Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/y-EkTTcGYjtxT4Fh4iptOitcJ68.roa
File: y-EkTTcGYjtxT4Fh4iptOitcJ68.roa (raw, json)
Hash identifier: +z9UB5blmfFt9hZ8JeZ9Trvdd9J5vOgBPyZYpSPbN9U=
Subject key identifier: CB:E1:24:4D:37:06:62:3B:71:4F:81:61:E2:2A:6D:3A:2B:5C:27:AF
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 018A47E9E244257D6787EF5B09E56317DF4C
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/y-EkTTcGYjtxT4Fh4iptOitcJ68.roa
Signing time: Wed 30 Aug 2023 19:27:04 +0000
ROA not before: Wed 30 Aug 2023 19:27:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 94.228.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:47:e9:e2:44:25:7d:67:87:ef:5b:09:e5:63:17:df:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Aug 30 19:27:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbe1244d3706623b714f8161e22a6d3a2b5c27af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:56:58:fe:a4:41:71:2c:11:e2:4c:97:ee:4b:
23:fb:a0:62:ae:c2:6f:4a:ed:10:02:8b:79:cd:5b:
b6:30:c3:17:20:d5:f6:f2:65:cb:ba:94:4b:f8:41:
fa:92:48:a4:4c:84:5a:be:7e:c6:2e:4f:d8:4f:08:
05:ca:e4:ae:7b:ac:ed:1e:65:fb:f4:86:b7:c2:1a:
88:44:2e:ff:bc:c4:96:a1:a9:9b:06:ca:94:6f:6c:
cb:32:9c:8d:5f:f0:53:76:f8:49:9d:6e:15:fd:ae:
7c:12:5b:85:f5:e5:35:57:b6:78:0e:90:0e:72:16:
2d:63:f1:de:ee:1e:e0:31:ea:fc:15:29:59:3a:e1:
be:83:59:40:77:0b:91:6a:55:77:cd:2b:1e:03:f6:
75:d7:cb:dd:7c:cc:80:0f:2a:40:68:88:b5:11:c6:
a0:c8:2d:c7:b0:03:e3:11:79:e2:d3:d6:ba:d2:b3:
a5:3a:b8:25:a8:dd:0f:e0:7e:80:8f:ce:9d:8f:29:
b8:d1:f1:49:0d:9f:06:e6:26:02:b9:35:67:e3:f1:
f7:97:7a:ed:7e:bb:91:4f:e4:2b:a2:ef:51:5f:a9:
cd:44:6c:79:13:d9:49:5f:0b:48:44:fd:8f:53:66:
59:f9:36:c8:79:d6:fe:d6:7f:61:3d:27:0c:fb:41:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E1:24:4D:37:06:62:3B:71:4F:81:61:E2:2A:6D:3A:2B:5C:27:AF
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/y-EkTTcGYjtxT4Fh4iptOitcJ68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.161.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e4:e4:a2:bb:cd:79:a3:51:bf:93:e7:8e:eb:1b:0e:43:d0:
93:e3:60:14:56:24:aa:ce:d4:30:7d:53:91:c0:c4:c6:73:06:
ce:66:13:1f:99:4f:3d:81:45:a1:2b:8b:5b:46:79:20:5a:f6:
93:75:aa:ad:96:a7:a8:33:61:e7:62:d0:c2:81:43:c8:6e:ab:
32:c2:45:54:49:0a:f8:3a:58:24:05:b8:08:22:b1:2b:71:00:
23:5f:13:9a:1d:4e:fa:f5:ea:a9:f1:14:4c:04:49:21:07:8b:
45:95:a9:84:1d:82:03:f4:fc:99:58:2e:ae:99:89:b5:b2:b6:
d9:d4:6f:d9:e7:a4:fa:28:9b:45:58:7a:1e:47:16:54:6b:8e:
53:2c:90:ed:63:27:7e:16:f8:50:8c:c6:f4:48:fe:62:d1:f5:
ba:fb:db:0d:80:c5:f1:0c:85:96:15:07:13:65:e0:8a:ea:0c:
a5:43:bf:1f:08:9b:ac:ee:8c:2a:5f:5b:8b:d5:3c:26:37:29:
8e:c7:d7:24:52:1a:b0:04:70:0c:24:22:fe:04:7b:20:b3:2a:
75:97:ab:39:3a:5c:7f:d3:46:f9:28:0c:22:f0:16:63:58:d4:
80:a2:c2:9f:f0:28:0d:b7:24:eb:3c:c8:a3:85:d0:20:d2:f7:
f4:42:fb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:10 2024 by rpki-client on console-ams.rpki-client.org