Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/yaEpwFWFw94I3XRol1dNHhDKu8c.roa
File: yaEpwFWFw94I3XRol1dNHhDKu8c.roa (raw, json)
Hash identifier: /KGYVMrGzoo2jlbMdFmhKxFlwklICtY+pHrw2Z2qECY=
Subject key identifier: C9:A1:29:C0:55:85:C3:DE:08:DD:74:68:97:57:4D:1E:10:CA:BB:C7
Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial: 018CC727640E9EE4DE602085AAF65A96A5EA
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/yaEpwFWFw94I3XRol1dNHhDKu8c.roa
Signing time: Mon 01 Jan 2024 22:31:36 +0000
ROA not before: Mon 01 Jan 2024 22:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48218
IP address blocks: 93.180.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 15:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:64:0e:9e:e4:de:60:20:85:aa:f6:5a:96:a5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Validity
Not Before: Jan 1 22:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9a129c05585c3de08dd746897574d1e10cabbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:c5:a6:96:d4:10:a9:41:b6:b3:c5:4d:ce:
5f:71:d7:43:13:fa:54:72:0c:d3:60:c8:bc:f5:1d:
48:7c:00:dc:10:d7:2e:e3:b7:89:76:35:2a:0c:41:
d9:b4:6e:68:04:f3:7d:24:99:2f:2a:0f:18:76:d9:
6e:dc:76:f8:55:8b:e4:19:40:6f:a0:83:ca:e4:af:
fd:72:ab:5f:80:8a:d5:7d:ff:1d:97:aa:7e:ca:50:
92:75:9e:fb:7d:7e:27:96:e8:b5:c0:48:fb:0b:94:
6f:88:16:7d:44:e3:47:37:4e:49:51:7f:55:54:a7:
e6:e2:49:c9:89:ba:25:16:d2:c2:04:6e:86:33:41:
6b:42:5a:60:82:ad:c0:74:88:1b:b6:9e:30:64:a9:
c6:6f:a1:05:39:87:de:96:5e:79:cf:d7:3e:b0:02:
46:94:ee:6a:ff:8d:6b:5c:3f:11:7e:1d:8a:9a:3b:
81:d0:c1:72:8f:9a:f1:cc:97:f3:da:5e:0f:e2:45:
52:08:45:bc:77:25:17:62:f2:89:05:67:b5:aa:cd:
37:7c:39:d1:79:f7:64:95:21:34:81:be:4d:01:f2:
fe:29:77:4c:b5:52:66:94:ca:f2:21:a8:87:a7:bc:
e4:d4:65:a8:1b:ef:83:c0:bd:82:e1:bd:19:f0:28:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A1:29:C0:55:85:C3:DE:08:DD:74:68:97:57:4D:1E:10:CA:BB:C7
X509v3 Authority Key Identifier:
keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/yaEpwFWFw94I3XRol1dNHhDKu8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:29:d5:d7:2f:f6:94:35:5f:dc:ac:dd:39:d2:db:42:9c:19:
87:d9:f0:c1:42:7c:6c:3d:fc:25:5e:bb:c3:30:e8:aa:95:4e:
a7:44:0e:b0:7d:d3:5e:94:f9:10:08:0f:fe:44:b1:df:13:ce:
ed:df:ab:1a:b3:ae:63:c9:b2:2b:d9:c5:cc:84:1f:b1:c4:8a:
df:61:a0:11:a5:e4:8d:35:b1:5f:ab:c5:06:bf:32:f2:8a:2b:
9d:9b:5b:c3:07:c8:e5:37:78:6a:64:9b:28:af:a1:67:a9:d5:
36:f6:53:3d:6d:30:ba:8e:2f:e0:30:27:2a:c7:88:50:da:45:
84:0a:7a:9b:aa:56:e1:d5:2d:ef:d8:75:62:c7:5d:6e:18:b2:
bb:88:32:25:a6:8e:06:75:df:ac:f9:92:62:34:9c:89:19:dc:
cc:3f:19:ed:87:e0:e5:fd:c9:c9:e1:0e:60:88:02:5d:6a:36:
48:30:ec:95:01:82:52:26:86:fe:55:3f:2f:f3:b9:2e:bf:04:
76:0a:46:be:77:eb:29:0f:fe:79:c4:ec:b5:c2:ff:e0:7c:85:
38:62:68:2d:7b:b2:c4:dc:70:60:5c:17:b7:5c:20:31:65:ec:
29:84:59:43:5c:5a:23:5f:44:76:1a:06:7e:da:61:d4:74:d2:
26:86:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 19:48:56 2024 by rpki-client on console.sobornost.net