Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/yB88Y2oqKSAAA0Rk4ocBxbiQTSQ.roa
File: yB88Y2oqKSAAA0Rk4ocBxbiQTSQ.roa (raw, json)
Hash identifier: ho7ya8aOgZOWSX6ctV24daE5H31Q6EL2HFy4S8rxle4=
Subject key identifier: C8:1F:3C:63:6A:2A:29:20:00:03:44:64:E2:87:01:C5:B8:90:4D:24
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC2DB64FE41E1CD4F6E3264563482328B
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/yB88Y2oqKSAAA0Rk4ocBxbiQTSQ.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56769
IP address blocks: 192.162.67.0/24 maxlen: 24
192.162.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 07:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:64:fe:41:e1:cd:4f:6e:32:64:56:34:82:32:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c81f3c636a2a292000034464e28701c5b8904d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0f:0b:8c:60:50:10:e7:51:8a:db:6a:e3:b9:
3f:bf:38:05:61:b0:91:18:c3:4a:1a:b4:23:ed:11:
3e:c6:2f:bf:52:04:2d:50:51:5e:6f:d9:62:32:59:
c2:5a:a7:e5:85:ed:33:b2:c6:df:07:bd:87:ea:90:
8c:a7:d4:55:fb:e3:59:e8:55:db:19:c1:fa:a6:d6:
67:0f:e5:93:d4:13:d1:a0:7d:c4:df:ff:8e:d9:7f:
63:b6:cf:8c:08:2e:ed:df:7a:7a:a4:ef:89:21:1c:
2b:e0:1d:95:a4:24:24:a9:53:58:62:fc:dc:84:4f:
ce:03:8a:a2:2d:dc:6a:5c:9a:80:78:b1:2e:78:e0:
6c:26:0e:09:de:af:6d:cb:4c:1e:25:43:0c:2b:42:
55:49:d8:37:e2:10:8b:9b:ae:4f:5f:48:63:39:b8:
9e:6f:43:dd:1f:57:37:92:3b:e7:fb:72:31:4a:36:
cb:6f:85:6e:3b:dc:ad:9f:fc:2e:6b:39:dc:ae:1c:
29:20:2c:fc:69:0f:4f:85:c4:58:8f:a3:52:13:91:
4d:af:3a:d2:e6:8a:48:86:ff:e2:90:db:a0:35:73:
a9:70:f1:6c:64:c2:35:99:5b:07:06:01:72:b3:6b:
19:41:3e:b5:05:aa:f1:9d:9d:5b:59:69:58:a1:41:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1F:3C:63:6A:2A:29:20:00:03:44:64:E2:87:01:C5:B8:90:4D:24
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/yB88Y2oqKSAAA0Rk4ocBxbiQTSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.66.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:88:6a:49:38:5f:e4:69:50:f8:3f:1a:90:b1:37:fe:40:67:
b4:1b:0f:a3:50:2c:47:f1:4a:a0:e1:02:ba:09:f2:3f:59:2c:
cf:74:b2:ff:ee:b3:95:cb:19:c8:30:1d:5f:af:5d:1c:3a:b7:
b1:77:c8:72:30:49:eb:65:76:36:f3:a1:ef:0e:0c:00:20:64:
70:1a:21:e6:3c:ea:5b:34:ee:be:5e:a6:e9:ab:ec:31:23:85:
de:32:16:ab:36:c4:80:5f:64:07:d4:c1:97:21:98:62:2d:a0:
61:1b:df:6a:30:86:31:df:8d:cd:44:65:c9:11:b0:11:30:d7:
76:8a:b3:c7:16:56:dc:0a:63:42:0e:1b:dc:7d:04:06:0a:9f:
61:1d:7f:7d:35:0a:f6:65:5b:fe:1f:04:4a:60:a2:5c:71:d8:
61:56:a2:31:6f:a2:c1:bd:ad:01:75:59:91:0f:99:b1:a9:4a:
22:75:ba:4f:f1:d2:b5:b0:f5:b5:ba:32:73:c6:60:40:98:ab:
7c:b9:82:8d:ca:03:a7:71:75:eb:4c:54:ec:8b:a6:d6:59:16:
c8:df:e8:d9:4c:db:66:44:81:48:2c:06:7f:7b:d9:20:aa:17:
1f:83:02:fe:11:4d:bd:32:e8:1a:55:c5:52:9e:f8:30:d3:36:
4c:b5:58:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:01 2024 by rpki-client on console-fra.rpki-client.org