Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Y6alo3sJnRmyYS6fYFVMuNp-PaY.roa
File: Y6alo3sJnRmyYS6fYFVMuNp-PaY.roa (raw, json)
Hash identifier: 5H6c1CD48J25PnZvmE5Ff2on0D83xU0YPrsjwdGIXXE=
Subject key identifier: 63:A6:A5:A3:7B:09:9D:19:B2:61:2E:9F:60:55:4C:B8:DA:7E:3D:A6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A222E162D299AAF5FF80FCB69537BB954
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Y6alo3sJnRmyYS6fYFVMuNp-PaY.roa
Signing time: Wed 23 Aug 2023 11:36:00 +0000
ROA not before: Wed 23 Aug 2023 11:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 45.13.189.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
45.88.136.0/23 maxlen: 24
85.209.122.0/23 maxlen: 24
194.242.97.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:2e:16:2d:29:9a:af:5f:f8:0f:cb:69:53:7b:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 23 11:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63a6a5a37b099d19b2612e9f60554cb8da7e3da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:16:7a:eb:18:c6:87:07:96:8c:3f:2d:fd:
2c:6b:c0:92:9c:ea:31:11:90:58:bc:ce:71:50:e4:
f3:51:f0:0f:07:12:2c:da:3a:e1:9e:b5:40:98:ed:
98:cc:18:2e:57:b0:2d:38:08:56:5a:e9:ac:ab:5c:
ed:a5:51:89:9c:01:c6:c5:da:86:b7:60:09:f5:75:
f3:6f:3d:bf:87:23:37:99:19:3a:06:aa:a8:bc:49:
5b:2a:44:f9:a0:b6:5b:dd:23:db:68:cc:74:fd:69:
35:14:f3:9f:74:74:04:d3:64:e4:ad:f3:54:e4:23:
9c:b1:5f:57:88:33:b5:9d:41:4b:31:76:cc:26:53:
88:04:c3:d2:aa:ea:0f:c5:40:a7:03:9c:ab:a5:78:
c0:3c:65:3c:d7:e8:c5:e5:06:34:56:a0:ce:e4:43:
1b:73:9f:9c:9c:f2:80:61:c1:bd:33:cf:8b:7c:17:
7f:24:1c:3d:9f:79:74:f7:91:55:81:c5:0a:32:e7:
20:e2:31:71:35:c5:93:84:f7:05:33:55:be:80:53:
97:ea:47:fe:e1:5e:b6:72:94:6a:25:e6:3d:59:17:
ec:cd:1b:43:9a:b8:0a:82:f1:8e:d8:fd:7e:04:df:
75:3f:7e:79:63:fb:ca:e1:35:fc:cd:62:b2:35:e9:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A6:A5:A3:7B:09:9D:19:B2:61:2E:9F:60:55:4C:B8:DA:7E:3D:A6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Y6alo3sJnRmyYS6fYFVMuNp-PaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.13.189.0-45.13.190.255
45.88.136.0/23
45.132.181.0-45.132.183.255
45.144.212.0/24
45.151.3.0/24
85.209.122.0/23
194.242.97.0/24
195.177.92.0/23
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:23:99:63:a7:c5:2d:8a:36:a9:3e:9d:3a:eb:36:cd:6e:2f:
0a:41:5e:43:99:a4:a1:90:90:71:d9:38:23:5e:31:70:90:ee:
6f:b7:21:e0:1f:9f:97:01:a9:3b:76:e8:cd:f9:0d:04:90:33:
88:c8:a7:d7:18:9f:21:fa:89:f8:31:a2:e0:7c:93:d6:0d:b4:
d2:74:7d:e7:68:32:b9:e0:68:f1:3b:37:0a:46:88:b0:5e:82:
5a:46:94:ae:6c:bd:60:4f:b4:45:07:9b:22:67:0e:2a:9a:6b:
c5:9d:f4:40:64:09:19:83:b5:48:5e:fc:ad:fe:50:e3:28:8a:
cc:42:87:f0:7f:63:31:dd:01:b5:e0:1f:e5:22:c4:cf:35:97:
cc:95:2c:83:03:a9:27:62:d1:8f:b7:5d:df:39:f3:ed:9f:13:
47:d4:f9:cd:27:9d:77:a3:fe:fd:20:42:96:1d:2d:d5:4b:3a:
5e:cc:6b:64:da:e0:6c:b3:00:b9:d1:09:52:7b:56:25:9d:15:
87:85:78:f1:0e:7c:6e:b2:b6:43:4b:27:fd:f6:94:d5:dd:9f:
3c:bd:1a:2d:3a:e0:fa:d2:b4:7c:b6:93:4a:31:e6:3b:22:71:
51:c6:e5:d6:8c:6b:fc:45:5d:ff:83:b1:f0:f5:aa:7a:44:83:
7d:ae:9c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org