Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/cYkEuxw4EPrT5zo32oCOGfKSTIw.roa
File: cYkEuxw4EPrT5zo32oCOGfKSTIw.roa (raw, json)
Hash identifier: UMKwVz22looD1aiEkhq5vJxCDon5K1dxVErFrSbAEus=
Subject key identifier: 71:89:04:BB:1C:38:10:FA:D3:E7:3A:37:DA:80:8E:19:F2:92:4C:8C
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0189D969D17B6E7F5445719F69189EFECC01
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/cYkEuxw4EPrT5zo32oCOGfKSTIw.roa
Signing time: Wed 09 Aug 2023 08:28:58 +0000
ROA not before: Wed 09 Aug 2023 08:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 193.36.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:69:d1:7b:6e:7f:54:45:71:9f:69:18:9e:fe:cc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Aug 9 08:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=718904bb1c3810fad3e73a37da808e19f2924c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cc:56:31:99:21:5e:ad:36:24:05:95:b5:23:
d5:90:fa:39:cd:ca:c1:fc:c5:57:9f:a3:18:b9:92:
90:d6:72:06:9f:50:46:64:dc:71:4a:81:b2:4f:6d:
27:7c:d3:e2:61:7e:e9:42:e0:53:91:fb:fe:53:59:
de:8a:87:60:d9:6c:ae:83:32:a2:76:be:62:f3:5b:
ae:f1:0a:61:1a:b4:d5:ba:85:5e:32:59:21:f4:2c:
eb:41:4f:d6:46:44:fb:ad:2b:3d:38:67:16:12:e0:
36:76:a9:74:9a:4f:84:b8:87:f2:44:ea:1f:fc:a0:
3c:b2:d0:07:d2:ab:c3:33:92:57:02:63:a8:17:23:
b4:79:ad:36:a3:d7:65:f3:9c:39:c2:6d:7d:95:12:
15:8c:1f:26:bf:89:0b:fe:aa:90:33:2c:a1:c3:60:
b9:57:7a:fb:a6:f8:4e:e3:da:92:4c:2c:15:18:75:
2c:c3:85:fe:e9:54:e8:ac:15:d6:ef:83:40:93:e3:
6b:d5:fc:74:7d:ff:53:43:2f:e4:b2:36:bc:c9:65:
d2:c7:8c:95:27:fa:69:f3:fe:f8:e1:3c:6c:25:2e:
97:41:42:37:a9:be:cb:49:39:1f:d2:cb:bf:a3:2f:
06:3e:b1:5e:35:f4:b8:1e:39:22:ee:cd:bc:4c:05:
8e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:89:04:BB:1C:38:10:FA:D3:E7:3A:37:DA:80:8E:19:F2:92:4C:8C
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/cYkEuxw4EPrT5zo32oCOGfKSTIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.163.0/24
Signature Algorithm: sha256WithRSAEncryption
36:69:3c:5f:58:57:fd:10:24:b6:e9:c8:ec:f7:50:df:3f:3c:
1b:3c:15:be:40:86:b2:35:91:d4:93:81:37:4d:f8:73:15:2b:
75:9d:c5:15:fe:6a:e7:0a:04:d8:ef:00:6a:0c:32:82:73:8d:
13:0e:9d:e2:93:5d:49:e1:0d:06:93:d2:24:35:58:ee:91:78:
fa:db:10:75:1c:35:13:cd:7d:2a:fe:fd:86:78:3c:64:47:2e:
50:7f:f1:d0:42:04:4a:b8:49:28:10:39:5a:66:df:3d:83:d4:
a0:b5:a8:70:d3:14:cd:78:2d:aa:6f:23:61:7d:77:15:9d:a9:
44:51:02:97:9f:f9:86:84:9d:dd:63:ca:81:a8:13:23:98:31:
d3:95:23:19:6d:64:fe:95:2f:cf:4e:aa:11:bd:c7:32:9e:ff:
f5:2a:ce:16:89:55:34:35:fe:b6:5b:59:97:55:2d:09:47:8f:
8f:64:53:2f:3c:04:9b:b0:28:ce:ce:6e:87:5a:53:7e:9e:a1:
e6:4d:6d:76:64:2c:55:35:c7:d3:88:2e:f3:e9:e0:5f:56:de:
e3:09:52:d5:dd:b5:b7:30:92:2d:62:b0:ab:53:25:b8:38:3e:
af:ec:ec:07:52:e1:59:76:e7:52:fe:72:46:09:84:09:17:51:
36:a9:7d:7d
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 23 16:17:59 2023 by rpki-client on console-ams.rpki-client.org