Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/YQWOmATlHQqa83dpHsxSY5Z3T4c.roa
File: YQWOmATlHQqa83dpHsxSY5Z3T4c.roa (raw, json)
Hash identifier: iuDtyhKTQnMRkuQnoATx6F6570zhI6K+p842rXMYJZI=
Subject key identifier: 61:05:8E:98:04:E5:1D:0A:9A:F3:77:69:1E:CC:52:63:96:77:4F:87
Certificate issuer: /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial: 018572E81FBC0A6340FAE6A9541E6AD3C223
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/YQWOmATlHQqa83dpHsxSY5Z3T4c.roa
Signing time: Mon 02 Jan 2023 14:34:53 +0000
ROA not before: Mon 02 Jan 2023 14:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47686
IP address blocks: 94.100.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:1f:bc:0a:63:40:fa:e6:a9:54:1e:6a:d3:c2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Validity
Not Before: Jan 2 14:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61058e9804e51d0a9af377691ecc526396774f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:8a:af:06:d5:6b:98:a8:1e:e2:32:9f:95:
b8:b4:e2:c7:ab:ba:26:0f:06:14:76:07:f4:a0:d8:
8b:a0:c6:2b:db:1b:12:52:4c:38:57:5d:8f:a7:fe:
bb:90:6b:1c:7c:7a:b5:b1:dc:71:27:d9:d2:6b:cb:
22:af:0d:2a:e6:f1:0b:3c:f1:bb:a4:74:75:41:49:
ec:47:39:d1:cd:df:ba:b0:a2:79:02:df:83:42:91:
fe:e6:1d:1f:ff:35:c6:a1:63:ae:3b:3b:8f:f6:e3:
c2:04:66:bf:85:11:4b:4a:eb:a2:e4:79:f4:18:f0:
d4:74:b5:f7:8f:dc:f8:e6:a8:7d:c7:a1:e2:72:a1:
3d:ee:83:06:e9:94:0f:e0:24:f3:2c:c4:c0:8d:76:
d5:0d:06:b2:d4:f4:d5:cd:1c:69:f6:fe:77:ba:bf:
0a:d9:75:e1:4f:ea:44:45:e1:b7:de:17:ad:24:26:
22:47:cd:f2:e1:c3:c8:e5:4c:29:bb:18:ea:f6:00:
00:cb:6d:03:92:86:26:d8:af:30:dd:d5:49:ee:dc:
dc:b1:16:9a:83:00:7b:da:23:56:26:a8:db:2d:18:
99:ec:83:7b:bf:41:90:47:bc:43:ec:89:18:e1:f0:
ce:d8:11:27:8e:18:df:09:71:29:73:d6:79:05:08:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:05:8E:98:04:E5:1D:0A:9A:F3:77:69:1E:CC:52:63:96:77:4F:87
X509v3 Authority Key Identifier:
keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/YQWOmATlHQqa83dpHsxSY5Z3T4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.104.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:9f:e5:b0:46:28:63:e1:1e:10:8b:e9:57:35:f3:3d:4f:c0:
c1:a7:40:26:c3:cc:61:ad:2b:76:37:53:6c:03:30:7b:ea:4f:
d6:e5:d1:6e:26:db:67:b3:91:e0:31:20:10:ae:b3:d2:b4:1b:
8c:21:dc:b9:4f:14:d8:27:61:72:ea:2d:a8:b6:d4:ae:ec:26:
04:4a:38:af:14:b7:42:52:68:42:a8:4e:c2:00:bb:a7:9b:5c:
ba:e4:f3:1e:03:64:4b:54:2b:b4:fe:9c:b8:42:cf:0e:e5:6c:
cf:ed:d2:d0:3b:da:9b:d9:d0:c4:89:33:84:cb:33:00:4e:4b:
81:ad:b7:a6:c8:a5:2d:5f:fc:6c:0f:05:34:5b:ff:91:95:9b:
28:ad:4c:ae:05:8f:ee:c1:e3:d7:ac:2e:71:bd:6c:c4:9e:a8:
d5:17:b3:c4:83:38:d6:7f:f5:f7:b9:7a:2f:d1:e4:ba:7d:24:
5b:58:3e:cf:8e:27:72:0f:90:96:de:cd:34:55:5c:3b:f9:e3:
45:0a:4b:c8:ec:e1:e1:ab:f6:30:13:b7:18:c2:73:f1:8e:76:
75:6f:a7:de:72:21:06:3d:5e:d6:b2:e8:8e:3e:59:3b:f7:6e:
4c:2e:b8:c6:f1:09:5c:fa:b7:51:d0:a3:af:74:7d:88:a1:95:
5f:3b:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:51 2024 by rpki-client on console.sobornost.net