Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/YPJKxgEsDZ6lHiJjWa3DkYch5KI.roa
File: YPJKxgEsDZ6lHiJjWa3DkYch5KI.roa (raw, json)
Hash identifier: qpsc0ifzgXEfjOVNcJHlzebalWnYG+lNx+vKkEbHCQE=
Subject key identifier: 60:F2:4A:C6:01:2C:0D:9E:A5:1E:22:63:59:AD:C3:91:87:21:E4:A2
Certificate issuer: /CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
Certificate serial: 0189CFA032F648AB9430A748B68A86B44FC4
Authority key identifier: 9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/YPJKxgEsDZ6lHiJjWa3DkYch5KI.roa
Signing time: Mon 07 Aug 2023 10:52:09 +0000
ROA not before: Mon 07 Aug 2023 10:52:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62119
IP address blocks: 91.193.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:a0:32:f6:48:ab:94:30:a7:48:b6:8a:86:b4:4f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
Validity
Not Before: Aug 7 10:52:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60f24ac6012c0d9ea51e226359adc3918721e4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:db:00:53:7f:e0:c2:9d:82:4e:bc:c7:e9:
b1:2f:5f:5a:e7:81:c8:80:fd:0d:06:61:55:8e:67:
94:69:cd:44:d1:7e:88:68:9b:e8:fc:3d:e5:14:43:
a6:c2:da:1f:cf:3d:04:08:d7:c3:79:c5:8e:3e:7c:
42:50:63:a2:29:17:97:50:50:e1:ce:a4:e3:02:f3:
aa:32:fb:ed:1f:2b:0f:9f:ae:35:d6:ea:71:c8:c3:
aa:3c:1e:69:87:7a:a2:56:c9:62:6a:ed:9d:c6:61:
0f:dd:cc:92:0e:e8:1c:75:84:a7:fe:ab:ef:9d:08:
8f:fd:7c:f9:c9:af:85:f4:de:ff:26:31:c1:e4:ad:
af:fe:cb:f1:b9:71:fd:e7:8c:b8:fc:04:b1:3a:6e:
06:be:19:35:4e:f5:79:02:54:8f:87:c6:14:0d:75:
3c:02:5f:54:2d:a7:f7:04:dd:84:82:c8:4e:af:14:
88:a2:da:65:d4:f0:55:fb:40:5f:e3:00:92:1b:d6:
49:e9:62:f0:60:13:07:ef:e1:7b:60:2e:0e:22:08:
5e:2b:34:3b:fe:85:22:67:8c:1a:81:48:d2:d1:28:
dd:75:c3:7c:5d:d2:e3:bf:ae:43:23:75:21:18:69:
6b:93:c5:90:d8:56:a9:76:1c:f5:b4:69:7c:29:68:
ac:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F2:4A:C6:01:2C:0D:9E:A5:1E:22:63:59:AD:C3:91:87:21:E4:A2
X509v3 Authority Key Identifier:
keyid:9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/YPJKxgEsDZ6lHiJjWa3DkYch5KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.91.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:6f:03:cd:cd:af:bb:a4:3c:ba:ad:3a:ee:b2:d8:6a:c2:f0:
c9:80:cf:d4:e2:fd:0e:d9:8c:ca:57:79:57:d9:6f:83:d2:59:
4d:e2:75:57:42:28:2e:fc:d0:23:e1:f9:e8:d5:e8:8c:aa:85:
13:0b:6a:e1:2d:da:15:c4:ad:ec:41:1e:72:6d:ee:64:de:dc:
fa:09:04:c5:db:ee:f2:c2:ff:39:0c:a1:3a:6e:57:89:60:08:
44:a5:e2:e2:e9:47:7e:e5:65:5b:7f:cc:23:7c:7e:08:1d:13:
7f:24:87:e6:b0:ba:89:50:f2:41:47:a9:09:19:5a:c0:6a:36:
18:29:6e:0c:f1:ee:a4:4c:7e:cc:d8:75:24:65:70:b9:c2:10:
e9:3e:db:df:94:ab:15:61:96:4d:be:7b:7a:3b:dc:15:a3:eb:
26:33:00:87:68:b7:3a:a1:fc:77:5a:a1:7e:f1:1d:f2:c7:be:
03:fd:8e:2c:2c:17:b5:a7:77:3f:a6:db:59:1c:dd:b8:ca:cc:
94:2d:54:1f:9e:0f:b4:7e:f1:c0:26:ea:f6:c6:41:f8:3a:8f:
28:6b:6b:ac:46:1a:d8:c6:bd:47:19:49:74:63:ea:62:1e:6c:
a4:c9:e1:1c:da:f6:9c:e9:97:15:f0:84:41:74:f7:c0:2f:9a:
08:5f:64:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:25 2024 by rpki-client on console-ams.rpki-client.org