Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/YexWhEa8JpBgayRkDtP5LroB02I.roa
File: YexWhEa8JpBgayRkDtP5LroB02I.roa (raw, json)
Hash identifier: VePx6FtuahMpNdDgiC6aUsgHqeNhZgCL6c1Sr2Y3D6Q=
Subject key identifier: 61:EC:56:84:46:BC:26:90:60:6B:24:64:0E:D3:F9:2E:BA:01:D3:62
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 018570427A1FA176742AD25CF49EEB192B9B
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/YexWhEa8JpBgayRkDtP5LroB02I.roa
Signing time: Mon 02 Jan 2023 02:14:42 +0000
ROA not before: Mon 02 Jan 2023 02:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 193.238.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:7a:1f:a1:76:74:2a:d2:5c:f4:9e:eb:19:2b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Jan 2 02:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61ec568446bc2690606b24640ed3f92eba01d362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3d:e0:ef:31:33:21:22:19:09:22:04:4c:e8:
2e:90:5d:40:33:83:43:6c:66:4b:25:6a:7f:c0:c2:
3b:ea:09:ad:eb:7d:b9:e7:20:6d:1c:86:4d:f2:f6:
b8:40:7e:ce:c0:aa:64:91:7e:65:69:7d:81:91:2e:
3a:f7:70:da:a3:f1:d2:95:1c:80:ca:54:9a:af:9c:
b1:a7:88:31:ab:7c:a5:90:ea:9c:46:d2:84:a4:ba:
ad:18:b6:2f:cf:a9:ff:68:c8:48:30:81:75:d0:ab:
b2:be:69:f3:e3:e9:34:04:04:52:7d:4e:94:05:0a:
2c:52:d7:91:ad:a2:eb:91:2a:ec:65:dc:e2:52:1c:
8b:f2:92:6b:1f:63:70:c5:8a:cf:9d:d3:5c:06:20:
05:f1:d2:98:11:97:87:45:8f:5f:91:14:7c:fe:ee:
98:ce:5a:a9:48:c4:72:12:53:a7:b0:25:5c:87:40:
c5:96:c6:1f:ce:2b:2d:73:93:9c:9c:9e:33:51:9b:
78:73:02:46:f5:01:f6:42:a0:29:3e:64:d6:be:bc:
5f:e1:2e:30:9f:a5:fd:fa:46:ab:ec:78:5b:d9:c7:
80:56:72:04:41:3e:a0:c1:90:be:30:7d:77:78:6b:
c5:1b:09:e3:68:b4:e1:50:af:54:be:80:c1:4c:af:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EC:56:84:46:BC:26:90:60:6B:24:64:0E:D3:F9:2E:BA:01:D3:62
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/YexWhEa8JpBgayRkDtP5LroB02I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:58:c4:24:a3:17:a1:8e:4d:29:6a:99:cc:43:70:39:85:8f:
bb:0a:e7:76:b3:e9:63:2d:2b:c3:e2:aa:09:f6:f3:e6:9c:62:
2f:dd:3b:f3:eb:9f:ff:ae:6c:fa:e9:c7:06:6d:6c:66:29:34:
3b:2b:40:01:d9:2b:4e:76:3c:09:db:99:cf:f8:81:5f:19:55:
a2:8b:59:94:1d:13:fa:d7:89:6a:b7:59:fe:7f:18:fd:cb:2b:
21:b2:16:c5:5c:76:4c:92:26:1e:ff:f6:98:bd:a0:15:af:3b:
13:3c:f3:bc:19:32:97:bc:c6:0a:cd:09:1f:18:ff:3c:1d:f1:
24:74:3f:80:54:9a:68:0c:0a:58:00:01:e7:a7:0f:52:c8:8d:
f7:f0:cc:19:0d:4e:3b:0e:87:5a:75:2e:12:9d:42:53:4b:96:
6d:74:ad:f4:5c:86:e5:c1:68:2a:b3:29:82:1f:25:2c:b2:aa:
64:5e:bc:e4:bd:ca:41:ee:5e:cb:c6:6b:62:68:61:68:6b:e6:
3d:ed:f6:37:8d:75:5d:af:97:4b:57:69:cf:89:6f:09:8c:a3:
2a:4d:78:5e:67:db:e5:2a:3d:c7:6c:e0:6e:35:28:28:94:fa:
cd:90:18:4e:06:47:3d:aa:f5:97:d4:0b:12:9b:19:33:de:e5:
e4:6c:27:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:13 2024 by rpki-client on console-ams.rpki-client.org