Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/ywUERq9MXvCCC1YlG1Zc_GpQY60.roa
File: ywUERq9MXvCCC1YlG1Zc_GpQY60.roa (raw, json)
Hash identifier: 7QVr2hU/Z50BpEPtB4cjDK6rLvVs3XOJocO7RRyGkRQ=
Subject key identifier: CB:05:04:46:AF:4C:5E:F0:82:0B:56:25:1B:56:5C:FC:6A:50:63:AD
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 018CC348EA709BA708BF0164835A06292DCB
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/ywUERq9MXvCCC1YlG1Zc_GpQY60.roa
Signing time: Mon 01 Jan 2024 04:29:44 +0000
ROA not before: Mon 01 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60595
IP address blocks: 194.26.133.0/24 maxlen: 24
185.15.54.0/24 maxlen: 24
185.15.55.0/24 maxlen: 24
185.15.52.0/22 maxlen: 22
185.15.52.0/24 maxlen: 24
185.15.53.0/24 maxlen: 24
194.2.77.0/24 maxlen: 24
2a03:a2c0::/29 maxlen: 48
2a03:a2c0::/32 maxlen: 32
2a03:a2c2::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 12 Apr 2024 17:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ea:70:9b:a7:08:bf:01:64:83:5a:06:29:2d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Jan 1 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb050446af4c5ef0820b56251b565cfc6a5063ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6c:fe:92:6d:6c:84:52:42:34:e4:66:8f:37:
09:6c:78:18:8b:b7:c6:62:22:e5:2b:45:7e:0e:81:
ef:2d:e4:8d:ae:45:70:b0:4f:de:d1:72:1f:a0:ae:
2f:6a:88:25:ed:0d:2d:20:3e:40:20:51:07:43:b2:
1d:1e:0a:a2:83:fd:91:21:6a:4f:88:3f:74:34:28:
79:e9:3c:cb:1a:69:4a:0f:9d:7d:a2:79:02:33:93:
d0:5c:e9:b8:14:fe:d2:68:9d:2c:98:85:7d:9c:b3:
ed:e9:75:f1:b4:0a:7a:79:ad:a8:59:79:70:7b:63:
a3:f7:86:b0:8b:79:a8:dc:b4:0f:55:ec:15:f9:af:
30:fd:1d:60:20:29:14:03:36:2b:db:d1:e5:c4:75:
7d:82:81:ee:d2:1e:c0:04:e3:35:17:cf:9a:e5:bc:
1a:c4:5f:59:ab:a6:64:9f:a1:88:6a:02:4d:14:34:
f9:f2:97:f9:07:28:3d:19:4e:49:56:3a:ba:80:18:
28:4a:cf:fa:2a:ab:e1:ec:c0:0b:17:5a:cd:98:d0:
98:8c:92:0f:c8:39:c9:3e:a8:da:e8:a2:f2:7f:93:
21:8f:4e:d4:b2:51:cd:c5:2f:43:52:af:6c:11:38:
6b:22:b3:1c:be:a7:df:36:c4:12:06:f4:8c:3c:43:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:05:04:46:AF:4C:5E:F0:82:0B:56:25:1B:56:5C:FC:6A:50:63:AD
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/ywUERq9MXvCCC1YlG1Zc_GpQY60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.52.0/22
194.2.77.0/24
194.26.133.0/24
IPv6:
2a03:a2c0::/29
Signature Algorithm: sha256WithRSAEncryption
a7:7c:6f:ff:12:ab:a2:ab:c2:f6:14:4a:8e:77:6f:59:5e:1f:
06:e5:95:5c:fe:59:14:5e:76:42:67:d0:55:80:3d:57:db:5e:
2e:ce:bd:aa:d6:51:df:fc:53:aa:d1:45:b5:f6:b6:50:21:9d:
07:88:bc:ea:b8:e5:d2:b7:63:94:d4:4a:10:50:b2:07:1e:d0:
9c:7c:13:84:a0:0b:bf:f6:e3:60:13:7e:8b:82:63:1d:c3:6e:
56:99:e6:ce:9d:e8:e1:10:8d:53:53:05:68:e5:4f:a3:39:cc:
ad:69:9c:8d:13:3b:6d:21:9c:4c:6a:3d:08:22:3d:1a:44:40:
69:5c:ea:64:64:a7:3a:88:e0:89:98:4f:10:ad:76:ca:71:00:
d7:c8:5f:c7:60:93:c8:64:e4:3a:b0:7f:13:63:b4:8a:ab:19:
17:ba:c8:a2:01:4c:ff:43:9b:ba:18:3c:77:9f:23:1d:cf:41:
07:ea:f7:6c:ef:74:33:97:33:51:ac:a7:cb:43:db:aa:42:b4:
6c:f1:68:4d:c9:23:4e:8f:a9:7b:4d:95:1f:a7:c5:a5:01:da:
d6:91:9e:4b:00:aa:23:35:db:72:a8:e0:62:77:28:5c:aa:38:
1f:0a:32:6a:94:4e:e4:68:61:cd:8d:dd:ad:34:43:65:e3:54:
d6:ac:ec:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:52 2024 by rpki-client on console-fra.rpki-client.org