Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/YEnVSV9hbDdxERtKISEMwM6MVF4.roa
File: YEnVSV9hbDdxERtKISEMwM6MVF4.roa (raw, json)
Hash identifier: kGDuezEkhOaGyIA6Dv2Sp0RVEQu0Lf/wRl5cxdjGoI8=
Subject key identifier: 60:49:D5:49:5F:61:6C:37:71:11:1B:4A:21:21:0C:C0:CE:8C:54:5E
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0185C3BE309FC8E6D3BF16DB740B1F831773
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/YEnVSV9hbDdxERtKISEMwM6MVF4.roa
Signing time: Wed 18 Jan 2023 07:18:19 +0000
ROA not before: Wed 18 Jan 2023 07:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 94.198.217.0/24 maxlen: 24
94.198.218.0/24 maxlen: 24
94.198.219.0/24 maxlen: 24
94.198.216.0/24 maxlen: 24
195.80.50.0/24 maxlen: 24
195.80.51.0/24 maxlen: 24
46.19.64.0/24 maxlen: 24
46.19.67.0/24 maxlen: 24
46.19.65.0/24 maxlen: 24
46.19.66.0/24 maxlen: 24
45.8.97.0/24 maxlen: 24
37.220.80.0/24 maxlen: 24
37.220.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:be:30:9f:c8:e6:d3:bf:16:db:74:0b:1f:83:17:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 18 07:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6049d5495f616c3771111b4a21210cc0ce8c545e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3c:7d:20:38:40:40:08:02:ad:5b:85:4e:bc:
39:a3:5c:51:b6:29:40:92:62:25:c3:9d:f8:3d:78:
b5:fc:2b:a4:87:dc:a1:0d:62:e6:b9:85:97:af:4e:
4a:ff:46:23:61:df:83:57:ec:7a:db:1a:88:78:c1:
67:10:ab:ad:e5:21:17:c4:2f:83:44:a7:d5:56:0e:
b9:33:f5:84:1d:6f:91:73:dd:7a:6e:6c:81:7e:04:
8f:d5:fe:03:9a:64:82:0d:1d:aa:2a:e0:1b:72:2a:
5a:d8:46:f6:3c:ac:ee:e3:70:bc:74:f2:ab:6c:e8:
3e:5f:bc:0c:43:14:a4:50:7e:ca:d2:ea:6c:b7:ac:
57:8b:84:fd:cf:05:bc:78:78:67:06:8a:b6:5b:cd:
b6:b4:24:1d:16:10:d9:c1:fe:e7:c1:74:fa:a6:f6:
0c:2f:93:12:58:e7:e7:25:42:12:f6:fc:75:6e:db:
1a:ef:9a:6d:d9:df:17:22:88:47:59:e0:95:a0:ce:
dc:d3:cd:a1:62:33:0e:e8:8c:b0:9f:80:9c:29:1a:
ab:3a:5c:85:48:ae:85:bb:f6:f2:c5:d8:ab:78:c3:
09:f1:0d:9b:90:61:5d:5b:27:c6:4c:1d:1d:e0:07:
90:73:a5:cb:b5:c5:7a:0a:4c:89:87:20:ef:a7:f3:
ba:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:49:D5:49:5F:61:6C:37:71:11:1B:4A:21:21:0C:C0:CE:8C:54:5E
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/YEnVSV9hbDdxERtKISEMwM6MVF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.80.0/23
45.8.97.0/24
46.19.64.0/22
94.198.216.0/22
195.80.50.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:d4:67:0f:57:ff:b8:ad:56:6e:f5:47:7b:c6:82:e2:5e:aa:
e0:89:a4:9c:d1:6e:cd:f9:0e:fd:8a:61:ed:dd:17:35:5b:85:
d9:53:7a:02:70:cf:1e:f1:e7:19:70:5c:f0:30:f4:0d:fd:e4:
ca:d1:be:79:26:26:fb:46:73:b7:9a:75:a5:5e:7c:cf:36:1b:
20:de:8f:5e:64:fe:c7:20:3c:c8:f5:47:06:50:65:e7:d7:78:
7d:76:d1:62:c0:a4:ca:47:dd:7f:2c:48:fd:45:70:39:87:5d:
5b:d5:dc:ca:ab:fe:4e:b1:b4:48:95:34:54:d3:29:b8:82:f6:
ec:1e:c1:df:88:bf:e5:14:88:e8:1a:ed:62:2b:4d:bb:14:e0:
c6:d3:88:34:a4:2e:a0:9d:3b:47:f0:7c:c3:45:6e:19:b2:d6:
fe:d1:9a:a6:36:f4:f4:5d:6d:8d:d5:21:3c:98:e9:24:31:60:
26:6d:9c:3c:32:24:76:6e:09:d3:d1:06:82:09:34:b7:6e:86:
ae:0c:71:17:bd:3b:41:ed:84:8d:e8:9d:1b:3d:66:21:9c:a5:
3e:f5:43:c6:e9:89:a0:5f:6d:58:f1:02:da:8f:29:75:2e:39:
a1:b5:ac:ab:8f:f6:a4:30:ec:9e:26:86:ac:21:d9:05:b8:de:
6f:6e:24:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org