Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YY7_scrQTIhQ1XNJWQlTGhrnE0g.roa
File: YY7_scrQTIhQ1XNJWQlTGhrnE0g.roa (raw, json)
Hash identifier: UNNqNPt6k0b/SGYkAp0upTcY3S294x5M1H40oc95b74=
Subject key identifier: 61:8E:FF:B1:CA:D0:4C:88:50:D5:73:49:59:09:53:1A:1A:E7:13:48
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018C8203F3E82AC9C9D2077CB0A201287BAE
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YY7_scrQTIhQ1XNJWQlTGhrnE0g.roa
Signing time: Tue 19 Dec 2023 12:19:06 +0000
ROA not before: Tue 19 Dec 2023 12:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208476
IP address blocks: 185.244.29.0/24 maxlen: 24
185.244.30.0/24 maxlen: 24
185.244.31.0/24 maxlen: 24
185.244.26.0/24 maxlen: 24
194.5.97.0/24 maxlen: 24
194.5.99.0/24 maxlen: 24
87.237.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:03:f3:e8:2a:c9:c9:d2:07:7c:b0:a2:01:28:7b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Dec 19 12:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=618effb1cad04c8850d573495909531a1ae71348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:5c:43:9b:cb:ee:74:c8:79:85:9e:d8:61:
31:4f:da:3c:66:fa:9c:a9:34:e8:61:92:ac:a5:a2:
04:0e:92:2e:0b:04:c7:ca:22:b7:36:eb:aa:70:d5:
e7:ef:e4:bb:c0:df:f0:8c:d7:35:be:41:99:c2:4a:
5d:8f:08:87:a0:34:c5:b2:2b:c6:9b:f8:f3:a4:26:
f0:8f:86:db:b1:39:45:be:05:89:09:e4:10:29:95:
3b:36:6b:79:d4:9a:3d:ee:78:de:2d:cd:8c:e0:5f:
50:1f:ce:6a:f2:5f:c5:46:25:92:3f:29:78:f2:c7:
23:17:f4:25:25:ab:7f:bb:a8:b7:d9:62:ff:99:4c:
ee:7d:fe:21:13:0d:c2:c2:ca:54:85:e6:33:d9:d4:
88:fb:d8:c5:9f:f7:a3:62:ef:c7:53:e5:27:51:95:
3e:41:b4:5d:08:c7:4b:37:64:90:27:4d:5e:65:9e:
6e:73:c8:eb:f1:a0:5a:55:d5:b6:47:06:1c:be:96:
6b:e5:dd:8e:c2:e0:09:0c:9e:73:4c:64:9c:37:03:
93:1c:ab:0e:c4:1f:23:c2:60:6b:e5:14:1b:42:7b:
f8:d3:91:bb:9f:8b:cd:fe:db:74:2a:1f:8f:43:d4:
a0:41:2e:b1:a7:8c:81:98:f6:79:75:90:d6:13:d1:
63:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8E:FF:B1:CA:D0:4C:88:50:D5:73:49:59:09:53:1A:1A:E7:13:48
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YY7_scrQTIhQ1XNJWQlTGhrnE0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.165.0/24
185.244.26.0/24
185.244.29.0-185.244.31.255
194.5.97.0/24
194.5.99.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e1:5a:ba:de:42:8d:c8:57:7a:22:b8:51:43:1b:d0:58:a6:
a6:8b:41:4d:00:dc:f4:11:d6:28:d8:97:d6:66:7f:32:56:bb:
89:18:d8:9c:9b:f7:41:90:18:fe:23:8f:77:f0:60:81:5b:73:
a4:f7:09:f9:84:f9:6d:85:f4:b9:b2:88:35:fd:73:5e:16:d7:
45:5b:1a:b4:59:9e:3a:1f:d9:04:39:17:2d:f2:8a:f7:41:d7:
59:49:1f:8d:9c:07:83:a3:9e:86:61:0c:30:42:1b:a1:c6:68:
49:65:e2:83:c2:3e:17:07:d8:a4:a2:c9:b2:96:66:b4:30:38:
1f:87:93:05:74:fc:11:f0:e8:89:3e:0f:82:1a:c5:f8:0e:e6:
f6:56:be:02:0b:c4:de:35:67:67:4d:d5:5e:7d:ad:6b:eb:07:
f0:07:fe:ce:00:12:cd:3c:63:30:42:ec:6a:e5:2c:91:8e:fb:
4d:bc:bf:7f:12:aa:fb:cc:4a:8e:78:99:35:08:e3:e3:b9:c5:
91:1c:9a:26:f1:9c:be:bc:0a:82:5c:12:ce:dd:09:20:4d:ba:
75:0a:52:ab:8d:cb:8e:43:8c:3d:17:67:52:2c:4a:48:03:2e:
e9:b5:40:de:88:f1:f1:9b:70:7c:bb:7f:db:af:3a:1e:1c:ba:
9d:a2:df:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 13:58:46 2023 by rpki-client on console-ams.rpki-client.org