Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/yBY8YyjFEkvGh647Cg-5Sa-JXTw.roa
File: yBY8YyjFEkvGh647Cg-5Sa-JXTw.roa (raw, json)
Hash identifier: cqsLAbaqXGziKcUPM4ZSUd16huJbZqP0IW+QBbbbq8g=
Subject key identifier: C8:16:3C:63:28:C5:12:4B:C6:87:AE:3B:0A:0F:B9:49:AF:89:5D:3C
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018CD0D23D038D01C2AAF872ED642AE84591
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/yBY8YyjFEkvGh647Cg-5Sa-JXTw.roa
Signing time: Wed 03 Jan 2024 19:34:48 +0000
ROA not before: Wed 03 Jan 2024 19:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 94.241.136.0/23 maxlen: 24
83.147.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 20:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d0:d2:3d:03:8d:01:c2:aa:f8:72:ed:64:2a:e8:45:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 3 19:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8163c6328c5124bc687ae3b0a0fb949af895d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:14:c1:1d:57:a5:9d:6d:14:cf:a5:82:f1:
46:eb:4b:7e:c6:29:3d:d2:c6:bf:76:90:07:0c:1b:
20:f8:dc:40:d4:54:48:a7:74:fd:2b:52:3d:f7:47:
31:0c:4f:d1:c6:41:cc:9e:41:17:d6:84:32:f7:98:
2f:03:c9:c0:a8:bb:70:d4:7c:c4:84:76:68:75:05:
56:3f:0f:2f:b7:43:17:c4:54:09:a6:81:cd:f3:b2:
cd:78:e8:28:3f:a1:88:10:a2:e8:b4:95:50:b3:dc:
05:4c:ff:e9:e0:b3:62:10:c9:23:63:a0:44:d5:6d:
78:be:cb:98:6f:b6:86:82:ac:be:c4:f3:45:cf:96:
9b:9a:2a:f9:12:8b:ed:81:97:33:67:af:f7:cd:7b:
76:b3:fc:3f:47:ff:40:c0:5a:2d:c2:d2:da:41:e4:
06:0e:fc:fa:e5:f6:99:54:3c:78:8a:41:57:7c:b3:
71:17:ef:d4:54:c6:c3:63:91:a4:7a:54:60:4e:bf:
eb:6a:b9:d0:05:b4:e5:c5:9a:57:b0:92:4e:19:1d:
76:b9:a6:1a:28:00:79:cf:3c:54:fd:f5:0c:ee:b2:
17:e0:4a:4a:e8:5e:92:52:ad:1c:80:31:fc:f1:be:
44:77:39:ec:9d:fe:7d:a1:0a:30:10:9e:08:20:10:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:16:3C:63:28:C5:12:4B:C6:87:AE:3B:0A:0F:B9:49:AF:89:5D:3C
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/yBY8YyjFEkvGh647Cg-5Sa-JXTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.223.0/24
94.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:f9:0f:53:4e:50:b1:73:56:94:6f:af:a8:34:79:8c:64:62:
31:b4:2e:ef:0c:35:f6:97:13:cd:26:c7:d2:ce:ac:fb:b7:22:
7d:9a:a0:03:be:26:cc:1f:7e:5d:b4:92:34:1e:9e:31:a7:7c:
3e:8a:e4:86:fa:33:89:2e:64:24:32:ae:6a:72:aa:f0:78:03:
83:17:e3:c9:e6:78:79:fc:71:e7:b5:e4:ec:9e:ee:5f:b1:6b:
f8:e5:cc:d3:47:b5:71:51:de:79:dd:ec:41:eb:96:b6:8c:25:
65:71:0a:41:d7:1c:7a:9b:47:84:6a:b8:e2:6a:99:f8:ef:0a:
87:8f:d3:bf:ba:ed:4f:62:27:03:e3:00:eb:39:43:8b:b7:84:
4c:0a:b9:a0:63:c6:e8:7b:9c:4e:82:07:53:ad:cf:9a:48:8e:
fd:1d:3e:b1:10:9b:8a:16:bb:95:94:89:3d:e8:b5:76:32:37:
13:78:77:03:28:7b:1e:89:cf:db:b8:32:8a:67:52:76:ae:93:
29:d1:6f:b8:90:20:39:6f:55:a3:8d:57:27:13:1e:a5:a1:84:
54:ae:21:52:95:9f:1b:21:37:7d:d1:45:35:e6:b4:b2:47:fb:
36:2d:1b:f8:9f:20:1b:84:56:26:63:ed:66:f3:51:36:28:8b:
7a:fb:f2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:35 2024 by rpki-client on console-ams.rpki-client.org