Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/YXVtIwGOxfuQYujC_bl8XyNLGOI.roa
File: YXVtIwGOxfuQYujC_bl8XyNLGOI.roa (raw, json)
Hash identifier: M9yK4kVVzofRovNjzSrWRx/3ABUtFkDP/ZpxPnwyQhg=
Subject key identifier: 61:75:6D:23:01:8E:C5:FB:90:62:E8:C2:FD:B9:7C:5F:23:4B:18:E2
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018E6BB20C070CDFAB5A58BBF7371572DDCF
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/YXVtIwGOxfuQYujC_bl8XyNLGOI.roa
Signing time: Sat 23 Mar 2024 14:23:34 +0000
ROA not before: Sat 23 Mar 2024 14:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400909
IP address blocks: 94.241.162.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 15:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6b:b2:0c:07:0c:df:ab:5a:58:bb:f7:37:15:72:dd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Mar 23 14:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61756d23018ec5fb9062e8c2fdb97c5f234b18e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:c5:cf:56:38:95:25:ab:22:ef:29:e4:01:
18:a9:29:19:26:36:27:60:1f:0e:26:81:f8:35:48:
71:d4:3a:a0:89:56:98:d4:3d:40:5e:27:d5:fc:d6:
61:2b:8b:78:da:a4:fa:c9:b2:0b:0d:95:70:ae:9d:
25:cc:10:45:ca:bb:1a:8a:ae:90:d7:78:c6:40:c9:
92:c2:22:a6:2c:fe:12:aa:10:a1:b0:4f:8f:42:6e:
70:fa:90:13:ba:b9:32:09:54:c5:15:1c:54:8a:ce:
f6:e7:51:1f:48:e2:ab:a7:44:22:07:7d:1a:5c:5c:
d7:60:8a:c8:8b:7d:0f:2a:cc:fb:99:9a:6c:10:38:
3d:1f:43:8a:30:77:fa:bc:22:d9:31:97:5d:cc:82:
b3:6d:4b:5d:c5:2e:b4:a7:82:d2:14:47:00:df:ea:
93:6d:3d:9c:47:10:5e:33:4b:3a:d6:03:87:65:53:
36:5a:62:5a:c3:57:3d:17:55:74:af:62:e4:8f:bb:
cc:3d:ab:9e:ef:e7:96:8e:0c:e6:24:73:1f:b5:9e:
34:1a:27:0e:7a:80:db:c3:22:4b:5c:e5:a9:b8:07:
4a:98:37:cf:8f:f4:1e:e5:7c:35:58:16:ab:a9:68:
80:92:14:48:a4:20:fb:1e:75:9d:40:81:c1:c5:0e:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:75:6D:23:01:8E:C5:FB:90:62:E8:C2:FD:B9:7C:5F:23:4B:18:E2
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/YXVtIwGOxfuQYujC_bl8XyNLGOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.162.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:72:d8:21:9d:ad:40:0f:de:55:0f:e3:65:dc:1e:6d:84:b8:
3a:e5:f0:bf:18:b6:9e:56:e1:b7:2a:3d:4d:c7:cc:67:64:46:
fb:58:4c:49:22:66:1f:c6:9a:2e:52:00:ff:70:72:96:5a:e5:
dc:bc:e6:14:97:65:2f:f1:19:d7:2c:26:d5:8e:db:06:e3:fa:
9e:e1:59:6e:63:a6:eb:6b:e0:30:bc:04:66:85:5a:e3:52:74:
ba:9f:66:75:77:28:b0:dc:c9:75:c7:f6:09:c1:4b:a9:9e:14:
f2:a6:d3:d4:51:26:70:53:1a:35:5b:c5:c4:6e:c2:10:7f:d0:
c1:d5:61:ff:87:87:f6:ec:24:37:b9:4b:36:9f:f8:1a:a2:ec:
f0:26:a4:23:7c:4a:47:fe:86:71:5e:e4:1c:9f:20:37:d4:27:
29:43:5d:e4:b6:f0:8e:a9:b1:1c:3c:d3:d1:45:5e:bd:f8:17:
9e:89:75:ea:48:70:8e:35:a4:62:e1:d0:ab:89:77:f8:77:15:
27:ef:1a:b7:ae:6f:4f:9e:78:d7:69:93:15:a5:f6:13:bd:1c:
5a:a1:6e:98:15:9a:34:ed:84:79:f6:4e:63:e5:4d:08:14:9f:
58:8d:5a:c4:45:84:4b:96:f1:ed:62:60:8a:86:c1:27:6a:a2:
1d:ff:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 23 21:06:09 2024 by rpki-client on console.sobornost.net