Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/YP0pwLTuqNx0NWNpctgpZPPT7rc.roa
File: YP0pwLTuqNx0NWNpctgpZPPT7rc.roa (raw, json)
Hash identifier: 7lI2Tt8cYHtgju630eVkH5DQ0lCV2p+I95p4yvhvr1U=
Subject key identifier: 60:FD:29:C0:B4:EE:A8:DC:74:35:63:69:72:D8:29:64:F3:D3:EE:B7
Certificate issuer: /CN=e368116c6849228210905122016d722091197be5
Certificate serial: 018673CAD180FBC00118B5252893D93E0759
Authority key identifier: E3:68:11:6C:68:49:22:82:10:90:51:22:01:6D:72:20:91:19:7B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42gRbGhJIoIQkFEiAW1yIJEZe-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/YP0pwLTuqNx0NWNpctgpZPPT7rc.roa
Signing time: Tue 21 Feb 2023 11:45:17 +0000
ROA not before: Tue 21 Feb 2023 11:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 193.201.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:ca:d1:80:fb:c0:01:18:b5:25:28:93:d9:3e:07:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e368116c6849228210905122016d722091197be5
Validity
Not Before: Feb 21 11:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60fd29c0b4eea8dc7435636972d82964f3d3eeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:37:0f:89:84:c3:37:a1:6b:5d:b4:1d:70:
3e:2c:9b:fc:57:93:9b:1f:2d:90:b4:2e:70:06:fe:
99:da:53:b4:41:e7:40:f1:49:66:82:a0:b6:c1:2a:
0d:08:5f:f4:2c:33:d6:45:e0:74:18:bc:85:87:5a:
04:f7:a2:6e:b1:9a:ef:ae:da:da:ab:0b:bc:2c:64:
2a:5a:24:7a:ae:39:95:b0:75:33:4c:e4:67:e6:f1:
49:f5:33:4b:48:99:fe:db:0d:f4:f1:d5:40:fa:d2:
f7:14:01:6a:00:e0:60:ac:db:a4:0e:75:d8:5a:f7:
72:39:34:80:6b:56:15:5b:72:75:bf:f9:cd:97:2c:
95:db:97:b5:b5:da:c4:05:87:52:2d:34:24:e7:0b:
d2:42:a4:fc:46:46:b9:77:5c:c0:bc:92:23:3a:3e:
76:32:d8:02:ec:55:f7:2e:d0:65:bd:17:e9:33:de:
b0:6c:a2:09:dd:20:a5:2a:d4:bf:ac:70:1f:2d:e3:
81:d8:3e:69:c6:47:fc:45:35:b7:42:a1:97:8c:b6:
35:fd:16:40:ca:83:41:40:99:52:1e:df:f9:72:46:
b6:b4:73:2c:63:03:8c:6d:aa:96:c1:4c:24:3f:e1:
21:0b:d2:d0:64:fe:03:82:ec:7f:75:85:e9:86:18:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FD:29:C0:B4:EE:A8:DC:74:35:63:69:72:D8:29:64:F3:D3:EE:B7
X509v3 Authority Key Identifier:
keyid:E3:68:11:6C:68:49:22:82:10:90:51:22:01:6D:72:20:91:19:7B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42gRbGhJIoIQkFEiAW1yIJEZe-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/YP0pwLTuqNx0NWNpctgpZPPT7rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/42gRbGhJIoIQkFEiAW1yIJEZe-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.13.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:42:6c:9f:93:d4:5e:ad:0f:67:cd:3d:26:66:f5:07:1b:99:
9a:c4:c7:57:6d:b8:d9:5b:b2:f5:50:29:d4:e9:fb:9d:9e:8a:
df:1e:f6:ba:42:b6:eb:72:d8:0d:24:cd:e0:2a:aa:be:f7:7d:
72:42:c1:0c:6e:a1:08:94:ae:58:c5:cc:82:74:d9:5b:97:36:
2f:5a:7d:06:cf:e4:62:59:dd:b9:4e:5e:61:96:cd:6b:93:fe:
03:c4:27:1f:39:c2:27:3c:4e:12:76:c8:0b:1e:c8:03:1a:cd:
09:72:ea:f5:cf:86:6a:88:e8:9c:d9:ec:17:d2:4f:86:04:9d:
5a:95:4f:6b:ac:93:2f:6b:f5:0f:02:8b:14:f2:cd:09:57:98:
9a:46:9f:37:30:d7:35:95:d1:b5:94:79:bc:6d:bb:52:49:94:
e7:f7:ba:ab:34:de:65:c7:a6:b6:f4:dd:d7:ed:ac:31:99:65:
38:c5:f0:bf:f9:34:ae:a6:91:b8:a5:d9:87:f0:6a:83:84:1b:
24:7e:fb:a7:ec:73:37:56:66:41:f8:d0:b6:f8:07:76:a6:e6:
a8:c1:ae:a8:b6:6d:34:4a:92:69:f3:ca:10:65:b8:dd:8a:f1:
d2:7f:37:28:98:1e:0a:84:99:1f:d7:00:b0:b3:2e:12:f0:f9:
e2:a9:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-fra.rpki-client.org