Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YebCTRQFY_AC8ZRvaJRBuSAKydI.roa
File: YebCTRQFY_AC8ZRvaJRBuSAKydI.roa (raw, json)
Hash identifier: /MeZpiCfC8LpBHolcOcvaIGPQ/HBDxTOi9t7BDR7I2Y=
Subject key identifier: 61:E6:C2:4D:14:05:63:F0:02:F1:94:6F:68:94:41:B9:20:0A:C9:D2
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018B27A4394F885969BD3C5C090E5A5580DA
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YebCTRQFY_AC8ZRvaJRBuSAKydI.roa
Signing time: Fri 13 Oct 2023 06:05:55 +0000
ROA not before: Fri 13 Oct 2023 06:05:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42055
IP address blocks: 77.242.150.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:a4:39:4f:88:59:69:bd:3c:5c:09:0e:5a:55:80:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 13 06:05:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61e6c24d140563f002f1946f689441b9200ac9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:d3:f9:31:83:d0:c7:86:b1:ab:3b:9f:19:
3a:de:a6:8d:48:32:b3:44:fb:7c:98:71:04:4c:51:
76:97:cf:a2:ef:63:5b:a2:7d:7d:61:61:de:8a:48:
e2:71:3f:38:5a:50:11:cb:85:23:fb:46:e5:a1:e9:
af:3a:94:ad:b0:22:e1:f6:70:98:2c:6e:36:c6:55:
23:e7:42:f7:1e:cf:d2:ee:b9:e3:e0:c6:ac:9c:37:
09:0e:2f:bd:88:3c:af:8b:30:d2:61:43:ef:8f:32:
d4:fb:f8:d8:28:0b:23:c8:ff:80:7e:9b:ea:5f:4a:
8f:03:a2:1a:e2:a1:9b:87:0d:55:44:08:ea:ef:19:
74:68:b0:36:a0:c0:4d:a8:a8:34:52:61:3b:a0:f7:
17:1b:4a:92:fa:fd:c6:00:36:bb:75:8d:35:5b:c6:
d2:22:3e:0d:fb:aa:0d:80:bf:c2:4f:86:38:46:78:
99:86:68:4e:b9:df:5f:cc:f9:9b:71:78:4b:9a:7c:
17:f6:8c:d0:e6:ef:bc:86:16:b5:3c:7d:6a:c6:2f:
5f:0b:11:40:37:df:7e:c4:8d:22:73:99:02:5f:11:
87:36:b6:a6:dc:93:17:9d:68:2b:d5:25:d8:e1:bb:
ad:96:2c:f1:0a:6d:7f:e8:a5:46:b0:54:f0:79:37:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E6:C2:4D:14:05:63:F0:02:F1:94:6F:68:94:41:B9:20:0A:C9:D2
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YebCTRQFY_AC8ZRvaJRBuSAKydI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.150.0/24
88.151.62.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a8:7a:a1:7a:77:bc:8b:9e:9b:1c:7a:8c:3c:60:a5:1b:fd:
3b:a2:04:cc:41:7e:16:92:2e:f0:bd:25:12:99:15:01:51:6e:
36:f6:4c:94:c8:4b:86:f8:4c:87:47:3b:76:9b:fb:fd:b6:37:
73:7a:9a:98:3c:d2:0a:4b:eb:cc:3e:38:5b:f2:c7:be:45:de:
51:d9:b5:ca:13:83:49:7c:40:a2:51:fd:99:a9:f7:eb:bf:b8:
4e:df:c3:c6:a5:92:ad:7a:34:f4:23:8c:77:27:ab:20:69:80:
e0:2a:58:01:d2:83:25:b2:76:b6:16:a2:c3:b1:10:bb:42:1f:
75:8a:13:b0:31:0b:79:03:83:68:af:ea:ee:5a:0b:82:4f:d9:
ec:7e:ae:f0:5e:f1:92:a9:19:71:a8:9f:2f:09:b7:d4:56:f2:
d1:e0:b3:72:57:c7:d1:98:c0:47:a8:8c:b0:eb:86:4d:2d:4d:
c8:02:fe:29:cf:01:94:8d:43:40:71:b5:86:4f:81:7c:33:b9:
04:59:26:22:10:51:8d:f6:14:5f:8f:7f:c3:e6:c7:a7:c7:89:
4d:32:f3:75:cc:c5:02:10:38:7b:3c:62:95:89:3b:bb:b5:77:
90:3f:da:cc:ee:de:21:ad:f2:7f:0d:d2:24:63:7c:9f:bf:8c:
a0:48:dd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 06:34:38 2023 by rpki-client on console-ams.rpki-client.org