Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ycmpqwhhKzexWYJbKaPGNHnvox4.roa
File: ycmpqwhhKzexWYJbKaPGNHnvox4.roa (raw, json)
Hash identifier: v2NK9O+xTT1XstvjF+PKmMGZ4KN2qJ1P/A3Mh5PaKyI=
Subject key identifier: C9:C9:A9:AB:08:61:2B:37:B1:59:82:5B:29:A3:C6:34:79:EF:A3:1E
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018B850FF08E9F812C795E17F9E969CDD3C0
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ycmpqwhhKzexWYJbKaPGNHnvox4.roa
Signing time: Tue 31 Oct 2023 09:28:16 +0000
ROA not before: Tue 31 Oct 2023 09:28:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.149.92.0/24 maxlen: 24
80.246.225.0/24 maxlen: 24
80.246.228.0/24 maxlen: 24
80.246.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:0f:f0:8e:9f:81:2c:79:5e:17:f9:e9:69:cd:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 31 09:28:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9c9a9ab08612b37b159825b29a3c63479efa31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:0a:8f:58:16:92:6e:2d:0e:d0:b9:c6:e5:
4d:3d:72:65:d4:cf:2b:f2:21:b4:de:54:36:1c:57:
35:fc:fa:f0:ac:37:93:21:b4:06:92:7f:fe:6c:ff:
a8:79:bb:aa:c6:d9:80:43:6e:ee:3c:4b:e6:4f:e7:
e5:ce:ad:3e:76:c1:f3:45:cd:f1:40:01:a5:01:fc:
39:7f:50:5f:be:50:ca:47:a3:c9:66:21:b7:b5:85:
1e:7c:8a:c6:e7:9a:bb:e1:43:ba:1f:68:97:6a:be:
54:41:2d:03:6a:52:e1:b5:36:2f:02:9a:8d:5d:98:
5b:4d:95:32:60:68:64:ed:3a:38:40:3a:4b:92:c7:
e4:74:4a:2f:39:af:0a:a0:d6:b7:4d:ac:d4:07:46:
42:04:8d:60:aa:c6:4f:88:2e:9e:ac:1e:95:15:73:
9d:51:50:16:8e:76:42:92:0c:2f:a8:45:8c:e2:bc:
81:43:c9:21:d8:da:f8:33:92:6b:c3:ea:f6:f0:4e:
cb:f7:0a:8a:d2:f7:9f:8f:e9:6b:3f:0d:a3:f5:2f:
1d:16:c0:91:a8:8b:48:b1:e2:e4:34:7a:2c:df:d1:
06:fb:e0:fa:e5:e9:50:27:76:67:6f:a6:ad:07:64:
db:37:f3:10:5e:4d:91:79:d2:7b:7e:df:04:2f:c6:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C9:A9:AB:08:61:2B:37:B1:59:82:5B:29:A3:C6:34:79:EF:A3:1E
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ycmpqwhhKzexWYJbKaPGNHnvox4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/24
80.246.225.0/24
80.246.228.0/23
Signature Algorithm: sha256WithRSAEncryption
90:4f:79:76:0c:b4:df:5f:f4:6b:f1:2a:65:55:94:d9:84:4b:
ff:36:6b:47:5d:06:3b:5a:aa:4a:b1:49:0b:b2:2b:78:31:da:
e0:75:8d:87:2d:cc:f8:6f:6e:56:0d:67:1c:7b:92:f4:4d:9e:
45:b5:b2:d6:98:c4:de:36:66:1a:bf:2f:a2:6b:c9:61:83:80:
ec:2d:1a:6f:40:13:71:fa:3d:f7:bf:91:71:49:7e:b8:f0:84:
0f:af:22:14:87:81:38:1c:ff:c5:ae:77:17:e5:db:7b:ae:03:
b3:b5:b3:4b:eb:e5:5d:97:7d:cc:52:90:88:7a:e1:1c:38:9c:
43:03:00:9e:32:12:af:bf:c4:c9:33:b5:f5:80:18:d9:3c:69:
7b:b6:3f:a2:07:89:a5:a1:f0:56:d5:cc:ab:a3:a0:96:35:0a:
04:7d:62:53:0d:bc:c3:d7:11:57:ab:da:99:ab:04:d3:35:2a:
d8:97:50:6e:b1:3f:39:23:f0:61:89:2a:35:7a:4b:1d:bf:34:
0e:02:63:a5:c6:06:28:38:6f:c6:0e:1e:60:a5:ae:45:42:b5:
fc:fc:21:49:1a:08:0b:09:f7:b7:80:ad:ec:8e:a7:36:98:3a:
4b:02:b5:af:6b:fc:c2:ef:bc:56:24:2e:ae:d1:0c:78:9d:0b:
7e:e0:b3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 21:56:41 2023 by rpki-client on console-fra.rpki-client.org