Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/Yt4OCp0mgm1GyRU0cdCvXgHTm8Q.roa
File: Yt4OCp0mgm1GyRU0cdCvXgHTm8Q.roa (raw, json)
Hash identifier: 6JtaPPJraKt8WN+pvyE50R5cEqE/CEa1vvq6j2oGv5Y=
Subject key identifier: 62:DE:0E:0A:9D:26:82:6D:46:C9:15:34:71:D0:AF:5E:01:D3:9B:C4
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 01856D8AF2C3621F67D471DD25E338E7FA8C
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/Yt4OCp0mgm1GyRU0cdCvXgHTm8Q.roa
Signing time: Sun 01 Jan 2023 13:35:00 +0000
ROA not before: Sun 01 Jan 2023 13:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 193.35.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:f2:c3:62:1f:67:d4:71:dd:25:e3:38:e7:fa:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Jan 1 13:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62de0e0a9d26826d46c9153471d0af5e01d39bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:0d:11:c7:97:4d:87:5b:aa:f4:79:3d:b4:
b5:06:20:af:ad:3b:20:88:83:c9:60:c3:fd:2b:5b:
0f:ca:ac:ed:98:32:df:de:32:d4:b2:b1:af:98:cd:
03:74:7b:4d:e1:15:c0:45:38:2c:31:c9:06:49:63:
18:25:47:45:1d:ed:c1:a6:77:ab:ab:36:c0:67:18:
5d:1a:c9:8c:99:73:37:f6:91:c7:85:f5:68:73:3a:
ed:f1:b4:ea:b5:4a:9d:8e:5e:0b:cd:c9:e1:a5:8f:
4b:35:8b:b7:ac:22:9b:e7:ac:30:af:56:d4:af:50:
46:56:62:31:a5:50:76:9b:aa:5b:0d:31:e3:8e:9e:
8d:de:66:c1:4e:76:5e:af:d7:cc:3e:e0:cb:88:7e:
7d:b1:3c:00:25:2e:04:cc:56:0a:f0:3b:8e:65:fe:
6b:89:f9:e6:db:69:6d:c5:cc:68:b9:c5:9c:89:e2:
8a:c2:fd:16:2f:cd:b5:6e:5a:af:f2:c2:70:ad:36:
8b:e6:c7:e2:47:82:c5:dd:5c:50:64:61:30:ba:86:
1f:d9:b3:4a:8b:db:e9:35:7d:64:a1:63:67:60:a9:
52:0b:f9:38:e8:c2:c9:9e:30:33:4e:97:54:0a:9b:
ed:2b:76:e0:17:26:d1:3a:d1:29:63:73:26:1c:fc:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DE:0E:0A:9D:26:82:6D:46:C9:15:34:71:D0:AF:5E:01:D3:9B:C4
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/Yt4OCp0mgm1GyRU0cdCvXgHTm8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.200.0/22
Signature Algorithm: sha256WithRSAEncryption
01:45:29:a6:ec:ed:75:5f:be:32:c3:6d:a9:62:f2:af:63:39:
8d:6a:06:ee:9e:58:b0:7e:31:8a:45:87:8d:b3:7d:f7:72:10:
83:41:f2:a8:1e:ac:d6:13:7b:57:f1:8c:18:cc:e9:56:32:e2:
1f:4b:e9:e9:d0:94:64:50:03:96:fd:eb:c4:1a:c6:bf:ac:15:
ad:bb:f6:d2:d3:b3:26:9f:e9:c5:8d:dd:4e:8b:a5:6c:e7:8c:
0f:c9:5a:4f:f9:54:d7:f2:aa:df:53:30:46:5b:dc:31:d1:2a:
4f:62:03:8b:0e:58:e4:d3:dd:0a:fb:82:4d:bd:3b:5c:ec:ac:
b0:27:4b:71:41:bd:e3:e8:3a:5b:f1:b8:a1:0c:ae:c1:28:bb:
0b:09:8a:27:a5:20:35:8d:e3:83:92:32:ad:d3:c4:13:1d:86:
69:e9:60:13:f3:28:5a:8e:91:df:6d:20:d5:dd:7d:d0:92:9d:
e4:d9:b4:c7:12:98:11:07:38:e5:aa:f0:b7:55:20:b5:71:45:
56:95:48:d9:0c:05:4e:1c:84:2d:33:68:a5:2d:86:34:fd:95:
99:16:33:60:9a:38:a4:31:cf:ce:95:56:34:95:35:f1:fb:3a:
44:d7:00:70:a5:c1:5d:16:4d:a4:b4:10:50:bd:e5:65:8e:4d:
28:d5:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:42 2024 by rpki-client on console-ams.rpki-client.org