Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/_yV_L1jcgGRBIo6dRcnKLCAFucs.roa
File: _yV_L1jcgGRBIo6dRcnKLCAFucs.roa (raw, json)
Hash identifier: B+I/O544YbOwB5eVI6UU0TccJZI5y/so3Dj0gi25bQc=
Subject key identifier: FF:25:7F:2F:58:DC:80:64:41:22:8E:9D:45:C9:CA:2C:20:05:B9:CB
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 018573F1BC92EE3FDD11E0562B016DB52F97
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/_yV_L1jcgGRBIo6dRcnKLCAFucs.roa
Signing time: Mon 02 Jan 2023 19:25:00 +0000
ROA not before: Mon 02 Jan 2023 19:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201921
IP address blocks: 194.33.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:bc:92:ee:3f:dd:11:e0:56:2b:01:6d:b5:2f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: Jan 2 19:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff257f2f58dc806441228e9d45c9ca2c2005b9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d9:1e:6b:ca:85:32:c5:60:da:5e:85:fb:11:
02:9d:cc:78:75:97:e4:c5:13:3b:9a:a0:06:6f:4d:
24:6c:79:9a:14:fd:6b:61:25:95:a7:30:86:f3:eb:
37:24:e1:bb:76:85:93:ec:2b:38:86:a7:e6:0f:2d:
8c:ca:a6:f4:91:60:18:a5:d2:50:7f:0b:28:5c:ba:
4d:91:9b:3b:07:69:6d:44:4f:dd:f6:5f:e0:d8:68:
97:4b:28:28:f5:b7:85:dd:f5:a3:ef:50:da:34:5a:
77:88:9e:b6:2a:7b:83:ee:d7:a0:59:de:2e:0d:18:
1b:4e:2b:1f:81:78:4a:03:42:83:94:1a:99:c8:d2:
ca:d0:40:23:8e:8b:cb:f0:d0:b5:cb:06:aa:ae:cf:
1a:11:41:df:80:2f:d3:23:37:bf:04:a9:1c:04:ba:
f7:bb:2b:c4:a8:05:1d:d7:bf:b8:0d:2a:7e:c8:81:
54:20:0a:fa:2a:aa:6d:b9:86:25:4b:64:c2:f9:46:
38:5f:a2:84:ec:9c:92:c1:1a:da:7f:52:c9:bb:0a:
b3:6d:56:cd:0c:49:29:ab:80:f1:46:41:2f:b6:9e:
04:48:73:f2:4f:32:d0:9d:29:74:77:62:27:5b:88:
21:eb:63:3c:60:d8:52:24:2e:4e:04:1a:80:b4:29:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:25:7F:2F:58:DC:80:64:41:22:8E:9D:45:C9:CA:2C:20:05:B9:CB
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/_yV_L1jcgGRBIo6dRcnKLCAFucs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e7:72:cc:c4:ce:0b:4a:21:3a:92:8e:c8:62:93:46:a8:a8:
b8:99:68:f8:94:c1:ee:21:f9:b7:4a:5c:5f:cc:7d:06:67:c9:
73:97:c8:a5:2a:79:e4:29:e1:60:44:dd:3e:6b:56:ac:b5:6e:
fd:59:54:45:ed:c1:53:23:a7:08:80:bc:c3:ce:67:c6:ee:6f:
e8:32:a4:cf:17:4c:d8:00:42:76:45:cf:a3:58:c7:67:c8:84:
39:f8:20:01:4f:00:b7:02:53:c0:12:54:31:9d:fa:98:49:cf:
24:2c:6c:9b:4c:38:5c:d5:3a:3c:43:51:68:8e:18:d7:b1:6e:
ae:73:97:63:74:09:bc:65:92:e2:29:5d:29:e3:9b:ea:5a:6c:
81:89:5d:9f:e7:8e:81:be:b4:7f:c2:3d:36:d5:6c:fb:41:27:
d4:6c:b9:5c:8f:49:b0:7d:28:11:e9:56:94:d6:56:7b:0d:05:
29:e0:58:49:bc:93:70:14:4c:d1:4a:75:6b:f6:ea:c4:04:1f:
6b:1d:64:80:2e:c0:f5:3b:a9:b0:7a:3d:1f:1d:46:fe:06:c6:
03:cf:6f:64:36:59:dc:db:28:5a:5d:e7:a8:07:a6:05:c0:ab:
11:53:86:17:fb:32:2d:a2:6f:6c:ba:3c:cb:31:36:2e:4e:e7:
9a:6b:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-fra.rpki-client.org