Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/y6OYHhteTKr3ci7bAfJ0x7YTNmA.roa
File: y6OYHhteTKr3ci7bAfJ0x7YTNmA.roa (raw, json)
Hash identifier: MtULSCIvV9hoXkjmSrlVY3ShPaPBLiOrrNgdw/MYOlM=
Subject key identifier: CB:A3:98:1E:1B:5E:4C:AA:F7:72:2E:DB:01:F2:74:C7:B6:13:36:60
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185E99DD768E8D03F2695AE7D0D5A6C0E50
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/y6OYHhteTKr3ci7bAfJ0x7YTNmA.roa
Signing time: Wed 25 Jan 2023 15:48:33 +0000
ROA not before: Wed 25 Jan 2023 15:48:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.42.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:9d:d7:68:e8:d0:3f:26:95:ae:7d:0d:5a:6c:0e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 25 15:48:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cba3981e1b5e4caaf7722edb01f274c7b6133660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:1d:34:f1:ce:b8:35:72:bb:30:6b:d6:71:
a2:22:c0:24:bd:d0:ba:3b:cc:2e:09:0f:0f:0e:8f:
90:aa:a3:6c:fd:9c:b7:d7:a4:36:2a:0b:5c:0e:cc:
e9:75:98:c7:60:aa:8d:eb:a0:ff:d8:81:46:de:2b:
a8:2b:96:cd:98:9c:51:fd:d8:25:63:ca:77:10:ef:
55:20:24:d5:30:e2:f3:79:88:8c:a0:86:66:8e:cd:
0a:0c:f7:c0:12:58:dd:e8:9d:f1:36:2d:c3:41:39:
c9:f7:81:17:28:cd:d3:66:94:9a:dc:bd:53:ed:58:
83:41:c4:f1:23:9b:6a:d9:0a:24:2c:70:24:38:17:
a7:26:cf:76:4d:89:47:3c:f3:9e:f7:a3:4a:17:94:
66:d0:d6:23:31:7a:90:53:cf:56:f4:04:ee:7d:85:
91:1d:06:ab:47:54:21:f9:59:9a:0a:de:9d:e9:88:
8e:8a:f5:dd:10:a3:0e:f9:87:03:15:0b:12:f9:5b:
a9:68:85:52:f1:68:d7:86:62:ca:da:85:12:21:3b:
c1:6c:6b:ef:5f:26:67:cb:c9:4b:8f:f5:0b:7c:92:
7d:36:bb:0e:b3:49:5a:09:15:89:f9:df:e3:d5:c3:
46:fe:9e:44:a8:ac:48:98:28:3f:16:6c:e2:4b:83:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A3:98:1E:1B:5E:4C:AA:F7:72:2E:DB:01:F2:74:C7:B6:13:36:60
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/y6OYHhteTKr3ci7bAfJ0x7YTNmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.53.0/24
Signature Algorithm: sha256WithRSAEncryption
28:fe:1e:c3:f8:55:b7:ea:86:b5:24:f4:02:89:e1:c0:e6:00:
e8:45:2b:d4:37:6c:32:05:f7:b3:2d:23:e8:b9:ae:ea:ea:0e:
d0:83:df:92:e2:a3:42:11:e4:80:10:53:89:9e:10:ad:e9:d8:
c7:04:b8:f9:a0:ea:97:9b:1b:bb:25:d9:7d:c8:6d:44:1e:09:
d7:2b:78:b4:50:7c:79:59:f8:8a:34:fc:bf:c8:50:12:2b:fc:
08:e8:b8:a9:67:c6:27:bc:84:a5:c8:ee:49:22:b5:3c:3e:7c:
85:7d:81:33:8c:b2:3c:a5:04:64:29:1e:f8:e3:2a:e0:a4:b4:
04:92:3c:94:68:1a:ba:97:b4:34:0e:0a:8b:64:c8:78:fc:bc:
cf:90:34:4c:38:13:b7:82:0d:ab:55:11:4b:53:59:cf:2f:dd:
fe:0f:80:b5:59:1e:30:b5:11:ef:bf:f0:cf:36:8e:75:e3:bc:
95:96:13:60:a0:20:ef:28:2e:44:58:9b:de:84:27:c0:11:a2:
87:57:02:9d:94:35:03:10:f9:3f:30:da:1e:26:62:00:71:e3:
b5:9f:3f:69:76:35:0c:b1:cb:46:88:db:f6:6c:e2:6f:8e:2d:
33:df:a6:b1:2c:30:1c:3a:bc:4f:1e:03:08:2a:b2:df:44:fe:
08:e2:46:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:04 2023 by rpki-client on console-fra.rpki-client.org