Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/9nYwQbTcPYAAhfOxbvgvlB3fc98.roa
File: 9nYwQbTcPYAAhfOxbvgvlB3fc98.roa (raw, json)
Hash identifier: dklCXzcTi78syj8Cy5WrfA++gLKourS9COPJUc1/8CM=
Subject key identifier: F6:76:30:41:B4:DC:3D:80:00:85:F3:B1:6E:F8:2F:94:1D:DF:73:DF
Certificate issuer: /CN=62efff88bf665ec86a9e356b79d06ba5940c383c
Certificate serial: 01905F536257EC0C602F5A860C1FDC132519
Authority key identifier: 62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/9nYwQbTcPYAAhfOxbvgvlB3fc98.roa
Signing time: Fri 28 Jun 2024 14:50:18 +0000
ROA not before: Fri 28 Jun 2024 14:50:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 141.193.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 15:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:53:62:57:ec:0c:60:2f:5a:86:0c:1f:dc:13:25:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62efff88bf665ec86a9e356b79d06ba5940c383c
Validity
Not Before: Jun 28 14:50:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6763041b4dc3d800085f3b16ef82f941ddf73df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:cd:19:31:0b:71:ea:e9:92:54:02:c3:4d:
08:2b:65:48:77:21:a0:82:11:0f:a4:16:3a:16:8a:
36:e1:a2:bc:ae:a3:af:c1:14:ef:d1:0c:75:d2:51:
70:db:d1:93:b8:1a:ea:9f:8c:41:b2:1b:fe:3a:4f:
68:25:92:f7:f8:7f:95:90:a4:78:bc:76:69:f1:61:
b1:6d:f2:7e:d6:af:f0:7f:42:c9:46:3a:ee:f7:0d:
84:57:95:ba:4d:22:7e:a7:38:04:b8:0d:8e:a2:a7:
67:80:c7:af:a7:2d:69:c8:e2:18:91:f2:12:3d:93:
20:f8:6e:c4:9f:4b:dd:70:0e:d1:49:0a:76:15:e8:
3e:72:19:b7:1c:a4:38:00:c4:7e:39:ea:18:ce:e7:
b2:eb:db:3b:c0:6d:df:31:a1:32:ed:d3:4e:94:c3:
38:66:e5:a8:aa:0f:8d:e0:ad:e9:14:21:62:f1:d0:
79:d4:90:55:00:18:f6:29:40:7a:a6:4a:98:c1:f7:
34:88:b5:57:01:03:62:43:cc:e3:1d:00:2b:41:ce:
a6:d0:39:c0:ed:97:dd:78:7e:7a:c9:de:d3:28:4a:
13:53:c8:f5:02:b7:21:1b:c3:ff:4a:ce:1b:50:5f:
71:ce:a7:69:cd:87:13:67:b6:fe:2b:44:6f:76:5a:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:76:30:41:B4:DC:3D:80:00:85:F3:B1:6E:F8:2F:94:1D:DF:73:DF
X509v3 Authority Key Identifier:
keyid:62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/9nYwQbTcPYAAhfOxbvgvlB3fc98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/Yu__iL9mXshqnjVredBrpZQMODw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.193.228.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2b:b7:61:d0:40:ea:09:40:22:f6:00:3e:ff:26:30:ad:6d:
80:d6:e2:e4:0f:9c:10:46:c3:96:0e:b3:c1:04:9d:d1:74:7e:
13:5a:e3:97:9d:90:28:7e:2c:44:f5:22:39:0f:9d:23:0a:84:
72:e4:3a:5d:9b:ec:86:50:41:5d:32:74:d1:b5:26:ff:6b:e3:
9c:1a:8c:fe:34:05:72:c4:f2:9d:61:7a:e2:7c:88:b4:e5:c6:
5a:10:1c:9c:56:64:ef:2d:66:f7:ed:61:23:e8:88:9c:8f:b6:
93:00:00:b4:5f:a5:da:db:df:a8:cf:36:55:ea:a6:88:77:fb:
00:0b:b0:0f:6d:16:55:ca:d0:00:ef:67:14:f1:a9:13:ac:db:
62:ce:e5:9d:0c:ab:b2:7c:2e:17:cf:d7:1f:f5:ed:3d:96:39:
6b:37:e0:06:65:50:67:85:cc:d1:98:58:12:68:52:69:8c:ef:
3f:0b:ab:27:e8:b3:78:0a:6a:98:87:29:13:af:a0:f4:e4:32:
d1:06:8d:29:f8:fa:6f:db:be:3c:2d:6a:2d:99:e4:88:19:e6:
e5:4a:52:d9:e6:b6:e7:a6:65:48:11:8d:5f:9e:ac:60:f9:45:
b8:7a:9b:90:0c:25:21:29:de:2a:01:e8:fb:70:b8:17:78:c9:
05:4d:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 18:05:18 2024 by rpki-client on console-ams.rpki-client.org