Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/YPP_FLkU4Uw5Ffr0KlNyRJzgtUw.roa
File: YPP_FLkU4Uw5Ffr0KlNyRJzgtUw.roa (raw, json)
Hash identifier: 8pujmJVfksC1nhwcKyEObZ8vi5u04soFnadMpIXzZeU=
Subject key identifier: 60:F3:FF:14:B9:14:E1:4C:39:15:FA:F4:2A:53:72:44:9C:E0:B5:4C
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 0188E857EDAA2C4F5D4B23DA5A7682E2DE20
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/YPP_FLkU4Uw5Ffr0KlNyRJzgtUw.roa
Signing time: Fri 23 Jun 2023 13:00:56 +0000
ROA not before: Fri 23 Jun 2023 13:00:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 195.191.112.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e8:57:ed:aa:2c:4f:5d:4b:23:da:5a:76:82:e2:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: Jun 23 13:00:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60f3ff14b914e14c3915faf42a5372449ce0b54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:64:52:6d:25:c7:36:12:01:bc:4c:95:db:3c:
2f:06:49:1f:5a:23:83:a6:26:78:28:ac:0f:b3:98:
15:e6:14:c4:41:30:ad:ba:2c:aa:a9:ee:27:71:1a:
f2:56:62:ac:48:17:80:8b:90:f2:d0:5b:5c:80:ef:
f4:d1:a5:16:69:65:dd:ab:99:5c:9c:5c:be:92:73:
c0:9a:c9:4b:dc:07:87:19:db:a3:5a:2d:f3:23:0d:
1d:52:b8:8d:d7:43:9c:4e:20:5b:83:a7:86:3a:bb:
d0:87:0c:1c:a1:70:c9:62:3c:f6:53:e2:f6:9e:6c:
40:8a:63:2e:f1:61:9c:da:27:e4:99:60:ea:ae:93:
9a:ec:44:38:8a:e6:1b:51:d9:43:af:02:b2:5c:9b:
bb:83:c7:e8:b0:bb:93:61:4a:43:b7:7f:29:36:d1:
bb:e6:83:4d:93:1c:e9:6d:7d:aa:c0:dd:36:4e:58:
a2:ee:71:4a:26:44:cc:78:27:16:56:57:d4:86:d2:
ca:e1:74:f6:3a:84:20:74:62:12:1d:6d:69:ee:9f:
87:73:60:56:b0:7f:15:0a:20:ce:d3:09:f7:c9:ae:
1d:30:00:5e:a4:e6:bd:48:3d:2e:12:18:32:1c:b8:
e7:c0:16:09:07:17:55:6b:d9:62:31:20:3e:40:4e:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F3:FF:14:B9:14:E1:4C:39:15:FA:F4:2A:53:72:44:9C:E0:B5:4C
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/YPP_FLkU4Uw5Ffr0KlNyRJzgtUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.112.0/23
Signature Algorithm: sha256WithRSAEncryption
60:b0:a8:76:9e:e2:15:47:cb:43:19:b8:da:b0:66:b6:64:c2:
c9:16:73:eb:b3:10:d9:78:fe:54:4d:4b:b5:68:42:f5:e1:55:
c8:95:91:f6:b2:bc:54:ec:40:fb:30:23:37:81:cb:5d:b8:7e:
a6:71:38:9f:7e:69:2e:2d:4d:e1:38:1d:b8:bf:5a:de:a3:56:
76:4e:db:d7:19:3a:dc:90:bf:9c:98:90:59:37:fe:f0:68:56:
2f:e9:0d:89:1e:7e:5c:b9:84:c8:68:fc:4d:dd:eb:18:74:6f:
ff:5e:2a:f4:c2:81:c9:ee:3e:6f:b6:1d:55:04:6d:e0:10:21:
94:14:6b:ec:6a:c5:f6:8e:0e:09:bf:94:45:e9:3a:ba:e0:df:
f2:86:fa:85:09:c2:c5:16:f1:4d:49:29:68:78:04:38:fb:1d:
7a:62:11:85:84:37:e4:08:cf:e9:c5:db:c3:d3:f9:c6:cd:d5:
c4:91:2a:ba:50:84:66:21:c3:0d:2e:9a:73:15:5e:49:a3:18:
50:e2:14:57:da:bf:5e:f3:b5:ff:8e:ac:6c:9c:82:d6:db:a6:
26:16:86:c3:3e:6b:b9:8c:be:4f:12:13:de:43:0f:82:5c:a7:
1f:43:48:d3:b5:e4:23:0a:2c:88:68:23:95:2f:98:aa:01:13:
da:75:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:11 2024 by rpki-client on console-ams.rpki-client.org