Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/YXO-aWH0u3n5Hw-oU_QNgbxd5LM.roa
File: YXO-aWH0u3n5Hw-oU_QNgbxd5LM.roa (raw, json)
Hash identifier: wfTCb/WXauAWfNdQ6s/KWoV9cnsK2s7P6+609YI+yxI=
Subject key identifier: 61:73:BE:69:61:F4:BB:79:F9:1F:0F:A8:53:F4:0D:81:BC:5D:E4:B3
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 0187A35F942AA0330BE26CAB602BD4BA62D9
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/YXO-aWH0u3n5Hw-oU_QNgbxd5LM.roa
Signing time: Fri 21 Apr 2023 10:32:42 +0000
ROA not before: Fri 21 Apr 2023 10:32:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60893
IP address blocks: 89.18.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:5f:94:2a:a0:33:0b:e2:6c:ab:60:2b:d4:ba:62:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Apr 21 10:32:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6173be6961f4bb79f91f0fa853f40d81bc5de4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b9:32:37:94:df:2b:05:04:42:07:0d:1f:e5:
97:1e:76:5a:f0:1d:21:eb:14:32:d6:b0:d5:75:64:
3a:04:b7:49:63:8e:e2:a0:6a:9a:90:72:83:62:bd:
f0:97:a8:67:2e:e2:b5:37:2b:f3:02:8a:ab:a4:fc:
b1:26:c2:09:bb:60:5d:15:3e:b8:22:d2:1c:8e:43:
83:e5:cd:81:74:a6:d0:e2:29:5f:5f:70:e3:74:50:
33:16:52:b5:98:43:c9:72:f0:30:ed:df:c2:32:42:
b9:50:09:8f:7f:b2:6f:f7:f7:56:ea:1f:c4:17:82:
0e:b8:6c:b1:5f:7e:e7:3f:2c:af:de:09:82:a2:cb:
62:03:74:7c:c6:6e:fb:11:ca:61:70:9b:68:64:d5:
3e:ac:47:c9:a8:ff:b6:5f:fd:87:79:e2:d1:ee:46:
97:16:d0:45:5f:3f:de:cf:c2:78:c4:49:5a:7a:da:
a3:66:a4:d8:ba:fc:14:65:44:1e:ae:d3:36:e0:e6:
2d:e7:70:4d:8b:e9:31:9c:04:68:79:e7:91:76:d5:
75:93:6b:6c:1b:5f:cb:74:e2:f2:20:e0:e8:5a:89:
4b:e3:86:ed:1e:5c:15:9a:08:e5:63:bb:a0:c1:96:
d4:d7:ad:c0:f4:6f:a5:9c:e9:08:30:95:be:24:d3:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:73:BE:69:61:F4:BB:79:F9:1F:0F:A8:53:F4:0D:81:BC:5D:E4:B3
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/YXO-aWH0u3n5Hw-oU_QNgbxd5LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.175.0/24
Signature Algorithm: sha256WithRSAEncryption
83:98:d6:ee:ca:e4:fd:4d:fe:29:8b:a3:a3:c9:21:18:4f:39:
48:2e:89:9c:d2:f3:1a:4b:d6:aa:3c:4c:6b:07:55:9c:83:bc:
be:57:04:66:b5:5f:d1:f6:2d:50:7e:f6:79:37:9e:a2:32:7b:
8e:57:b7:10:6b:76:80:aa:41:e3:71:80:30:be:61:f5:c8:dc:
e8:c3:f3:31:10:71:2d:72:d9:c3:a8:61:a2:3b:df:e5:51:de:
40:1a:26:bf:c1:f8:9c:f7:af:76:30:1a:af:87:2d:83:34:ae:
88:12:ac:ca:30:84:39:e7:f3:2f:3d:68:67:be:64:0d:f9:e1:
a1:d8:a7:d8:98:cc:cd:fc:bb:76:f8:31:ae:5a:c0:87:fc:1a:
ca:45:54:f6:f5:7b:32:71:ef:b8:8d:69:2e:9c:d6:d8:2a:15:
2c:d5:8a:66:44:50:81:6d:e8:d5:b3:9a:3c:4e:a0:99:3c:a8:
52:8e:2c:e6:60:e8:7a:20:44:ed:b6:b3:11:f7:08:3d:ff:3e:
94:d0:78:bd:df:ae:3a:70:8e:43:78:c4:a2:33:2b:84:24:34:
21:6f:4e:4d:3e:b7:81:45:5a:50:f2:cd:18:aa:9d:45:4f:41:
e7:fb:f3:41:23:8a:6b:18:15:a1:75:6f:b2:8e:6f:8a:3b:3a:
e5:d1:8a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:07 2024 by rpki-client on console-ams.rpki-client.org