Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yLL7m3Frm1G6SX6Q1R0fg6BwI5E.roa
File: yLL7m3Frm1G6SX6Q1R0fg6BwI5E.roa (raw, json)
Hash identifier: gm1CgN8XHmL01VO/qtFHeDfDdr9p5yoY1ZYegd8dZJY=
Subject key identifier: C8:B2:FB:9B:71:6B:9B:51:BA:49:7E:90:D5:1D:1F:83:A0:70:23:91
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAC91F8D038F561739C59DA1C7C3D5
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yLL7m3Frm1G6SX6Q1R0fg6BwI5E.roa
Signing time: Sun 01 Jan 2023 10:05:06 +0000
ROA not before: Sun 01 Jan 2023 10:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1881
IP address blocks: 192.121.30.0/24 maxlen: 24
192.71.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:c9:1f:8d:03:8f:56:17:39:c5:9d:a1:c7:c3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8b2fb9b716b9b51ba497e90d51d1f83a0702391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:75:a2:1e:1b:8f:94:44:e3:1e:d3:05:91:
fa:a9:19:86:52:ff:92:95:4e:84:ae:61:5f:c3:b8:
9d:91:26:b2:ac:af:96:d5:a0:1e:36:c8:60:9c:5e:
ba:1d:4b:d6:08:60:ad:74:60:c7:fa:b7:ac:63:20:
c3:51:eb:23:c1:68:bb:5e:8b:91:50:94:5e:06:09:
51:8b:ef:e4:23:70:c0:e0:33:ff:87:70:68:a6:94:
87:aa:b1:4d:a5:10:25:2b:d8:4b:39:b1:c0:d5:ea:
5a:88:a5:33:15:e3:90:13:ff:e2:d6:d7:02:f7:28:
34:1d:01:57:ec:c4:1f:82:82:be:98:4f:28:ef:bf:
dd:52:84:7c:2b:4d:d5:4a:9a:d1:91:9a:60:8c:57:
af:4c:d7:10:1a:48:47:9d:79:e5:a6:ea:d5:1e:85:
ff:8d:a6:bf:c6:2d:50:5a:3e:65:19:cd:ba:52:b1:
66:18:e0:16:bb:4e:e0:a5:96:de:37:f4:a3:f7:54:
d1:97:69:c8:6d:27:0d:db:dc:40:4e:67:f8:ab:2c:
a1:c3:98:bf:9f:de:d7:f1:4c:18:a1:f4:12:bc:c6:
54:9f:07:81:53:94:3d:d0:5c:93:e7:e2:53:c8:23:
26:b4:b8:d2:90:b4:b1:e6:c4:3d:dc:9d:30:5d:86:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B2:FB:9B:71:6B:9B:51:BA:49:7E:90:D5:1D:1F:83:A0:70:23:91
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yLL7m3Frm1G6SX6Q1R0fg6BwI5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.128.0/24
192.121.30.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:45:d7:e7:4d:94:3b:9a:fb:87:5d:14:bc:64:a5:67:a0:da:
72:a2:c9:33:de:6d:fd:c6:e1:3b:3a:d8:87:33:55:46:1b:d7:
ec:62:03:05:27:ae:c8:3e:29:57:12:cb:83:45:cf:d0:44:c5:
68:c8:68:4a:4f:6e:e3:07:29:a1:37:82:71:fb:d9:c7:31:52:
29:a1:cd:08:96:17:c2:df:f9:9b:02:65:66:c6:37:3a:87:f1:
0b:94:74:dd:53:dc:3f:20:b0:3c:4f:db:02:8b:c3:56:6e:2a:
a6:aa:34:70:7b:90:85:05:38:7b:0a:17:fc:68:51:a9:48:0d:
ae:5a:53:07:e1:98:a0:dd:67:20:bf:28:6a:3c:90:0d:cf:87:
e7:c3:f8:2d:6c:71:80:5b:df:43:2d:64:63:86:8b:a4:98:41:
0a:07:9b:65:03:a0:ca:9b:68:6f:bd:1c:d5:2b:38:11:1a:47:
75:fd:0c:1e:62:a4:74:f2:67:34:bb:0a:bc:63:c0:dd:38:ae:
30:50:1e:df:80:2c:60:9f:09:a5:1d:83:a8:b6:dc:04:02:e2:
61:dd:84:0d:9f:19:27:48:71:96:30:c1:5b:52:40:31:41:9b:
7e:39:82:b3:a1:a4:c0:96:ac:48:74:f8:46:9b:8a:7d:b3:9e:
fc:45:f2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org