Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/YocNfEMXzTKdJ30_re9n2mHOrK8.roa
File: YocNfEMXzTKdJ30_re9n2mHOrK8.roa (raw, json)
Hash identifier: FNvMF80/5CBfUD4JWO3JqeONXEGTNK8encoo9/fT79k=
Subject key identifier: 62:87:0D:7C:43:17:CD:32:9D:27:7D:3F:AD:EF:67:DA:61:CE:AC:AF
Certificate issuer: /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Certificate serial: 018E13DBD1E06F4AB29185C4EE3D8D6D29B0
Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/YocNfEMXzTKdJ30_re9n2mHOrK8.roa
Signing time: Wed 06 Mar 2024 13:02:36 +0000
ROA not before: Wed 06 Mar 2024 13:02:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 146.70.181.0/24 maxlen: 24
146.70.182.0/24 maxlen: 24
185.45.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:db:d1:e0:6f:4a:b2:91:85:c4:ee:3d:8d:6d:29:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Validity
Not Before: Mar 6 13:02:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62870d7c4317cd329d277d3fadef67da61ceacaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:a8:38:d7:86:29:67:37:10:4d:fe:f5:67:
89:bb:03:5b:bc:dc:f5:c5:86:69:ce:d6:6d:6f:f6:
5f:06:02:57:42:8a:38:9d:ec:78:48:c2:4e:dc:4d:
3f:b1:e8:51:79:fb:7b:ea:d2:3d:41:e7:c8:81:f1:
63:38:7a:9f:a3:f5:4d:3b:19:f4:f1:07:ce:ba:2b:
aa:12:fe:14:00:aa:73:4d:bf:5b:06:1c:28:06:bc:
b5:dd:f8:15:c7:e6:ff:3c:88:19:2e:72:a5:66:6e:
32:c9:ba:b0:c7:7a:e9:3f:10:e2:7f:5b:4d:7d:80:
b2:d1:72:2f:6e:b0:44:fa:1c:a1:85:30:e1:ef:d9:
24:53:d8:e3:e8:74:4e:bf:b7:2c:bc:70:d8:37:c1:
b4:c5:fd:2b:ef:68:b6:18:52:fd:5a:18:be:91:c9:
da:af:ec:e3:b6:5c:7e:c3:91:59:ce:31:cb:f7:6c:
ee:d8:5d:af:ad:8f:ad:2d:1d:ea:56:b3:50:3d:c0:
ca:9e:a1:82:da:05:a6:c1:df:70:00:89:4e:22:99:
a3:7d:86:f3:09:81:51:ef:9d:0f:88:eb:33:9b:ee:
33:6c:fc:00:58:30:45:78:be:3b:c1:ac:64:1a:e0:
4d:7b:6a:5e:f4:e2:d5:3f:14:07:86:da:93:c2:ae:
ac:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:87:0D:7C:43:17:CD:32:9D:27:7D:3F:AD:EF:67:DA:61:CE:AC:AF
X509v3 Authority Key Identifier:
keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/YocNfEMXzTKdJ30_re9n2mHOrK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.70.181.0-146.70.182.255
185.45.15.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5c:ea:ae:63:c4:d7:80:15:2a:86:13:78:5f:12:50:64:85:
1b:19:93:70:65:06:75:3c:f5:38:25:22:e5:f7:93:88:0a:ce:
ce:28:15:7e:86:e9:fd:98:bf:23:d2:3d:c3:58:b6:42:79:1d:
8a:e6:f1:d7:4f:64:19:09:1f:a6:ba:c1:f2:63:92:ab:62:0b:
bc:c2:79:c1:ee:5b:80:22:f8:01:ba:b0:7f:0d:6a:8f:ee:77:
db:f8:7f:58:78:82:5d:55:3c:24:07:76:4f:50:1c:c5:83:07:
a7:7b:e2:32:2c:6d:27:de:75:dd:07:b1:24:00:4f:56:41:6c:
d6:ce:08:14:75:28:74:06:73:98:bd:19:7e:4e:25:83:d8:53:
64:18:73:dd:d5:51:04:22:0e:22:56:16:a0:67:ce:1c:23:c9:
bf:fc:26:c7:53:01:df:03:e1:5f:df:f0:39:af:d9:ad:fc:54:
f4:8f:58:91:33:92:82:91:47:29:39:5b:de:6a:aa:9e:0f:b1:
df:23:cf:f5:cd:b6:04:f3:0f:6c:a9:33:70:42:7d:9e:75:f1:
b4:86:56:a5:54:c7:57:be:e9:89:37:ac:d8:42:84:12:c7:c3:
be:13:b8:76:64:ef:6d:44:a9:49:ce:01:d2:4d:bb:2f:79:6c:
3f:53:a6:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 29 10:27:02 2024 by rpki-client on console-ams.rpki-client.org