Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/YqesFyqN75pjwWkVcy1jie8kv3Y.roa
File: YqesFyqN75pjwWkVcy1jie8kv3Y.roa (raw, json)
Hash identifier: 5ityeVQTBWAdmv8cGeemq8dEYqo+S/Nzv0PE1nc9FbU=
Subject key identifier: 62:A7:AC:17:2A:8D:EF:9A:63:C1:69:15:73:2D:63:89:EF:24:BF:76
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018C4E8C34D05D92EF3970855442F96A5846
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/YqesFyqN75pjwWkVcy1jie8kv3Y.roa
Signing time: Sat 09 Dec 2023 12:27:40 +0000
ROA not before: Sat 09 Dec 2023 12:27:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34636
IP address blocks: 178.239.154.0/24 maxlen: 24
185.124.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4e:8c:34:d0:5d:92:ef:39:70:85:54:42:f9:6a:58:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Dec 9 12:27:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62a7ac172a8def9a63c16915732d6389ef24bf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:d6:62:6d:6b:47:cc:1a:05:6d:b6:2b:39:
43:9a:ec:10:e3:11:48:ab:d0:1c:6a:7e:72:f6:70:
00:5b:3e:4a:34:fc:45:48:42:3e:b4:55:2f:03:c0:
9d:7b:d0:77:32:91:71:0f:60:9d:53:86:b2:88:bf:
00:3d:9b:17:c1:76:be:79:20:5d:f7:93:5f:ad:77:
76:3b:0f:ca:d3:37:72:85:27:fe:8d:5c:db:1b:72:
f5:62:18:1f:7d:84:38:1e:be:f3:2f:7c:44:17:b0:
e3:c0:33:62:3a:cd:40:f3:49:d4:e2:b8:ee:2a:84:
2e:ed:31:bd:a2:ee:9a:1b:1b:cd:14:da:7f:e0:45:
54:f7:df:fb:fb:e6:b3:63:db:69:6c:ee:e9:61:5c:
26:9d:ed:ad:3f:86:a8:0f:4d:2a:a8:62:38:e0:88:
e9:23:7c:1f:86:c9:a6:24:8c:f3:01:96:f5:31:7a:
a9:54:e7:5f:7e:02:89:25:f7:13:2f:26:52:79:86:
42:34:34:df:28:c8:89:de:8c:7b:8e:88:87:e1:6f:
88:f6:d9:4e:cf:66:31:b0:5a:92:59:86:c6:cd:c1:
0b:5e:ef:32:73:10:a6:92:1c:47:ff:13:57:cd:20:
f7:4a:2a:98:bc:8b:73:b1:53:76:56:72:59:1c:72:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A7:AC:17:2A:8D:EF:9A:63:C1:69:15:73:2D:63:89:EF:24:BF:76
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/YqesFyqN75pjwWkVcy1jie8kv3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.154.0/24
185.124.174.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b3:cc:64:a3:b9:01:29:6e:21:90:8b:f5:95:be:33:47:68:
5a:e2:eb:3e:32:8a:65:7f:39:d5:19:1c:ad:f0:a4:6f:a0:86:
a8:c3:b7:40:f6:e2:08:f1:30:c8:f4:d6:f8:19:14:8b:44:a7:
89:b8:fb:92:0d:3a:b0:31:0c:7c:b8:0b:6b:07:81:dd:5f:13:
d6:22:1a:1e:ab:af:39:1b:2b:dc:8f:00:44:4e:f2:8a:78:26:
cd:2e:3a:00:c7:cd:b9:33:aa:7e:95:76:23:c6:f3:4b:6c:35:
9f:a1:05:64:7f:64:7d:54:e4:4a:69:9a:54:46:d0:cc:85:24:
63:c2:81:2c:a7:b7:b4:e5:49:58:bb:76:cc:24:37:56:6c:66:
de:40:bd:79:d7:22:5a:fa:47:84:dc:e3:2f:dd:3a:41:93:b0:
c4:d0:ef:8d:fb:37:d9:f7:ea:d7:f1:6d:11:77:fc:72:01:96:
94:cf:d8:05:d4:a8:bd:27:4c:10:a5:95:27:d7:5c:9a:b8:50:
bf:d4:bc:d2:15:cd:85:53:cb:d8:da:e8:dd:fd:64:d6:e9:46:
54:d4:cc:21:07:fc:14:a6:17:3a:83:77:d3:70:4d:f3:15:1b:
88:69:d5:18:ff:6b:ab:62:3e:5f:e9:8b:81:16:5d:08:4f:f0:
ca:06:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 9 13:37:42 2023 by rpki-client on console-fra.rpki-client.org