Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/ykTbv0sZx_ze7Dx9vqhUhAnEC44.roa
File: ykTbv0sZx_ze7Dx9vqhUhAnEC44.roa (raw, json)
Hash identifier: Pn8TH+ayPF96Ca5Tk06NHMCmDVkN8x84zBcEFZ76Vgc=
Subject key identifier: CA:44:DB:BF:4B:19:C7:FC:DE:EC:3C:7D:BE:A8:54:84:09:C4:0B:8E
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 018572BA65053E7506EEBA8F28D447766992
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/ykTbv0sZx_ze7Dx9vqhUhAnEC44.roa
Signing time: Mon 02 Jan 2023 13:44:56 +0000
ROA not before: Mon 02 Jan 2023 13:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196651
IP address blocks: 195.246.244.0/24 maxlen: 24
195.246.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:65:05:3e:75:06:ee:ba:8f:28:d4:47:76:69:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Jan 2 13:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca44dbbf4b19c7fcdeec3c7dbea8548409c40b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:12:c1:23:86:42:35:de:e7:49:d0:fb:16:
93:ff:3a:9e:da:4e:76:db:67:e0:11:d3:20:6c:30:
91:e8:85:9d:d9:b2:f8:63:ca:50:ef:ad:7c:0d:2f:
80:16:6e:51:a2:24:09:b8:74:72:d0:01:2a:ff:6b:
75:cc:96:1e:38:dd:b6:f2:14:de:21:8d:ac:df:66:
64:81:33:ea:97:79:e9:d7:2f:64:87:ba:bf:15:c5:
17:c7:c0:20:d2:b2:1b:c5:f6:ec:ab:50:28:c9:aa:
b8:b4:89:b8:0f:4d:14:db:7d:a3:54:a2:10:52:cf:
46:ee:f3:0a:87:da:31:2c:96:a7:0c:37:a6:29:7e:
0a:29:a9:80:c9:1d:17:67:70:17:16:42:01:02:1c:
7f:0f:47:0f:28:2b:1a:9a:70:f2:c3:5e:bd:2a:19:
eb:df:b1:1e:af:ff:42:4f:05:34:36:5e:69:4b:6a:
4b:1f:78:bb:62:16:4a:a4:79:09:8a:b1:ea:52:94:
f6:c7:b0:6b:f2:a9:fe:c3:81:5a:ce:ef:07:e3:e4:
0b:1d:b1:09:ae:e4:de:e0:56:d3:f4:cd:99:66:2f:
42:94:8d:ac:64:57:73:79:b2:96:d3:af:07:1b:50:
f2:07:53:b7:f9:31:b6:bd:a2:d6:bb:45:8a:d6:f2:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:44:DB:BF:4B:19:C7:FC:DE:EC:3C:7D:BE:A8:54:84:09:C4:0B:8E
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/ykTbv0sZx_ze7Dx9vqhUhAnEC44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.244.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:59:db:be:c7:84:d0:5e:76:0e:b4:4e:a3:17:fe:f1:8a:8f:
1b:e5:95:c1:99:d8:e3:ff:45:af:60:7e:f2:d6:28:b9:86:0f:
63:57:4d:c3:df:35:52:ba:60:8a:52:83:5f:cf:90:2b:a4:a5:
e1:18:72:78:a1:f8:9c:04:32:13:d8:28:25:77:85:1e:65:a0:
97:ba:a7:9c:12:51:3d:c1:1e:4a:1c:18:86:89:1e:b2:a2:96:
35:ee:4f:f8:f3:85:50:00:1c:10:63:af:58:51:37:ef:31:06:
b6:d2:d8:0a:87:6f:e8:ac:32:a1:bc:dc:1e:50:f9:d8:60:18:
b9:a4:2a:1b:98:27:94:63:9c:5b:d4:f5:af:2b:4c:de:be:d5:
a3:43:b8:e7:06:d0:41:fb:20:64:f1:23:9a:db:ec:37:bd:f7:
89:ef:31:76:75:a3:a8:67:d5:55:98:ca:a3:96:8f:80:1b:38:
d3:07:59:60:33:8f:87:99:83:98:78:a7:59:5a:03:ab:27:bc:
1b:4e:0b:ad:97:6b:b7:eb:c6:ed:7d:b9:5e:b4:57:5b:0e:6b:
48:90:0c:20:93:38:a0:40:69:4f:b2:10:49:38:2f:cb:f1:46:
a2:b9:33:c0:9a:6a:b1:31:3f:f8:e1:b6:6d:db:e5:43:ca:8d:
49:5f:c4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:27 2024 by rpki-client on console-ams.rpki-client.org