Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/yjFwVYwKIWPCw_wdNWGXNV7NIjA.roa
File: yjFwVYwKIWPCw_wdNWGXNV7NIjA.roa (raw, json)
Hash identifier: jDm9CMo0Fu5RcP38etwe7ypM4n+XrXKX2lLlXADw7qk=
Subject key identifier: CA:31:70:55:8C:0A:21:63:C2:C3:FC:1D:35:61:97:35:5E:CD:22:30
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC795208B8084DBB996805CA007AED0FB
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/yjFwVYwKIWPCw_wdNWGXNV7NIjA.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50738
IP address blocks: 193.32.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 09:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:20:8b:80:84:db:b9:96:80:5c:a0:07:ae:d0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca3170558c0a2163c2c3fc1d356197355ecd2230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:55:50:8b:48:8c:7f:73:fb:cb:1e:6e:e7:
2f:06:28:c3:f7:03:c2:a9:fa:6f:07:c6:d0:8e:7f:
a5:45:c1:3d:84:dd:a0:45:ab:6f:f2:fe:73:1e:d4:
4c:12:0b:5a:59:c8:b5:33:c0:43:af:c0:3d:ef:cc:
17:fc:e9:35:e6:33:f3:97:2a:c8:c2:65:8f:c0:2a:
76:3d:e2:3b:06:1b:1b:c2:41:fc:e0:77:13:62:5e:
47:aa:1a:1d:6b:03:9f:f3:f5:fd:cf:bc:73:d2:2c:
f1:0c:8e:17:c4:1a:b5:95:68:4a:c8:dd:40:ff:20:
ee:ae:ec:a7:82:70:23:02:f4:a9:d0:01:30:54:a3:
5a:66:46:64:f8:9d:3e:a5:95:fb:6b:98:e9:24:18:
b1:f9:fa:ad:df:e8:56:e0:53:02:bd:48:76:ff:b9:
ce:3e:d3:15:5c:f2:d0:29:1d:f6:c8:5f:89:ef:f3:
0a:f3:75:e1:0c:b6:3a:22:56:59:33:c0:66:f4:f8:
26:bf:ce:65:e6:46:de:d4:2b:aa:3f:35:48:74:38:
4f:26:70:6c:3d:0e:f0:ae:48:57:b3:a4:4a:cc:1d:
32:0f:ca:92:96:db:f0:74:4c:c1:69:70:ed:22:74:
75:90:e1:43:9e:42:b1:d4:df:ce:bb:5d:23:a4:ca:
f9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:31:70:55:8C:0A:21:63:C2:C3:FC:1D:35:61:97:35:5E:CD:22:30
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/yjFwVYwKIWPCw_wdNWGXNV7NIjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:44:45:ac:70:8b:d0:3a:09:33:8d:1b:0d:46:9c:82:bf:20:
12:3d:8b:3c:e4:37:10:97:96:6d:dd:54:76:0c:63:bf:79:eb:
29:7a:0a:79:e5:bc:a2:81:ea:44:3c:df:9b:e0:e9:ac:71:85:
05:da:de:d2:a7:8a:b1:6b:d4:9b:9d:cf:55:1e:83:ac:24:53:
b7:11:f9:e1:ac:8b:17:41:8a:74:c0:b0:8f:dc:f5:c1:4b:99:
dd:9b:03:bf:81:05:cc:06:bc:75:6f:4b:dc:93:5c:99:84:17:
02:a1:1f:56:64:c0:59:93:c2:20:44:4c:4e:54:e5:19:03:df:
ea:41:ca:7c:16:2c:22:4d:ca:70:b3:2e:f0:3a:7a:dc:42:5d:
4f:dd:e1:42:23:fa:cc:f0:6d:76:2f:bd:fc:7a:17:f9:fa:fa:
d2:b1:19:7e:0f:d9:4b:2b:46:7d:80:c1:ce:bb:2f:d0:ce:d1:
a3:b6:ac:1a:45:7e:12:b8:fc:9a:1d:69:22:43:11:02:07:2b:
10:53:80:46:86:25:4f:d1:a0:db:05:6a:84:eb:b8:6b:e3:03:
bd:c4:12:ca:68:61:36:2e:7a:3d:0f:d6:eb:57:d3:a9:71:64:
1e:b0:85:84:31:b4:8f:ff:e9:29:a2:3b:1a:4f:21:6a:8a:53:
1f:ac:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:11:18 2024 by rpki-client on console-fra.rpki-client.org