Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/yZDLlv6YqpbW288bAQ6UiGEuSUU.roa
File: yZDLlv6YqpbW288bAQ6UiGEuSUU.roa (raw, json)
Hash identifier: 4FaYWbnvW8HYsxhRSRnuYKGW2y081qH8phAThbx4imo=
Subject key identifier: C9:90:CB:96:FE:98:AA:96:D6:DB:CF:1B:01:0E:94:88:61:2E:49:45
Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial: 01856B80FA9F7927BD229ACE043B22B5FF1D
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/yZDLlv6YqpbW288bAQ6UiGEuSUU.roa
Signing time: Sun 01 Jan 2023 04:04:52 +0000
ROA not before: Sun 01 Jan 2023 04:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203926
IP address blocks: 159.151.128.0/18 maxlen: 18
192.109.143.0/24 maxlen: 24
2a07:8144::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:80:fa:9f:79:27:bd:22:9a:ce:04:3b:22:b5:ff:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Validity
Not Before: Jan 1 04:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c990cb96fe98aa96d6dbcf1b010e9488612e4945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:72:ce:a7:d3:01:a3:e2:52:27:bc:6f:f3:
19:5a:27:32:1b:a5:8e:31:9f:78:12:0a:c8:56:4a:
b9:17:b5:01:1f:88:b7:cc:9d:d9:26:cd:a5:12:21:
5c:f6:80:4f:c8:0a:05:67:4e:e0:1d:7f:0b:fa:7b:
ed:fb:5d:07:d7:9f:d3:71:be:af:f3:35:42:97:8f:
22:74:f5:42:41:c8:3b:3f:3b:8f:81:ff:69:08:aa:
d5:10:8f:a8:b8:2f:27:43:88:e8:ae:17:79:9b:88:
3d:db:87:57:49:82:03:14:a9:2b:ee:e2:71:b6:95:
f7:2b:96:70:22:d2:ca:f0:1d:51:8d:25:10:aa:62:
93:df:b4:08:5e:0c:57:90:f0:cc:cd:1d:f9:0f:b4:
00:dd:de:d1:90:6b:cf:a1:88:53:ce:63:e9:7c:3b:
05:aa:b4:e8:69:f0:c2:59:88:8d:a8:cf:24:8b:39:
9d:91:0c:10:77:db:1b:2c:be:6e:6a:39:c4:d5:03:
5f:37:2b:63:4f:15:04:8a:94:1a:09:1c:97:ed:92:
c1:66:b1:d9:4e:14:46:06:f8:db:80:ec:7c:28:64:
b1:20:1c:3b:b7:84:6a:82:f7:ad:89:2b:4a:42:35:
fc:30:da:fd:d1:0a:65:5e:5d:b3:d9:d6:b6:c6:08:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:90:CB:96:FE:98:AA:96:D6:DB:CF:1B:01:0E:94:88:61:2E:49:45
X509v3 Authority Key Identifier:
keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/yZDLlv6YqpbW288bAQ6UiGEuSUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.151.128.0/18
192.109.143.0/24
IPv6:
2a07:8144::/36
Signature Algorithm: sha256WithRSAEncryption
22:2e:e7:36:b4:9d:58:b6:73:f9:68:17:fe:08:12:b2:2b:e2:
a3:ce:77:51:b6:4f:23:38:3c:e4:33:6d:28:3a:dd:b0:63:57:
74:9e:2a:29:6e:c2:c0:25:f4:bc:8b:31:4e:76:82:49:fe:39:
a7:68:ae:ba:73:05:6c:ab:d5:f7:41:98:00:7f:ac:1c:2a:d6:
26:39:f0:b3:6c:69:2a:e7:66:28:25:c7:c6:39:0f:d3:2e:56:
d7:99:59:82:02:f4:24:07:04:d3:ff:68:4c:99:4d:ac:3a:c7:
56:6e:f7:1f:40:7d:c5:76:cd:b6:d6:42:20:89:c7:20:9f:12:
b6:e4:48:57:b5:73:11:12:aa:f7:9f:43:c2:3e:b2:21:24:ce:
25:63:cd:58:2f:ec:fe:d2:e0:0f:b4:96:08:bc:cf:89:d6:08:
6f:28:34:41:89:4a:25:e9:60:83:cf:7b:70:f4:0f:23:c8:3e:
a0:74:54:85:02:1d:19:34:d6:15:ba:f4:f5:15:0b:11:da:f6:
c2:be:65:8f:2b:68:6b:ef:a0:f8:bd:65:9b:b2:17:af:73:c6:
87:8a:c8:d4:ce:1d:49:4a:0a:ad:c5:df:09:8c:42:21:1d:f5:
b3:90:4d:b2:2e:b8:8f:d1:f4:2c:8d:65:82:61:9e:44:8a:6f:
5f:82:b4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:03 2024 by rpki-client on console-ams.rpki-client.org