Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/ylkbcAaQsYwkbYoQQvp5nTsYOKY.roa
File: ylkbcAaQsYwkbYoQQvp5nTsYOKY.roa (raw, json)
Hash identifier: t1G+lF0Ukbpgcy5+k0wjzSwaKzwRNi5Tg1VvIr9xsy4=
Subject key identifier: CA:59:1B:70:06:90:B1:8C:24:6D:8A:10:42:FA:79:9D:3B:18:38:A6
Certificate issuer: /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial: 01856D0A90DF62A65239B70D7A5CAA3640AF
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/ylkbcAaQsYwkbYoQQvp5nTsYOKY.roa
Signing time: Sun 01 Jan 2023 11:14:47 +0000
ROA not before: Sun 01 Jan 2023 11:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15576
IP address blocks: 194.176.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:90:df:62:a6:52:39:b7:0d:7a:5c:aa:36:40:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Validity
Not Before: Jan 1 11:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca591b700690b18c246d8a1042fa799d3b1838a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:12:8c:a8:0f:a7:3a:94:81:ba:86:a2:52:
99:7a:75:bf:9a:a8:3e:9c:ad:5c:b7:df:56:f6:7a:
17:bc:58:66:39:47:ef:aa:fa:93:23:db:af:8e:07:
fb:05:94:9f:e8:a5:02:a9:ae:02:17:46:c5:d9:13:
2d:12:1a:fb:28:9e:31:e5:d2:dd:42:e9:0f:94:a4:
e2:8e:77:ee:70:82:a4:20:4d:45:78:1d:dc:98:de:
09:24:74:10:aa:55:93:8c:cc:7c:dc:06:ce:53:1a:
07:1a:f8:c9:77:46:27:c5:44:79:dd:1a:8c:54:29:
85:1c:0c:0f:59:4b:54:3e:d5:30:82:27:36:ed:ec:
ef:8c:70:44:dd:75:eb:54:87:64:2b:07:6e:c5:ff:
a0:0d:04:8f:9a:80:ec:89:15:7d:ed:d6:30:7d:e0:
9f:cd:61:b5:89:52:d0:a2:60:fd:ad:1b:27:bc:50:
09:0d:a0:d5:87:78:ed:f1:e4:0d:e9:e1:9a:cf:1c:
2c:63:bd:ce:e1:e7:66:87:41:01:38:cf:5f:60:67:
e3:bf:0a:cb:06:32:1a:9a:f4:0d:d2:3a:e8:ec:a9:
c8:1a:e8:8a:ca:60:3b:72:d9:f0:41:00:9b:f3:9b:
b0:fe:58:a0:76:a6:fe:b1:9c:28:a4:bf:69:de:de:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:59:1B:70:06:90:B1:8C:24:6D:8A:10:42:FA:79:9D:3B:18:38:A6
X509v3 Authority Key Identifier:
keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/ylkbcAaQsYwkbYoQQvp5nTsYOKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.116.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b1:e8:8b:9a:be:ed:2f:38:f3:9f:e7:f6:9a:85:80:cd:76:
c8:89:6c:8c:b4:6d:78:58:0a:5b:89:84:59:cc:43:43:f7:31:
cd:78:3f:3a:10:86:7d:12:ed:64:23:35:a8:8c:93:61:a0:b6:
a2:44:57:3c:40:d9:30:2d:9f:ab:bb:41:d7:24:14:30:e6:77:
9e:32:99:bd:67:99:70:39:9a:d0:f8:d1:96:f2:f8:9e:5a:3e:
41:51:a9:c9:a6:39:77:f8:4c:eb:78:4e:4c:cf:b2:8a:07:46:
18:bb:9c:61:02:92:fb:dc:0f:90:20:7a:9c:4e:36:25:e0:69:
3a:4f:20:43:8f:1a:dc:b4:3a:d7:b5:78:c1:be:24:97:8e:89:
3f:6a:98:af:53:cd:e0:75:d1:e0:6c:ba:39:a9:54:c7:a6:27:
cc:68:a7:9c:d2:b5:61:e8:fb:04:1d:25:a8:82:e4:42:25:59:
93:56:60:0c:40:a2:f5:c4:59:2a:8f:1c:89:55:8e:48:7c:90:
be:8c:89:5d:c5:1e:e1:bc:ad:6d:16:ae:8c:b3:07:2e:56:c9:
b5:90:16:d7:c8:a9:3b:12:47:d9:a3:20:ca:82:db:cb:ca:8a:
6f:1b:26:93:5c:df:76:c5:36:63:0f:39:3b:30:af:52:de:7f:
b0:e4:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:36 2024 by rpki-client on console-fra.rpki-client.org