Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/YIPGEvShwJUQiK9hh_1gBVA6_40.roa
File: YIPGEvShwJUQiK9hh_1gBVA6_40.roa (raw, json)
Hash identifier: j4+ovVep3xxCm3Bi+ikwk/fkiGkDTvz3yqBoorJ05J4=
Subject key identifier: 60:83:C6:12:F4:A1:C0:95:10:88:AF:61:87:FD:60:05:50:3A:FF:8D
Certificate issuer: /CN=6c0946c081b32be848cb00d8d932e8c1f7179668
Certificate serial: 018CC4255BFB16E81A70E81D99C10E0DDAD5
Authority key identifier: 6C:09:46:C0:81:B3:2B:E8:48:CB:00:D8:D9:32:E8:C1:F7:17:96:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAlGwIGzK-hIywDY2TLowfcXlmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/YIPGEvShwJUQiK9hh_1gBVA6_40.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200318
IP address blocks: 194.169.60.0/22 maxlen: 22
2a0d:d40::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 12 Jan 2024 21:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5b:fb:16:e8:1a:70:e8:1d:99:c1:0e:0d:da:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0946c081b32be848cb00d8d932e8c1f7179668
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6083c612f4a1c0951088af6187fd6005503aff8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:35:8d:80:60:43:f0:32:3b:cf:c4:ea:9c:
04:46:68:f2:36:9d:8d:23:4d:56:6b:0e:6f:7a:1c:
69:7a:40:8c:64:ba:c2:1d:cb:b9:e3:9a:a2:8b:2d:
a8:a6:48:44:8c:ef:f9:a1:80:ab:fb:31:80:f0:03:
70:2c:18:fa:47:9b:30:01:74:cb:05:be:5b:cc:fd:
c6:f2:fd:cb:3a:0f:5d:c3:b5:70:6a:17:da:1a:5d:
c8:e5:4b:6d:13:a6:66:ca:08:fc:e8:8c:78:6a:eb:
b7:6f:68:45:29:58:5c:78:b5:77:0b:99:6d:63:98:
5d:2f:ca:69:29:7e:a5:97:e7:05:99:ca:32:7d:73:
cc:60:33:c5:7d:f6:82:75:6a:f1:c5:9b:9c:32:46:
8b:fc:e5:b2:4f:e1:86:2f:6f:cd:1e:00:53:6a:6e:
95:e5:4e:7e:1c:9d:15:ce:77:57:89:64:49:85:f7:
39:e0:47:b7:16:57:14:dc:f7:a4:15:54:43:00:d3:
51:1f:2a:89:74:7c:68:ed:03:97:39:21:e2:ec:53:
81:2e:71:cc:77:67:04:e7:91:8c:69:6c:d6:dd:ea:
dc:40:05:a5:af:5b:33:c3:42:c2:ab:c2:8c:c9:45:
65:3a:90:74:b2:fe:2d:54:5a:ff:a7:f1:a9:bd:70:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:83:C6:12:F4:A1:C0:95:10:88:AF:61:87:FD:60:05:50:3A:FF:8D
X509v3 Authority Key Identifier:
keyid:6C:09:46:C0:81:B3:2B:E8:48:CB:00:D8:D9:32:E8:C1:F7:17:96:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAlGwIGzK-hIywDY2TLowfcXlmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/YIPGEvShwJUQiK9hh_1gBVA6_40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.60.0/22
IPv6:
2a0d:d40::/32
Signature Algorithm: sha256WithRSAEncryption
91:6e:85:8f:99:67:3d:c7:2d:09:61:07:5e:75:0e:0a:8a:04:
b4:c1:b6:49:45:22:17:d8:34:de:eb:65:df:c7:cb:f2:c7:d3:
ed:61:fe:ec:0b:97:dd:81:74:51:84:12:b4:9a:88:d8:03:21:
e2:2f:90:d1:7f:5d:63:51:4b:a9:5b:ac:08:54:10:76:e5:a7:
a3:9c:22:d4:24:0e:75:0c:0a:48:a2:6c:90:37:cb:9d:75:1f:
80:66:fe:8f:9d:20:f4:2b:a1:71:13:3d:ba:15:27:55:5f:43:
ea:44:97:b7:c9:ba:92:bd:2e:f9:67:d4:f7:24:d2:fa:2b:84:
1b:a4:e8:42:52:ef:a9:99:fe:f3:99:42:31:4e:a9:14:00:ca:
83:c6:95:df:30:ef:a5:c4:1f:7b:19:51:9f:f4:c0:68:61:f1:
f9:f5:53:b2:d0:1f:3c:20:8b:7b:0d:4f:18:47:e5:91:45:7a:
96:d2:a2:cc:67:4a:a9:3a:89:2a:cb:80:92:93:6c:2f:16:1c:
be:cc:60:80:b3:0f:9e:23:55:a9:bf:b2:e5:28:71:95:e2:53:
6c:ec:6c:31:4b:c1:78:7a:ce:46:13:fd:c5:71:09:f4:e0:57:
92:b8:1b:79:2f:a4:de:92:48:3d:b3:a9:61:87:1d:85:3a:d2:
da:17:ab:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:53 2024 by rpki-client on console-ams.rpki-client.org