcrpyQdQI_W8RtWYjZJIL7RzM.roa (raw, json)
Hash identifier: XXOnjc2odAlp66Yjbcr90zHoKpILG7E1QzxrcISrZMA=
Subject key identifier: 60:92:5C:AE:9C:90:75:02:3F:5B:C4:6D:59:88:D9:24:82:FB:47:33
Certificate issuer: /CN=e6c2d510b8f05507a71142ebfb239a51b2717a91
Certificate serial: 018964C0530445FF674CAA4BBA769680D908
Authority key identifier: E6:C2:D5:10:B8:F0:55:07:A7:11:42:EB:FB:23:9A:51:B2:71:7A:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLVELjwVQenEULr-yOaUbJxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/YJJcrpyQdQI_W8RtWYjZJIL7RzM.roa
Signing time: Mon 17 Jul 2023 16:47:52 +0000
ROA not before: Mon 17 Jul 2023 16:47:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 5.42.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:53:04:45:ff:67:4c:aa:4b:ba:76:96:80:d9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2d510b8f05507a71142ebfb239a51b2717a91
Validity
Not Before: Jul 17 16:47:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60925cae9c9075023f5bc46d5988d92482fb4733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3d:0d:8a:f7:ef:91:30:9d:1e:16:8b:96:fe:
40:ed:fb:ea:fc:6b:da:05:80:92:9c:44:c1:95:5a:
2a:83:34:c3:f0:9d:fa:dc:49:30:d7:1c:a0:46:a2:
d3:6d:de:95:d4:e1:fa:fb:eb:a3:2d:6c:06:87:ed:
27:6d:28:f7:f1:3e:58:71:e4:e1:09:5d:e1:6a:14:
5f:64:c4:54:ea:df:dd:ca:da:a3:dd:6e:51:17:5e:
14:cb:18:b7:30:17:be:38:9a:49:c5:a3:0e:6f:3f:
be:06:0f:d1:7d:89:2d:41:6a:94:8e:d2:a8:cd:40:
f3:cd:63:e4:d6:61:22:7e:8c:52:d0:4b:95:62:cc:
82:3e:46:90:b8:2f:0f:15:98:8f:4f:10:b7:36:ee:
94:48:f3:64:f7:1e:ce:97:c6:53:c3:7e:72:49:68:
56:f0:10:25:66:07:f7:fe:38:71:b1:6e:0e:2e:df:
f5:97:b8:03:21:95:4f:31:9f:87:39:41:5f:71:a5:
c7:b4:89:7a:cf:53:a6:67:83:64:d1:f5:92:1f:ee:
41:cc:ac:bd:69:5b:e1:23:d7:2a:84:37:3a:17:6a:
f7:bc:0b:ee:0a:d0:1b:be:d3:60:02:1d:06:c3:7b:
68:5f:8f:1a:6b:7c:66:65:ad:61:59:55:c5:b2:b2:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:92:5C:AE:9C:90:75:02:3F:5B:C4:6D:59:88:D9:24:82:FB:47:33
X509v3 Authority Key Identifier:
keyid:E6:C2:D5:10:B8:F0:55:07:A7:11:42:EB:FB:23:9A:51:B2:71:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLVELjwVQenEULr-yOaUbJxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/YJJcrpyQdQI_W8RtWYjZJIL7RzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/5sLVELjwVQenEULr-yOaUbJxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.192.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:47:ad:3e:f5:cc:0e:30:a2:40:a6:10:2f:1b:72:c5:6f:e2:
92:a7:54:ee:28:d8:d5:f4:13:e9:76:37:db:d8:bb:ad:a0:42:
64:9f:8e:94:27:5d:e1:3d:3e:1f:e0:8d:ad:e4:7d:fd:97:24:
7d:2c:28:b2:41:f9:f1:81:b9:a2:95:89:ce:69:06:1b:ae:fc:
20:3f:b6:65:fd:d4:ce:6c:4e:75:29:c7:bf:05:28:6b:b3:44:
07:f2:09:50:18:4e:02:63:79:e3:54:98:6e:61:3b:c3:dd:ca:
88:df:0b:ca:35:2f:07:24:f4:78:d7:6c:af:dc:48:78:af:da:
da:7e:39:ec:db:dd:36:eb:90:95:30:da:34:02:ea:19:9e:05:
e8:7b:2b:34:0a:c8:d5:ef:dc:04:db:38:24:a3:b5:46:2d:9a:
0b:3c:44:52:28:c3:97:fd:c4:08:a1:09:03:14:c0:30:06:30:
ad:54:ac:9a:d8:66:0b:71:59:82:b1:b5:73:1e:36:ef:bf:97:
94:49:21:69:8f:a2:11:ac:c8:db:09:4d:71:bd:80:c4:57:5c:
30:92:4a:76:ce:d1:54:3f:55:01:a8:dc:fe:cc:f8:29:61:a4:
11:42:7c:15:ee:c9:ea:77:c0:c2:f9:cc:ff:c9:f8:56:04:42:
37:6d:89:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:33 2024 by rpki-client on console-ams.rpki-client.org