Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/yWS1L59qaf4UIwrG9DiefHfszPc.roa
File: yWS1L59qaf4UIwrG9DiefHfszPc.roa (raw, json)
Hash identifier: PJOMa2VtCRxbEFrVXEdjuw5l6kvNlYCd9UPGtFkZrfo=
Subject key identifier: C9:64:B5:2F:9F:6A:69:FE:14:23:0A:C6:F4:38:9E:7C:77:EC:CC:F7
Certificate issuer: /CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Certificate serial: 018572F134298614A7709ED2D54E187497D9
Authority key identifier: 2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/yWS1L59qaf4UIwrG9DiefHfszPc.roa
Signing time: Mon 02 Jan 2023 14:44:48 +0000
ROA not before: Mon 02 Jan 2023 14:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51107
IP address blocks: 193.46.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:34:29:86:14:a7:70:9e:d2:d5:4e:18:74:97:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Validity
Not Before: Jan 2 14:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c964b52f9f6a69fe14230ac6f4389e7c77ecccf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:f1:11:c9:8e:a6:77:6c:aa:98:08:52:6e:
25:98:5f:85:d8:7f:db:be:1d:b5:fa:58:08:7d:38:
38:f5:9a:3c:06:a6:97:3c:51:19:71:43:77:22:2e:
b3:5a:e7:bf:1c:a2:64:a4:a5:a4:d3:b6:fa:fc:ab:
43:61:9f:be:33:9f:62:18:0e:ed:f8:82:16:cd:68:
2c:4a:95:5d:cd:27:d4:d4:dc:fc:14:02:05:87:16:
32:ae:20:a4:43:e9:47:75:51:0f:48:1b:e3:34:19:
d1:d3:d5:29:36:cd:4d:5d:9a:1a:10:4d:5e:f6:9f:
cd:6f:b6:78:83:fc:2b:8d:dd:36:16:26:87:77:bc:
76:bc:ac:8a:fe:eb:4a:b4:73:d8:d0:44:0d:d7:20:
78:25:a5:7f:28:71:b1:85:96:e8:0d:b7:82:fa:d7:
3a:95:3f:5d:c3:b5:8a:75:4d:f0:3b:47:33:02:61:
c0:b0:5f:ca:35:94:c3:58:30:99:5e:e0:76:86:da:
40:6a:8b:92:52:fd:1a:22:d1:33:2a:85:6a:98:94:
ab:63:8b:2b:df:a4:fb:aa:3c:14:a1:48:86:c3:cc:
02:7e:ff:dd:38:6e:1f:ca:7e:75:16:9a:00:35:01:
f8:1e:99:72:26:18:9e:5a:03:3f:42:c4:f8:4c:f4:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:64:B5:2F:9F:6A:69:FE:14:23:0A:C6:F4:38:9E:7C:77:EC:CC:F7
X509v3 Authority Key Identifier:
keyid:2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/yWS1L59qaf4UIwrG9DiefHfszPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.84.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e8:0c:bc:eb:f1:23:6f:27:0e:46:91:7f:ca:b3:04:82:92:
d4:1a:31:0f:51:7d:32:2f:84:c9:ac:5e:5a:9d:2c:e0:04:9a:
eb:a3:73:00:b7:0e:7f:b4:07:dd:59:fb:e6:a4:25:5a:c7:74:
16:aa:8a:9b:7c:f8:37:27:2e:78:2a:96:c8:9a:f0:96:6d:35:
b4:43:08:b3:f0:85:cf:5f:00:a2:f0:ef:4c:cf:11:6a:5e:28:
a7:e5:40:d5:4a:97:87:ad:2c:95:10:1d:b8:07:b2:7d:cd:81:
a0:c2:30:98:d6:46:37:44:37:55:59:6a:bc:46:a9:ca:09:ce:
30:2b:54:5d:6f:d8:54:87:0c:38:15:e5:db:2a:3c:de:95:ac:
a2:5e:81:86:49:a1:59:e4:a8:5e:34:d3:0b:d8:88:8d:ad:39:
16:3f:10:21:1b:cc:31:be:73:7a:5f:5a:76:06:a4:49:f8:4c:
56:89:c9:99:63:f4:88:bc:11:d5:b7:5d:84:99:ca:cb:b7:fe:
55:7d:16:21:db:44:06:1a:7b:d1:a4:c0:ae:a1:20:de:91:bf:
4e:80:be:92:db:8e:06:ab:47:7c:56:38:51:b9:24:04:9d:6f:
53:89:dc:b6:e8:7f:12:92:b4:23:4c:b7:d1:d9:f3:45:c4:07:
f6:a6:4a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:04 2024 by rpki-client on console-ams.rpki-client.org