Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/ywwpWrz61iHpC_T4w0DaeG23MMU.roa
File: ywwpWrz61iHpC_T4w0DaeG23MMU.roa (raw, json)
Hash identifier: UZ5rPpYkUBxmWWp1Nd63pXHw6GZwnX6OHV/Ymk/wKjU=
Subject key identifier: CB:0C:29:5A:BC:FA:D6:21:E9:0B:F4:F8:C3:40:DA:78:6D:B7:30:C5
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 01857102FE569ED75F69B9384701742AD27E
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/ywwpWrz61iHpC_T4w0DaeG23MMU.roa
Signing time: Mon 02 Jan 2023 05:44:59 +0000
ROA not before: Mon 02 Jan 2023 05:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1764
IP address blocks: 193.201.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:fe:56:9e:d7:5f:69:b9:38:47:01:74:2a:d2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Jan 2 05:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb0c295abcfad621e90bf4f8c340da786db730c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1f:34:ee:0b:bb:9b:7a:c6:ad:67:83:c9:f7:
04:12:3f:0a:7f:9d:a1:ae:08:24:81:68:64:32:29:
93:07:bf:36:a2:a4:53:12:79:e2:5e:a7:93:a3:c0:
1c:ec:b5:b8:8a:9f:b3:14:b9:f4:1f:1b:06:4c:0f:
a2:33:17:33:65:c0:22:1d:69:2d:57:ef:04:8b:ad:
6a:09:1e:8e:20:21:c3:df:9e:13:ee:da:66:ec:06:
69:0a:5a:08:a3:90:07:4e:f1:32:97:bc:ae:f3:f3:
fa:01:4e:8a:cb:b6:ca:79:84:3a:91:21:a5:f7:f1:
8e:cb:56:c9:2b:12:cd:22:f8:51:8f:3d:4d:71:2a:
49:51:cb:ad:22:a3:29:df:fa:ac:85:8e:85:2a:51:
6e:a9:eb:dd:f5:8d:44:01:62:e2:58:1a:19:97:75:
42:7a:c1:f2:a5:08:1d:54:16:ce:fe:55:38:f3:6b:
a5:0c:01:17:7e:14:76:8a:e6:ab:6a:09:37:92:5e:
57:41:6b:b8:ab:f9:dd:e9:d0:0f:5f:89:f9:8c:32:
4f:b5:f6:01:f3:33:a4:80:f0:88:91:06:e8:01:b3:
64:78:e2:0e:f9:a2:02:cb:70:08:d9:a5:d8:48:b6:
93:3e:e9:c0:94:2f:13:36:d3:8c:ce:40:0a:d8:fa:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0C:29:5A:BC:FA:D6:21:E9:0B:F4:F8:C3:40:DA:78:6D:B7:30:C5
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/ywwpWrz61iHpC_T4w0DaeG23MMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.41.0/24
Signature Algorithm: sha256WithRSAEncryption
01:cd:84:1d:b8:dd:04:13:07:ad:93:1c:ca:44:56:ad:db:9e:
d5:c9:99:59:57:77:d4:9b:8b:72:53:7d:8b:ef:f6:e8:23:cc:
cb:19:44:fa:07:f4:52:cd:b4:8e:f2:b1:e6:b9:4a:5f:a9:84:
7e:01:9f:db:9f:48:ff:5b:1a:01:b8:a5:d4:0d:ed:2a:20:f2:
32:18:66:8c:d8:8b:0a:f8:d8:e2:30:7e:ca:1e:98:75:65:44:
67:3a:b6:41:df:fe:d3:b7:ed:05:bf:e1:a0:6f:f8:ce:64:a2:
71:02:e7:f1:5d:87:b5:c4:42:fd:0c:24:d2:d6:e5:b0:7a:11:
3b:98:61:c7:85:52:ef:eb:60:b9:13:58:57:37:74:7c:48:ee:
e1:db:cf:c6:a9:78:4d:34:dd:1e:53:63:a3:2d:4b:51:26:3e:
df:a1:6d:c5:0e:02:ee:df:fd:ba:fb:80:49:d1:6d:a8:5d:e3:
68:7f:53:36:30:74:13:25:e7:c9:fd:46:a5:8f:a3:a3:88:c3:
2a:81:de:b9:3a:5b:91:8d:cc:d2:d7:8b:cb:3c:31:af:c4:95:
be:7e:4d:9a:34:56:c3:72:2d:d9:69:fd:7f:62:1f:6f:d6:e5:
ae:7e:4a:ba:d3:36:b9:50:3f:81:90:53:74:7b:71:13:32:d0:
fe:b5:67:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:34 2024 by rpki-client on console-ams.rpki-client.org