Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ynBpSRrRyBRpNcQOh54SwTCM-QI.roa
File: ynBpSRrRyBRpNcQOh54SwTCM-QI.roa (raw, json)
Hash identifier: JLIGVH/3nYj1IA3XE20S9Su+5WZFZKT/znLDsrlzufs=
Subject key identifier: CA:70:69:49:1A:D1:C8:14:69:35:C4:0E:87:9E:12:C1:30:8C:F9:02
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018C6D615BEEFF7B1F7FDA58558AD02D4FCE
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ynBpSRrRyBRpNcQOh54SwTCM-QI.roa
Signing time: Fri 15 Dec 2023 12:09:06 +0000
ROA not before: Fri 15 Dec 2023 12:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.255.56.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:61:5b:ee:ff:7b:1f:7f:da:58:55:8a:d0:2d:4f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Dec 15 12:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca7069491ad1c8146935c40e879e12c1308cf902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:59:84:d0:48:e9:08:7c:49:b5:56:8e:dd:fb:
2e:f7:dc:20:d3:6b:9a:d4:fe:8e:d5:11:4d:f1:12:
d9:cd:e5:bd:d0:b7:e9:0f:9b:e0:9d:f9:67:ac:41:
14:5c:78:08:3e:dd:2c:db:85:7f:a1:a4:fa:d3:8c:
03:14:61:68:ed:80:68:58:5a:32:ce:f1:72:41:68:
dc:da:8c:da:5b:17:89:44:b8:bd:92:cc:8a:c8:05:
e7:e1:d5:1a:47:7d:d6:17:0b:3e:f2:68:bf:ba:57:
a7:a3:2f:7f:98:c9:a8:ec:cf:a4:97:37:ed:b9:6b:
2c:41:fc:27:e2:51:29:cd:0f:e5:1a:66:5c:29:0a:
61:80:86:c8:df:23:a1:f9:58:15:1b:d9:c7:55:95:
99:8f:0e:71:0d:94:3d:18:14:21:a8:26:c8:20:38:
e0:4c:32:9e:89:9c:9c:d2:9b:9f:68:0c:87:30:da:
b4:16:08:ae:e1:77:5c:37:df:61:8c:8a:2a:80:ad:
1f:bf:17:45:e0:bf:3a:b5:d5:ae:21:28:3a:4c:c9:
8e:dc:76:db:af:c9:65:8f:0c:65:59:4f:b3:0c:2d:
41:7b:25:0d:a7:ae:5b:e6:5c:ce:6a:f6:23:b2:cd:
c8:7a:73:cf:ab:65:60:90:8c:ad:be:01:50:7a:b4:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:70:69:49:1A:D1:C8:14:69:35:C4:0E:87:9E:12:C1:30:8C:F9:02
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ynBpSRrRyBRpNcQOh54SwTCM-QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.56.0/23
Signature Algorithm: sha256WithRSAEncryption
74:3e:48:09:03:f3:51:db:f2:72:df:50:1f:b9:c4:7f:b4:b4:
7a:9c:2f:3d:9a:89:8a:34:fc:d1:08:12:d8:bf:69:82:59:5b:
12:3a:db:c6:41:e4:91:4b:14:a6:f2:9d:eb:55:79:d0:33:42:
e2:47:70:6f:ab:48:42:e0:24:59:fb:37:58:eb:6d:cc:7b:3c:
14:5f:39:15:c6:a6:d8:c7:8e:cc:90:d3:55:8c:7c:96:3f:cc:
25:f6:87:1e:c1:14:f0:9c:40:82:d0:1c:2d:b1:1e:e3:45:cf:
43:d4:21:17:a9:2e:d8:5f:8a:d8:1a:0b:00:cd:67:02:25:dd:
7c:e8:0f:b1:4a:ae:75:1e:b7:e0:f0:fb:5b:76:76:1d:5f:da:
b9:f2:ca:63:0c:20:64:7b:98:de:eb:68:02:36:96:97:83:a2:
8c:9e:84:fd:b3:02:e4:cf:a4:d4:7e:f1:e3:74:eb:02:04:ed:
3d:04:91:be:e0:68:03:fa:71:0f:b7:35:f1:f2:62:c6:11:f3:
53:06:63:4d:81:f8:15:dc:34:5f:37:e9:96:33:2f:08:90:75:
40:8d:fa:84:05:29:60:c6:b3:4f:ab:bd:c5:51:91:25:96:1a:
7e:48:df:82:f2:6e:2f:cb:e4:4f:53:2e:be:7d:8e:a1:ed:ce:
c2:0c:25:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org