Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/YJaaumD5_pPEfXLDBU8OmJR9n9s.roa
File: YJaaumD5_pPEfXLDBU8OmJR9n9s.roa (raw, json)
Hash identifier: zCVeNepuadCpBoMbT2N1qowgy9/oA1oSlQWsXa7Ycf8=
Subject key identifier: 60:96:9A:BA:60:F9:FE:93:C4:7D:72:C3:05:4F:0E:98:94:7D:9F:DB
Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial: 01879D63E183F2F33271E1296FCDD09BF776
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/YJaaumD5_pPEfXLDBU8OmJR9n9s.roa
Signing time: Thu 20 Apr 2023 06:39:41 +0000
ROA not before: Thu 20 Apr 2023 06:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 46.229.241.0/24 maxlen: 24
193.16.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Jul 2023 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:63:e1:83:f2:f3:32:71:e1:29:6f:cd:d0:9b:f7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Validity
Not Before: Apr 20 06:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60969aba60f9fe93c47d72c3054f0e98947d9fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:93:13:3c:50:67:e7:60:6e:c9:11:43:d9:c5:
fa:ea:4e:8f:60:63:e3:3a:fd:90:bd:1c:90:de:9a:
a1:cb:79:f3:b6:a3:29:08:60:c7:a7:24:1b:68:61:
cd:33:96:c8:5d:76:db:20:44:92:ff:e5:68:5b:06:
b9:40:54:bd:ef:35:a4:c5:b7:77:bb:37:de:f5:42:
92:ab:2f:7f:ec:e7:4b:f0:ea:98:f7:c4:88:08:f3:
11:a2:4c:7b:7c:8e:d9:e8:8d:22:0e:96:30:e9:05:
78:9f:67:7e:9a:9d:f1:3c:fb:45:f1:eb:bb:ad:8f:
96:2c:6c:bf:20:07:ee:7f:cb:4c:9b:fe:f3:66:a8:
a8:43:a5:23:91:f7:7c:52:7d:54:aa:7a:60:a4:9d:
74:32:9a:41:11:d5:6e:d8:c5:78:47:45:05:5b:0a:
17:b2:51:06:b8:1d:6f:83:ee:ef:f9:c4:87:98:dd:
bc:c3:ad:31:db:be:f9:c4:b9:14:fe:c9:dd:b5:4b:
60:f6:8d:94:c0:ba:d3:01:fe:3e:d9:ce:5c:8a:fb:
2a:0a:41:84:be:61:c3:39:0f:e0:97:f6:6a:bf:8c:
69:a5:e9:63:82:27:ad:ad:02:16:97:3e:83:6b:68:
4a:01:31:d5:d4:88:2b:29:39:fd:10:66:00:1d:fd:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:96:9A:BA:60:F9:FE:93:C4:7D:72:C3:05:4F:0E:98:94:7D:9F:DB
X509v3 Authority Key Identifier:
keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/YJaaumD5_pPEfXLDBU8OmJR9n9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.241.0/24
193.16.149.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f2:fe:ff:07:47:a9:70:10:73:49:77:98:47:b9:e5:88:06:
14:d2:4c:e6:79:22:73:38:13:10:15:37:db:89:28:a5:0a:f5:
0a:ee:52:59:b0:99:32:9c:48:5c:3d:ab:cd:1b:5e:71:4c:4c:
7f:1a:82:d4:21:e6:65:8d:28:90:89:52:0c:43:23:41:e2:ac:
07:fd:a0:d9:10:bc:37:ee:c7:36:34:00:3c:11:d3:fa:81:7b:
85:90:4e:fb:3b:ff:4d:d1:6e:32:79:9c:aa:d1:3f:a8:67:d0:
bf:92:95:3c:d5:75:e5:82:72:7b:24:2d:cb:d2:d7:ba:d8:14:
8a:cd:64:2a:42:5a:2c:03:d4:b5:bd:74:db:3d:4d:7f:92:7f:
d8:22:43:4b:a0:56:5d:98:6e:8b:7e:ec:84:89:43:64:2a:7a:
4d:2f:0f:2b:e4:21:8e:1c:e6:a8:75:16:36:e3:a0:05:10:14:
0e:fd:d4:4b:ab:8e:d1:10:f0:c0:8c:aa:08:6e:45:e8:2b:2e:
f0:cc:45:b4:e0:e9:a9:0b:ad:e3:3e:0f:38:f3:08:e5:83:2e:
9d:77:0e:6e:75:d4:22:d3:ad:99:12:dd:38:51:5e:0c:cd:d0:
c3:12:48:92:e6:40:f6:ae:b3:d1:f0:ef:22:5d:77:4b:08:e5:
3e:2e:58:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:23 2024 by rpki-client on console-ams.rpki-client.org