Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/YB2pi1ecf2LvzwUc5YQrGksA35U.roa
File: YB2pi1ecf2LvzwUc5YQrGksA35U.roa (raw, json)
Hash identifier: Vs5PMksCmgTox4WtpU0lSyUdF3ryEBvdbScTFQkAFVs=
Subject key identifier: 60:1D:A9:8B:57:9C:7F:62:EF:CF:05:1C:E5:84:2B:1A:4B:00:DF:95
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 018CC6B8C5E7F27C066DA58E1E6859FFAEAB
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/YB2pi1ecf2LvzwUc5YQrGksA35U.roa
Signing time: Mon 01 Jan 2024 20:30:47 +0000
ROA not before: Mon 01 Jan 2024 20:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 202.164.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 12:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:c5:e7:f2:7c:06:6d:a5:8e:1e:68:59:ff:ae:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Jan 1 20:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=601da98b579c7f62efcf051ce5842b1a4b00df95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:71:62:10:10:80:2b:8a:4d:88:3c:74:a6:7c:
24:21:97:6d:3e:9c:d8:0e:29:04:38:33:11:33:99:
bc:1c:22:b1:32:dc:cd:3e:b4:4a:98:32:49:cd:9c:
a2:92:77:6e:b8:5c:60:01:ef:24:44:f5:53:07:8f:
2c:0d:85:8c:2a:2e:81:b4:3d:16:55:de:38:88:49:
29:f3:83:be:cb:51:a6:31:63:ff:5b:c1:f7:27:09:
d9:ba:cb:a3:60:d8:04:0d:69:d7:5d:3d:74:6a:5b:
76:f5:53:39:66:fb:73:b0:44:74:62:4e:f7:14:b2:
6a:fe:07:e7:0d:f1:27:6b:ca:fe:8f:05:c7:f6:9c:
2d:37:8b:01:c5:28:6f:62:3b:f2:51:56:44:50:d5:
cc:23:6b:6a:18:66:ae:c5:2e:28:bc:e0:8b:23:96:
26:a6:8b:08:97:11:ac:ec:0d:f5:4a:85:67:7c:13:
71:7c:5f:3c:09:05:f3:c3:31:59:d0:1d:6d:75:6a:
75:c1:7f:1b:77:ac:18:06:ea:f0:af:72:3c:29:81:
ce:e5:ba:96:e7:7a:4e:db:ab:f6:9a:e6:92:c8:4d:
4a:68:8a:27:4a:94:78:ca:c2:41:6a:5f:e2:ec:6a:
51:c2:13:74:c9:52:fe:15:78:c7:e2:78:c3:da:b5:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1D:A9:8B:57:9C:7F:62:EF:CF:05:1C:E5:84:2B:1A:4B:00:DF:95
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/YB2pi1ecf2LvzwUc5YQrGksA35U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.164.192.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:cb:d5:91:07:e7:d7:cb:42:82:72:4a:37:a2:fe:bd:16:bf:
9a:6f:03:3d:22:62:67:88:56:4f:8a:89:6c:ed:fd:90:69:dd:
1b:19:27:92:1e:ae:89:d5:62:b1:bc:37:a8:19:53:11:86:51:
f2:bf:0a:24:89:cc:d9:4b:e5:94:4d:22:ad:35:ea:f6:11:f4:
8d:7a:7c:11:d9:95:5d:f3:37:a3:08:c3:d1:4a:67:a3:c3:a8:
a4:d5:c6:96:01:23:b9:ab:32:f2:02:71:73:43:25:96:4b:f6:
7a:76:13:ba:85:06:dc:d1:55:29:bf:d6:f3:3c:f3:3e:85:e0:
7a:a1:8b:7b:67:53:05:9e:f8:5a:6d:4a:87:1a:7b:9c:c6:f3:
a1:1d:f1:15:88:1a:dc:65:d0:8b:97:aa:17:af:29:c3:2b:44:
71:20:95:92:ca:08:f6:6f:80:68:2b:da:9d:4c:e3:56:55:5a:
34:2d:65:11:f9:99:de:61:3c:34:73:e5:07:ea:b0:ae:45:e0:
c3:6d:a1:2d:0d:85:c0:58:78:24:91:9e:6b:9a:29:f9:3a:02:
6a:46:e9:f9:8d:b9:f2:b0:28:fb:bb:42:e7:03:04:fe:26:5f:
06:c0:68:5a:37:1a:83:73:cc:e2:e2:d3:95:52:1c:da:11:b3:
34:9a:fe:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:08 2024 by rpki-client on console-fra.rpki-client.org