Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/YR1JS6GNRtvrwONyl8k6VXZYyy4.roa
File: YR1JS6GNRtvrwONyl8k6VXZYyy4.roa (raw, json)
Hash identifier: Vr/CJv5Lghx3FQygnKro2V8w17NEFQgYm/Cp+Mwt414=
Subject key identifier: 61:1D:49:4B:A1:8D:46:DB:EB:C0:E3:72:97:C9:3A:55:76:58:CB:2E
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 01856F8B8E728E9BD09679BD0B527442C812
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/YR1JS6GNRtvrwONyl8k6VXZYyy4.roa
Signing time: Sun 01 Jan 2023 22:54:55 +0000
ROA not before: Sun 01 Jan 2023 22:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12350
IP address blocks: 195.13.52.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:8e:72:8e:9b:d0:96:79:bd:0b:52:74:42:c8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Jan 1 22:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=611d494ba18d46dbebc0e37297c93a557658cb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:a8:4f:72:9c:a8:b5:51:c9:6d:13:9c:13:
bf:1c:89:3b:80:55:d5:36:9c:25:f8:12:00:0c:41:
f7:e9:94:7c:ed:c2:b3:65:8a:7c:34:4c:ef:21:bf:
8e:b5:bc:be:a5:d1:3a:3f:d9:2a:ed:b2:b2:a1:7f:
f8:f9:c3:77:7c:44:b3:c6:ad:94:55:ad:2d:b4:73:
9f:a0:c5:d9:24:c3:1f:38:c9:b6:ee:cb:7b:ff:32:
39:0b:14:88:e1:6c:a4:bc:87:e0:e5:26:33:71:ff:
34:80:ac:11:c4:f0:bb:6d:a4:9b:00:62:1d:45:47:
2a:73:11:88:ac:3d:a4:db:d7:f8:d0:6c:58:1b:12:
b4:25:46:ed:d7:02:10:de:1d:7d:a6:54:71:26:2b:
4e:91:15:a7:85:cc:82:c9:00:c1:12:98:60:42:ba:
14:4e:3c:d5:1a:f8:b6:ea:71:f9:b8:95:fd:a0:1b:
0b:a2:7d:d8:74:01:45:81:91:16:4c:f1:49:f8:8a:
42:cc:9f:70:f5:fa:1c:42:2d:6b:4a:d8:3a:9f:09:
f1:75:9d:e9:b6:10:ad:65:22:6c:b7:aa:c6:5b:20:
59:1b:df:bc:46:24:56:a2:00:88:54:ee:cc:ea:f9:
20:b2:5f:e2:05:5f:2a:f9:81:ce:95:4e:60:6c:b9:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1D:49:4B:A1:8D:46:DB:EB:C0:E3:72:97:C9:3A:55:76:58:CB:2E
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/YR1JS6GNRtvrwONyl8k6VXZYyy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.13.52.0/23
Signature Algorithm: sha256WithRSAEncryption
67:a9:44:5e:00:84:86:de:22:2b:48:51:96:7e:86:97:ec:ca:
f0:7e:ac:e8:59:88:52:29:21:a6:2b:a4:56:9f:0c:98:b9:a6:
d1:ab:0c:9f:d9:56:5b:97:31:21:88:67:3f:0f:49:93:43:19:
d8:e0:4e:a7:5f:6c:f0:2c:10:5f:d0:77:51:44:b1:6d:11:d5:
62:3d:a2:bf:80:d2:49:26:4a:77:7f:fb:1f:33:96:bd:9b:27:
a7:e4:ed:00:70:23:fd:3b:03:54:55:8c:d6:a8:48:d9:25:18:
b3:95:77:60:61:f4:11:77:a0:96:cf:bf:c7:7c:e4:8b:7c:aa:
38:26:85:79:8f:b6:b2:33:9e:e9:b8:36:0b:e1:41:24:b2:d5:
f4:41:3f:a1:64:49:4b:8b:03:19:7a:fc:39:05:4f:7c:5d:a9:
44:b0:77:9c:e3:22:cb:84:23:19:e0:b0:7b:d4:d9:a0:2e:2b:
82:3e:69:93:a1:f6:59:75:55:54:71:63:b9:6b:4e:a9:ea:5d:
bc:6e:42:55:fe:09:27:e9:3e:0a:17:1c:f4:b2:3b:76:a4:18:
76:13:d3:59:d6:c7:11:34:99:97:ce:23:f3:b3:2b:b2:41:19:
a1:47:ec:a7:7f:13:76:17:29:43:7f:5a:9c:89:fa:76:c5:f2:
6f:df:ce:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:18 2024 by rpki-client on console-fra.rpki-client.org