Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/YBCTBD8TWdWwEY5qAkKU00C1he8.roa
File: YBCTBD8TWdWwEY5qAkKU00C1he8.roa (raw, json)
Hash identifier: g01DLJGm/gBF9t/iJDeuABHp0sBVuM4pZ9kt+U6qkbA=
Subject key identifier: 60:10:93:04:3F:13:59:D5:B0:11:8E:6A:02:42:94:D3:40:B5:85:EF
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 01856DCB06440EED8D60F1FE018ED0F80BB5
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/YBCTBD8TWdWwEY5qAkKU00C1he8.roa
Signing time: Sun 01 Jan 2023 14:45:00 +0000
ROA not before: Sun 01 Jan 2023 14:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210145
IP address blocks: 193.168.58.0/24 maxlen: 24
193.168.58.0/23 maxlen: 23
193.168.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:cb:06:44:0e:ed:8d:60:f1:fe:01:8e:d0:f8:0b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Jan 1 14:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=601093043f1359d5b0118e6a024294d340b585ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:0f:50:17:18:9e:66:ec:5c:83:58:ab:96:
83:98:f9:70:a0:4a:d5:c4:5e:34:6d:51:bb:3b:35:
9c:c1:4f:1c:8d:d9:c7:de:e0:8c:a7:93:81:17:ec:
47:0c:be:0c:00:c0:46:df:e9:f9:0d:bb:60:78:d8:
d4:2c:22:05:f2:de:1b:3a:a5:b4:3e:38:ac:e3:41:
57:74:1f:18:21:99:72:ca:dc:71:68:b9:cf:b6:98:
97:2e:04:93:a5:32:f6:58:9c:50:9c:64:e8:72:27:
ba:84:7a:69:9b:77:4a:c3:15:8d:03:26:12:a6:5c:
75:7d:fc:e2:80:ec:8b:81:83:19:94:03:d9:cb:c0:
c2:f6:6d:9f:e0:07:51:0a:d1:3a:54:c7:3b:f5:86:
ae:cd:9a:ab:4c:dd:c0:82:e5:ba:3f:0a:07:7a:5c:
01:3d:e1:c4:2e:62:ba:65:51:39:fb:42:c4:d0:8b:
de:2f:83:f0:98:f5:1f:d5:54:17:2c:14:48:a8:59:
2a:86:7e:e2:45:55:7c:23:32:7e:9c:ee:fc:d2:b2:
62:28:8e:ea:c8:02:07:8c:8a:49:f5:f5:d8:a6:be:
98:f1:9d:b6:2f:9d:39:1c:8d:85:2c:40:85:24:c4:
89:0c:65:69:8e:be:b9:17:6c:fc:83:dd:1b:14:a9:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:10:93:04:3F:13:59:D5:B0:11:8E:6A:02:42:94:D3:40:B5:85:EF
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/YBCTBD8TWdWwEY5qAkKU00C1he8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.58.0/23
Signature Algorithm: sha256WithRSAEncryption
32:dc:bd:06:3c:0a:41:4e:f0:08:9e:94:51:9f:ed:84:fa:46:
66:70:ec:4c:1d:e1:85:da:be:00:3e:73:61:7d:3e:6b:e5:2a:
32:a9:a1:a8:c4:2b:72:b2:d5:78:f3:77:e6:15:f5:74:c2:67:
18:6c:fc:7f:94:6d:3e:6f:8c:7d:d7:d7:3e:9c:e0:aa:22:70:
7d:82:a0:25:b5:89:4f:d1:5e:ad:62:10:6f:59:c3:56:c1:38:
00:de:41:ba:f8:0e:b4:df:8f:7d:63:67:05:54:d3:7d:85:27:
ec:de:70:36:70:65:c5:62:16:56:04:fa:63:8a:ad:a6:10:98:
13:a9:bc:15:37:57:02:97:76:29:a8:0d:79:c3:d9:50:5d:7a:
6f:25:0a:d4:3f:07:09:fe:c3:b6:b5:49:0d:11:99:bf:e2:92:
f1:fb:c4:ce:d8:43:04:7b:67:1c:10:6f:4d:d6:a1:dd:43:e1:
76:ca:df:ad:cc:1c:cd:7f:16:d1:0b:80:90:44:56:f8:8d:c7:
e3:09:8c:52:cf:00:75:ad:96:a7:23:58:05:9d:37:95:ba:e1:
1a:ce:d2:ff:d3:b8:e3:c5:05:52:ad:9d:39:0d:05:2b:ff:5d:
72:83:61:79:7a:cf:52:77:11:10:3a:4a:11:b3:7a:bc:a9:d9:
73:93:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:58 2024 by rpki-client on console-fra.rpki-client.org