Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/lAtNt2pDfAEKRQBlHQJgcFSfpbA.roa
File: lAtNt2pDfAEKRQBlHQJgcFSfpbA.roa (raw, json)
Hash identifier: mx/jAHXFSfVmAbm8ZC/kvLz+mZ/UaAJ/gMopM9/qagQ=
Subject key identifier: 94:0B:4D:B7:6A:43:7C:01:0A:45:00:65:1D:02:60:70:54:9F:A5:B0
Certificate issuer: /CN=62272d68fb3895eb229b68f8d4334124b967c70e
Certificate serial: 0185723A1E5BFAA9488C1165C0DDCC70F779
Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/lAtNt2pDfAEKRQBlHQJgcFSfpbA.roa
Signing time: Mon 02 Jan 2023 11:24:49 +0000
ROA not before: Mon 02 Jan 2023 11:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211441
IP address blocks: 193.38.246.0/24 maxlen: 24
2a10:e2c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:1e:5b:fa:a9:48:8c:11:65:c0:dd:cc:70:f7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e
Validity
Not Before: Jan 2 11:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=940b4db76a437c010a4500651d026070549fa5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ff:45:43:fa:37:58:c9:bf:c3:f3:87:98:22:
18:e3:41:fd:f2:41:76:b4:1d:10:01:49:1b:73:15:
e0:73:13:a5:af:f0:16:fd:43:1d:69:67:20:ac:eb:
d4:6f:08:5a:cc:23:48:ea:a2:e0:96:ba:e4:11:ae:
1b:d5:02:f7:4f:01:c6:ab:f7:ab:a9:82:c2:b9:90:
a5:05:d7:29:26:6b:a0:c0:68:28:c8:78:2d:88:8b:
58:37:60:ad:30:94:bd:9a:1d:49:3b:f4:54:cc:5d:
1b:0f:3c:b3:d4:cc:70:de:33:20:19:cd:05:b7:c0:
3a:67:25:bf:b5:ae:ea:27:20:21:76:5e:00:c5:6e:
3f:c6:53:e2:0a:40:d8:b0:99:f8:87:f5:bb:09:12:
c7:f7:44:e2:20:14:b2:cb:2e:27:36:ab:0e:0e:c8:
48:07:70:e0:35:9f:66:ea:08:f6:cd:d5:f5:30:0e:
90:fb:0a:8a:e9:e8:f8:c0:92:0d:3d:3b:99:2b:40:
c7:b4:2e:80:93:71:50:44:a4:20:12:a2:f4:e9:71:
b1:56:f2:96:d9:45:d7:40:ec:1b:b4:ce:72:87:af:
ee:5f:08:76:27:3c:e7:de:15:fd:1c:37:d4:38:2c:
a5:a3:77:b5:38:b1:33:b9:c6:be:4b:d1:94:e2:33:
bf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0B:4D:B7:6A:43:7C:01:0A:45:00:65:1D:02:60:70:54:9F:A5:B0
X509v3 Authority Key Identifier:
keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/lAtNt2pDfAEKRQBlHQJgcFSfpbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.246.0/24
IPv6:
2a10:e2c0::/29
Signature Algorithm: sha256WithRSAEncryption
18:da:ce:d4:d0:72:54:8f:20:eb:92:c0:0d:7c:be:66:67:82:
16:4c:17:2a:ec:b5:b7:2c:3f:a1:54:57:4e:ea:cd:dc:6b:8b:
a1:4b:87:ca:69:60:63:df:ca:33:6c:3c:6c:07:ac:79:3c:8e:
b2:82:ff:99:17:ab:f6:a9:09:3d:9a:bf:21:34:e7:6f:f9:f2:
06:d2:75:0d:b8:93:e3:a8:a8:3d:98:d4:4d:ac:41:14:d9:55:
6c:61:48:f4:4e:9d:fa:8f:b5:00:9d:1a:f7:cd:4b:c7:7e:51:
99:cc:11:f0:c4:f5:b1:48:51:8e:e2:ea:be:b6:00:f2:0a:db:
ab:7c:5a:41:a1:58:e4:a1:47:53:5e:27:ec:6d:b2:04:0e:9c:
b3:39:3d:30:64:ab:c2:98:38:5d:f7:06:e0:d9:7e:35:37:51:
12:c2:59:85:de:92:03:72:e1:62:87:5a:40:15:04:26:f5:1b:
ef:f7:2b:55:a9:85:82:67:a6:5b:89:21:f3:08:86:33:8c:dc:
cf:c3:28:39:1c:b8:c5:af:75:b7:a1:25:d0:88:dd:fb:83:5b:
1c:89:44:f3:54:7c:9b:35:cb:20:57:02:fa:0f:6b:0c:5b:07:
28:f5:16:c8:48:dd:c1:8c:1d:8b:ea:26:4e:6f:cb:86:0a:0c:
67:73:c5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:25 2024 by rpki-client on console-ams.rpki-client.org