Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/Yozbl3ejatvjTxGPfCpLOWtH5R8.roa
File: Yozbl3ejatvjTxGPfCpLOWtH5R8.roa (raw, json)
Hash identifier: vSpMWR+u9q8md7fHd4qZtEAsWv9BUwn8xNg19eU93hg=
Subject key identifier: 62:8C:DB:97:77:A3:6A:DB:E3:4F:11:8F:7C:2A:4B:39:6B:47:E5:1F
Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial: 0186938DBE72B562F7F0908019835C8BD028
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/Yozbl3ejatvjTxGPfCpLOWtH5R8.roa
Signing time: Mon 27 Feb 2023 15:46:25 +0000
ROA not before: Mon 27 Feb 2023 15:46:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6900
IP address blocks: 141.93.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:8d:be:72:b5:62:f7:f0:90:80:19:83:5c:8b:d0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Validity
Not Before: Feb 27 15:46:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=628cdb9777a36adbe34f118f7c2a4b396b47e51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:ae:2a:ca:36:af:74:83:95:e9:b7:48:f5:
ae:f8:e6:b9:b5:d3:44:f8:73:bb:5d:57:c1:8f:b6:
81:d5:1a:58:41:65:7c:33:0f:e6:91:14:a1:5d:a6:
e7:4b:20:76:b7:f1:6e:d5:af:ec:07:84:c9:e2:96:
f9:63:dc:3b:1c:ba:e4:b6:4e:f7:66:27:e0:59:af:
0e:38:ff:ae:b9:c1:15:c0:99:b9:62:59:a7:1d:b1:
c5:b1:e7:39:d3:48:bb:28:f3:e1:24:1f:e9:2a:41:
63:5f:fe:f1:cc:55:9e:32:97:30:0e:f9:1b:15:ab:
84:b2:2b:9a:7d:c8:ac:f9:55:98:66:41:ff:25:af:
33:8f:16:f3:d0:c3:fa:f3:89:e3:a6:ec:84:88:9e:
22:c9:d4:fa:8d:3e:05:72:c2:9a:5c:6c:eb:b0:bc:
da:49:30:59:e7:25:05:c2:8d:39:7c:0c:65:a7:01:
88:b8:58:94:65:a7:14:27:3c:3d:24:6b:50:84:ce:
dd:3c:4f:5b:cb:b2:3f:2b:fd:cf:24:b5:e1:74:b4:
9f:78:93:8c:3a:59:c2:be:db:3d:e4:d2:82:0e:ec:
92:d3:17:e9:f3:1e:6b:45:3c:e4:9f:65:bf:95:dd:
1c:30:9e:19:61:f6:78:68:a7:f2:85:f7:3e:fe:a0:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8C:DB:97:77:A3:6A:DB:E3:4F:11:8F:7C:2A:4B:39:6B:47:E5:1F
X509v3 Authority Key Identifier:
keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/Yozbl3ejatvjTxGPfCpLOWtH5R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.93.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:4f:fa:d6:5a:1f:e2:6b:f1:b9:b6:53:c9:58:94:1d:a1:52:
2b:c5:e3:cf:3e:71:e9:4a:22:7a:51:14:2c:84:7e:07:b7:85:
88:3b:60:ac:dd:27:7a:1b:22:ae:65:ab:91:a6:10:c5:7a:0f:
da:03:5e:f5:4d:d3:bd:b9:e2:ce:da:f1:ea:62:29:fa:ea:b5:
4e:92:f3:2b:2b:a0:7c:3c:51:e0:7b:8a:cd:4e:88:90:da:f5:
0b:dd:1e:9f:ff:4d:53:8c:46:8b:e0:82:2e:c2:ef:bd:b8:91:
8c:5b:c3:97:59:2d:47:2b:6d:8b:01:31:55:4c:1a:d2:97:84:
24:44:86:c3:1b:65:c3:c7:d3:18:42:41:af:8f:d1:88:e8:ec:
f4:f0:01:f8:13:56:19:4c:76:53:b6:eb:fb:f3:1b:3a:3b:c8:
fb:21:52:fc:f9:e4:2a:e1:7d:01:a6:bf:88:f9:c5:b8:d5:0d:
ce:00:f6:2d:ea:5d:92:4d:a2:d1:20:f7:95:2d:f0:76:4c:a7:
56:d3:ba:3c:ea:0f:00:da:4f:8f:74:0d:3d:5c:e4:3e:71:4e:
0b:9f:ca:91:76:6e:28:e1:7b:a6:e7:0c:7a:61:50:50:28:ca:
2d:2c:f3:0c:8d:44:69:9a:04:e9:22:fc:89:4d:8c:f8:b0:9f:
4f:6b:3e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org