Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/YX047bpuTaoHG7QuCI_TpeVyTDw.roa
File: YX047bpuTaoHG7QuCI_TpeVyTDw.roa (raw, json)
Hash identifier: ff7ybV7Ii9mjK2jmmgHm1dFYtqr2XzbKOO4c+20A55M=
Subject key identifier: 61:7D:38:ED:BA:6E:4D:AA:07:1B:B4:2E:08:8F:D3:A5:E5:72:4C:3C
Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial: 01856F14E5E0CD583E4919472AAA40234F2E
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/YX047bpuTaoHG7QuCI_TpeVyTDw.roa
Signing time: Sun 01 Jan 2023 20:45:18 +0000
ROA not before: Sun 01 Jan 2023 20:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41540
IP address blocks: 128.0.170.0/24 maxlen: 32
31.172.143.0/24 maxlen: 32
91.231.127.0/24 maxlen: 32
92.60.190.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e5:e0:cd:58:3e:49:19:47:2a:aa:40:23:4f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Validity
Not Before: Jan 1 20:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=617d38edba6e4daa071bb42e088fd3a5e5724c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:97:c7:a0:bb:07:16:24:1a:da:a1:3e:5d:
14:7c:06:eb:10:1a:86:e0:fb:26:66:f8:65:da:18:
9e:84:31:ac:cc:4b:b3:83:29:f2:b9:77:49:c4:54:
38:cf:7c:ef:e2:de:a2:13:27:ce:ae:5b:d6:4f:ba:
8e:42:72:63:bb:23:50:d6:d5:5a:42:b5:4e:8c:22:
f6:65:7a:e4:0d:7f:be:ac:7b:d3:ab:57:86:cc:8f:
c7:66:c2:51:25:4d:58:f5:b5:80:3b:ac:c7:62:65:
ee:1a:90:ce:88:ef:9c:23:fd:c3:97:b3:0f:c1:5d:
56:90:f0:39:00:0f:ac:bd:cd:46:3e:bb:21:fb:f0:
1d:8a:04:49:de:5e:41:2d:6d:4b:e2:6d:0d:08:bc:
8b:8a:b2:8e:46:86:27:88:d8:37:47:8f:19:6c:b2:
3e:d8:77:ad:25:6e:10:2c:88:71:cf:09:8c:12:c5:
1d:d3:6c:23:ab:f8:11:38:4b:a0:28:69:18:6a:3a:
d6:e1:65:cc:6d:12:4b:67:94:77:bd:a7:a9:b0:0f:
46:7d:4c:c3:8c:0c:82:47:a8:72:16:9c:2b:8d:0e:
71:29:fa:6d:d7:50:22:dc:aa:03:68:08:b7:19:2f:
c6:0a:03:3a:83:7f:96:f1:3b:ea:c9:2e:85:f5:73:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7D:38:ED:BA:6E:4D:AA:07:1B:B4:2E:08:8F:D3:A5:E5:72:4C:3C
X509v3 Authority Key Identifier:
keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/YX047bpuTaoHG7QuCI_TpeVyTDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.143.0/24
91.231.127.0/24
92.60.190.0/23
128.0.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ab:fb:30:32:4f:13:8b:c6:19:f6:52:d3:3b:2d:13:f1:ac:
cc:3a:c6:06:f8:1a:60:f1:d5:69:15:f2:18:6e:1c:63:61:a7:
c2:8f:6e:26:1e:89:64:36:ef:d0:2b:60:9c:79:41:8e:b8:38:
59:09:a4:95:14:67:01:03:88:1c:54:0d:44:41:4d:f5:d2:d7:
cd:ce:46:28:23:cd:38:25:0a:7d:c2:d8:0d:22:84:ff:54:47:
05:e7:51:10:e5:be:04:d6:e8:26:1d:cf:2b:92:14:91:23:64:
24:cc:fe:61:fe:dd:0e:36:4d:8b:67:9e:0c:bf:c0:ac:d0:c5:
1c:cd:fe:4b:3a:64:bf:b9:2c:17:b2:1c:a1:56:72:9b:e7:01:
9c:a9:1e:55:79:fd:96:42:28:2b:4b:4f:74:80:57:c2:f6:3d:
d5:bd:9b:77:ff:e5:90:a4:27:95:75:d3:bd:e1:cd:c1:d9:8a:
5d:56:0d:18:e5:5a:09:9e:93:6f:c5:2d:76:37:08:62:b8:ae:
a0:97:15:5a:63:44:6e:22:5c:65:85:28:b8:f0:54:2b:e9:0b:
73:a3:79:dd:fd:f8:7f:d9:28:1d:95:ac:f1:54:06:62:df:fc:
90:44:9e:71:1e:a5:a3:04:46:aa:26:13:c2:ad:bf:08:7e:40:
e4:58:60:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:01 2023 by rpki-client on console-fra.rpki-client.org