Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7YzuB8cmTv0JIzNZ72SMAYZGEN8.roa
File: 7YzuB8cmTv0JIzNZ72SMAYZGEN8.roa (raw, json)
Hash identifier: xsafohrjJ2ml4I59uWPvVchDc8qV07F+r0G9HYIgbUQ=
Subject key identifier: ED:8C:EE:07:C7:26:4E:FD:09:23:33:59:EF:64:8C:01:86:46:10:DF
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0188BF2F3C4625B7F9CC7573685BEE3FE424
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7YzuB8cmTv0JIzNZ72SMAYZGEN8.roa
Signing time: Thu 15 Jun 2023 13:12:03 +0000
ROA not before: Thu 15 Jun 2023 13:12:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8985
IP address blocks: 193.232.64.0/24 maxlen: 24
193.232.76.0/24 maxlen: 24
193.232.226.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:2f:3c:46:25:b7:f9:cc:75:73:68:5b:ee:3f:e4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jun 15 13:12:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed8cee07c7264efd09233359ef648c01864610df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:e6:75:fd:80:06:2c:4a:54:a9:c6:dd:43:
cc:f9:c8:dc:8d:a9:a2:a1:6a:a1:63:05:39:77:13:
ff:c1:37:99:3c:aa:29:a4:aa:da:6a:84:da:b0:61:
ce:5c:3b:45:1c:2d:5e:f9:47:15:06:49:da:e2:90:
50:48:04:f1:f4:21:a6:00:52:63:3c:26:9f:1b:05:
1d:19:73:f8:cc:99:a2:ea:5c:c3:97:46:38:cd:d3:
3e:76:cc:84:a5:6c:de:87:4b:bd:a0:64:31:bd:a3:
7c:cf:4d:5b:13:7f:ab:81:ca:ab:93:56:9e:36:79:
06:87:07:c2:0f:2f:59:3c:8c:ac:a9:42:39:52:82:
55:fd:3a:51:42:b6:e6:89:49:06:25:10:e2:91:8b:
1a:96:ca:c3:d4:aa:10:72:e9:a5:db:fc:9c:e5:e3:
08:df:63:99:9d:90:2a:57:74:a6:36:a0:9e:21:e2:
b8:7b:77:70:5f:11:18:b8:5e:a2:97:17:33:18:6c:
5f:e0:47:58:c5:e8:8c:dc:a2:63:be:91:89:64:aa:
c6:3b:35:4a:e4:c6:1f:31:97:55:3c:45:94:fa:47:
3a:8a:7e:82:af:0c:23:77:c2:7c:35:0a:76:ef:d8:
c8:ac:f2:3f:89:f9:33:d2:a8:e9:40:f1:14:7c:b2:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8C:EE:07:C7:26:4E:FD:09:23:33:59:EF:64:8C:01:86:46:10:DF
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7YzuB8cmTv0JIzNZ72SMAYZGEN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.64.0/24
193.232.76.0/24
193.232.226.0/23
Signature Algorithm: sha256WithRSAEncryption
21:43:a5:2d:00:1f:67:98:f9:36:01:e5:68:fb:a3:f5:d8:94:
10:2e:cf:f2:e7:a1:a2:64:0f:8a:4c:31:c6:b5:10:c5:e9:06:
a8:13:0e:cd:04:49:a0:c6:f4:af:54:d8:37:99:bb:fe:68:16:
d6:34:7a:02:33:8a:3d:ca:b2:49:ee:51:3e:10:7a:1e:f5:e6:
f6:d2:6f:c0:19:0e:6d:65:39:48:8c:e9:6e:0e:1c:52:22:48:
8a:dd:86:3a:12:cb:b6:e9:42:5c:93:61:e7:c9:9d:80:e5:1f:
8a:0b:ca:19:9b:4e:f0:88:3c:9d:01:20:b5:dd:30:2e:49:4a:
59:94:e1:5d:ef:24:6d:83:9b:da:a1:ff:51:76:80:83:67:f9:
d3:4f:51:69:8c:8b:b5:ff:de:1b:02:8b:ed:dc:fe:1a:ef:eb:
7a:f9:2f:a0:03:0e:a1:b3:5a:6e:88:41:09:6f:fc:07:cb:79:
ee:90:3d:f1:af:ca:3a:3d:27:7b:5d:62:a4:e0:0d:51:e5:94:
7c:d0:38:c1:11:27:6b:f2:c5:41:7e:c6:35:b7:bb:22:b8:13:
ef:fd:eb:be:0b:7b:9b:a4:21:ba:bd:ba:8f:18:bc:48:20:0c:
a6:45:26:8c:21:c7:c3:c4:8c:44:23:69:62:a8:2b:73:93:ae:
34:ec:1e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:37 2023 by rpki-client on console-ams.rpki-client.org