Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/ywZcG-lT9WqA1dfLFDDIl3bReoA.roa
File: ywZcG-lT9WqA1dfLFDDIl3bReoA.roa (raw, json)
Hash identifier: EQTPREP/DoDMa0UYzMcBFEHsayVCbF1MJt93vQUznSg=
Subject key identifier: CB:06:5C:1B:E9:53:F5:6A:80:D5:D7:CB:14:30:C8:97:76:D1:7A:80
Certificate issuer: /CN=dfeb9bcbca6ad5f8d899b38909eefb759e3aa60d
Certificate serial: 01857230E6CFA46E1AF71C7CFCBEA28EDE75
Authority key identifier: DF:EB:9B:CB:CA:6A:D5:F8:D8:99:B3:89:09:EE:FB:75:9E:3A:A6:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-uby8pq1fjYmbOJCe77dZ46pg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/ywZcG-lT9WqA1dfLFDDIl3bReoA.roa
Signing time: Mon 02 Jan 2023 11:14:45 +0000
ROA not before: Mon 02 Jan 2023 11:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197901
IP address blocks: 193.150.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:e6:cf:a4:6e:1a:f7:1c:7c:fc:be:a2:8e:de:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfeb9bcbca6ad5f8d899b38909eefb759e3aa60d
Validity
Not Before: Jan 2 11:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb065c1be953f56a80d5d7cb1430c89776d17a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:7c:5c:2f:3b:6f:e9:6a:74:74:7a:b3:84:
dc:17:fb:51:3e:3f:ea:2b:15:13:71:9a:24:59:8c:
4f:ed:b3:dd:04:2a:1c:23:66:b6:fa:fc:cc:23:f5:
f5:54:69:4c:f8:a2:38:6b:21:c1:9e:c3:86:26:9f:
21:db:86:a9:60:8e:16:cf:1f:9f:9b:11:40:73:db:
44:55:a0:d4:ca:e8:6a:ec:66:69:8c:e2:ff:13:1e:
5e:a2:f6:02:d5:aa:4c:b1:fc:d4:0a:80:a2:cb:28:
74:08:c0:dc:1e:a4:bc:14:71:ac:78:fc:00:9c:8b:
d6:4b:d2:58:ed:51:6e:58:2c:87:d2:3e:0e:ca:91:
98:42:1a:37:23:7b:f5:a0:31:ad:2c:f7:f9:95:61:
07:83:ef:58:66:fc:ff:16:2e:cd:98:c4:1d:8b:c0:
2e:4c:9f:94:16:9a:94:82:e3:c9:c5:25:17:29:d9:
03:06:d4:eb:35:00:4e:81:62:0f:06:bb:bb:a9:33:
f0:3a:6e:d6:ec:44:36:46:7f:e6:90:34:2d:ad:07:
f6:23:cd:c5:f0:56:41:f5:f0:80:7d:49:dd:56:ec:
0a:74:a9:f6:b8:a2:f0:75:95:44:34:24:db:24:05:
2c:27:40:2d:1c:23:1c:e2:4e:31:f2:de:d4:7b:ac:
3b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:06:5C:1B:E9:53:F5:6A:80:D5:D7:CB:14:30:C8:97:76:D1:7A:80
X509v3 Authority Key Identifier:
keyid:DF:EB:9B:CB:CA:6A:D5:F8:D8:99:B3:89:09:EE:FB:75:9E:3A:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-uby8pq1fjYmbOJCe77dZ46pg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/ywZcG-lT9WqA1dfLFDDIl3bReoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0e:44:6d:c6:a2:88:83:d6:d0:bb:a1:05:11:09:9b:6f:d9:
fa:fb:15:1c:fe:45:c3:38:20:7a:dc:95:76:5e:d9:57:c8:b5:
70:ca:a2:a8:29:16:d5:56:a6:4e:f7:4a:6b:bf:bb:40:46:c0:
cf:09:d6:20:d4:38:ee:a2:b0:67:a5:f8:63:47:ea:bb:d9:d6:
a8:58:f6:5d:30:94:39:e1:1d:81:73:d7:cc:b8:fa:07:94:12:
de:d5:2d:c4:b3:60:f1:8c:09:e2:6d:40:59:a6:46:07:75:57:
b5:e4:9b:cb:04:fc:78:fd:59:76:69:00:e0:48:90:42:fa:bc:
c5:8b:3d:20:ab:03:5b:90:d0:48:01:23:9c:0d:a8:96:ab:2d:
f7:a0:4f:f9:20:98:75:36:92:e3:ef:a2:15:2f:63:7b:45:ad:
56:48:e9:ab:26:a7:32:aa:ef:50:d3:65:fa:2c:34:e6:25:b0:
79:28:05:dc:f5:26:10:7b:2c:9d:bc:a1:f3:2d:cd:b2:14:ac:
43:7b:ff:0b:4f:11:86:ce:a4:d9:32:b2:0e:58:9f:d4:a3:f8:
da:44:45:95:7c:d8:fa:5f:e2:d9:85:b8:33:d4:b4:e0:b6:68:
f3:cf:bd:32:b2:8e:df:18:76:58:b8:ef:a2:a3:9e:39:3c:7f:
f9:e3:28:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:44 2024 by rpki-client on console-ams.rpki-client.org