Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/y_4CyA6mTPFalK1MtfwiYEGFKiI.roa
File: y_4CyA6mTPFalK1MtfwiYEGFKiI.roa (raw, json)
Hash identifier: HEwbNnpJFlpsgPofqKEifQca3BcIykXLgTYhurJ+Ikw=
Subject key identifier: CB:FE:02:C8:0E:A6:4C:F1:5A:94:AD:4C:B5:FC:22:60:41:85:2A:22
Certificate issuer: /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial: 018A277DA51FE851E77B0F68D9AC00174252
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/y_4CyA6mTPFalK1MtfwiYEGFKiI.roa
Signing time: Thu 24 Aug 2023 12:21:00 +0000
ROA not before: Thu 24 Aug 2023 12:21:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30870
IP address blocks: 193.27.86.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:7d:a5:1f:e8:51:e7:7b:0f:68:d9:ac:00:17:42:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Validity
Not Before: Aug 24 12:21:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbfe02c80ea64cf15a94ad4cb5fc226041852a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5d:70:73:e5:ab:c7:56:d9:44:c8:8f:2d:94:
0d:9c:c8:58:68:74:04:1a:75:89:87:35:74:04:6d:
22:b7:36:4d:7e:0d:c7:24:29:d8:64:7b:5a:9d:20:
dd:aa:3f:0d:29:57:71:94:d0:48:57:03:75:ee:7a:
7d:ff:7d:36:7a:40:4d:ea:a4:48:b3:d4:42:9d:42:
ab:e6:54:82:14:fd:a2:42:99:cc:87:3d:94:ad:fe:
47:cd:77:7e:ee:de:47:bf:63:10:e7:04:0c:b0:bc:
2e:64:28:7a:6f:ba:a4:83:07:85:d6:d4:4a:11:29:
4e:93:b2:0e:48:0d:d4:a8:a8:2b:e2:4b:f3:f9:1a:
75:d7:ce:eb:12:a3:7c:d8:3c:bc:39:e1:6f:c5:2f:
ac:f0:6a:5b:1d:07:3c:64:d3:eb:0b:a2:8e:f0:cc:
70:11:47:d3:83:3a:e2:7e:fa:54:b6:80:c4:e0:3d:
5f:4f:29:8c:21:98:e7:56:79:87:61:45:f9:2c:1f:
2a:37:1a:2e:89:89:a4:e4:86:c3:fb:5b:f6:58:dd:
46:ba:6d:2a:a2:ea:b3:6a:ac:b3:58:0c:8f:88:b0:
f8:1a:63:bd:c1:66:86:17:83:f2:57:c4:e7:93:4e:
04:99:2e:17:34:50:76:93:f1:c7:9c:f1:5c:00:1e:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FE:02:C8:0E:A6:4C:F1:5A:94:AD:4C:B5:FC:22:60:41:85:2A:22
X509v3 Authority Key Identifier:
keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/y_4CyA6mTPFalK1MtfwiYEGFKiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.86.0/23
Signature Algorithm: sha256WithRSAEncryption
16:7d:90:ec:ee:fb:df:ba:65:ae:0d:af:9b:bf:59:c1:f2:9a:
9b:ad:f3:c5:3c:8d:f1:97:89:2f:db:05:27:25:eb:41:ea:b2:
2e:65:80:e8:9f:d5:f7:12:0d:93:7e:23:40:b0:80:92:7e:67:
0e:90:c1:c7:ca:11:c4:7f:60:70:76:9b:02:a4:9b:d8:62:4c:
f9:5c:dd:c1:1c:40:84:5b:e1:aa:db:86:ab:92:c8:77:a8:fa:
f3:24:af:cd:7a:6c:28:d2:9a:fc:b0:bb:26:47:f9:81:22:2a:
c0:b9:35:40:0a:0f:76:31:b5:83:13:7f:42:2d:7a:cc:b7:20:
2f:85:6b:93:b9:76:af:a6:a3:63:21:d7:24:31:64:38:4c:83:
39:3f:0c:7e:7d:95:6d:4f:5e:c8:24:0d:95:a5:f4:58:ba:8d:
8c:0a:7e:1e:1b:5e:af:01:2d:1c:d0:b4:a1:8b:80:4b:a8:39:
2d:5e:6f:ed:ef:12:a9:be:5a:9c:77:81:ca:1d:41:72:ab:f2:
ff:93:ba:ce:6c:bd:ac:24:8c:20:79:d0:9c:99:fc:82:00:de:
56:4b:c1:3b:3f:23:52:78:91:df:b5:76:cc:d6:b0:f3:00:6c:
76:d6:d1:4c:b9:6a:2a:69:cf:05:1e:91:1f:1e:95:dd:b0:06:
a2:7e:93:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:27 2024 by rpki-client on console-ams.rpki-client.org