Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/yAGaDnTfwDEqBHQrIcseCmibNV4.roa
File: yAGaDnTfwDEqBHQrIcseCmibNV4.roa (raw, json)
Hash identifier: BTzDlTMTqqZzY5NOorGEaVVCB4i2Hm55Af6dQCXcFTA=
Subject key identifier: C8:01:9A:0E:74:DF:C0:31:2A:04:74:2B:21:CB:1E:0A:68:9B:35:5E
Certificate issuer: /CN=48f68aa2e755aa0ac69a70fe8efebea4c2335611
Certificate serial: 01856CC14FE7FB1E17EF3FAEE2893CA0F3D2
Authority key identifier: 48:F6:8A:A2:E7:55:AA:0A:C6:9A:70:FE:8E:FE:BE:A4:C2:33:56:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/yAGaDnTfwDEqBHQrIcseCmibNV4.roa
Signing time: Sun 01 Jan 2023 09:54:46 +0000
ROA not before: Sun 01 Jan 2023 09:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41103
IP address blocks: 185.91.100.0/22 maxlen: 24
195.95.187.0/24 maxlen: 24
2a03:8920::/32 maxlen: 48
2001:67c:15f4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:4f:e7:fb:1e:17:ef:3f:ae:e2:89:3c:a0:f3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f68aa2e755aa0ac69a70fe8efebea4c2335611
Validity
Not Before: Jan 1 09:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8019a0e74dfc0312a04742b21cb1e0a689b355e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:8c:3d:d7:c2:4f:60:ce:8c:2c:32:2e:56:
25:15:5b:e3:1f:02:85:12:8a:e5:e8:48:a0:b3:e4:
12:0b:b8:28:a0:54:93:42:13:24:ff:97:51:1b:e7:
a3:f7:d0:37:54:79:80:56:d4:12:0b:2e:b5:24:33:
eb:06:ad:ed:ed:25:db:b8:a6:14:af:df:ae:a3:b2:
78:43:63:d4:25:d5:4f:4e:35:6f:19:b5:ca:b3:b5:
a3:f1:e9:ca:66:88:f7:cf:c5:f0:c2:d0:bf:30:b1:
f1:74:8d:94:37:48:ac:41:e9:3d:31:cb:44:3c:ea:
bf:b6:9b:fb:89:ac:e6:63:a3:4c:05:de:0e:a8:27:
f6:da:13:46:0a:7d:f9:b1:94:fc:6a:06:f9:62:3e:
e9:62:03:f8:c7:4e:9b:ff:68:9e:da:be:16:a8:71:
3a:22:55:8b:ae:09:db:79:64:31:bd:16:63:2c:b4:
e9:db:f3:62:87:06:8a:f7:4a:47:79:74:b0:f3:a5:
cb:8f:26:02:8c:c9:c5:18:0b:cb:71:79:31:8b:6c:
4f:85:0e:e7:3a:ad:f8:40:a2:04:ce:2e:ce:2b:0e:
e1:ef:83:d4:77:44:e0:4c:e5:7c:a4:7b:0a:26:d6:
4a:f3:9d:e6:50:c6:8d:fd:92:43:a3:21:a7:e1:85:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:01:9A:0E:74:DF:C0:31:2A:04:74:2B:21:CB:1E:0A:68:9B:35:5E
X509v3 Authority Key Identifier:
keyid:48:F6:8A:A2:E7:55:AA:0A:C6:9A:70:FE:8E:FE:BE:A4:C2:33:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/yAGaDnTfwDEqBHQrIcseCmibNV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.100.0/22
195.95.187.0/24
IPv6:
2001:67c:15f4::/48
2a03:8920::/32
Signature Algorithm: sha256WithRSAEncryption
73:95:4f:c8:a6:05:8b:f6:e2:b3:3e:f1:19:14:28:54:91:cb:
cf:3e:94:04:f7:2a:8c:41:27:7e:47:f9:ad:c4:40:10:a8:f9:
5e:19:41:03:d7:f9:bd:41:a9:70:d0:16:ac:79:d5:d4:16:16:
5b:c3:66:49:bd:39:49:cd:a6:3a:12:04:c8:3d:e2:32:02:db:
4d:3e:f3:01:e6:b5:71:44:58:a7:0b:15:6f:4f:3c:25:a0:bf:
dd:a4:dd:d8:8b:d6:5b:97:ce:f0:fe:5d:31:e6:92:70:55:5d:
b1:1d:4a:47:95:90:8c:a7:53:d1:2c:10:10:e9:95:cd:00:91:
d3:95:7f:a1:2d:80:90:ad:a8:83:63:15:ed:9c:0c:22:6b:73:
60:9e:54:c1:79:63:a2:a6:62:b5:36:6f:dd:b1:05:ff:aa:13:
35:11:54:f3:af:2f:e5:8d:d9:36:8f:62:4b:bc:46:0d:e0:7e:
ab:cc:6a:d4:5c:be:f7:a9:d1:23:07:8c:58:43:aa:c5:1e:0a:
bd:84:0d:d8:a8:08:07:bb:53:5e:23:f3:ec:87:9e:52:36:93:
50:9c:a6:64:05:a9:9f:e6:37:b9:25:d1:5a:39:b3:87:d7:ca:
fb:61:dc:4e:e2:71:3a:30:e3:24:28:39:ef:8e:a2:81:27:fe:
72:bd:70:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:48 2024 by rpki-client on console-ams.rpki-client.org