Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/YhQTkNNyaj4J9paN3kKQW6nizLg.roa
File: YhQTkNNyaj4J9paN3kKQW6nizLg.roa (raw, json)
Hash identifier: ALo9jBci8HPx15Znf8yPx1rsk6brWezXKOcWtalMnus=
Subject key identifier: 62:14:13:90:D3:72:6A:3E:09:F6:96:8D:DE:42:90:5B:A9:E2:CC:B8
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018CC56DF5AD5C5F8A4FF64F1F4333820F3D
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/YhQTkNNyaj4J9paN3kKQW6nizLg.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45027
IP address blocks: 217.171.146.0/24 maxlen: 24
31.129.30.0/24 maxlen: 24
77.83.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 06:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f5:ad:5c:5f:8a:4f:f6:4f:1f:43:33:82:0f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62141390d3726a3e09f6968dde42905ba9e2ccb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:1a:3f:2d:07:e5:bb:b0:23:9e:be:95:9d:
54:93:5e:25:33:ed:19:7b:5f:53:ef:85:23:0f:49:
63:ac:1b:04:97:96:a6:2d:da:67:2a:b2:54:60:2c:
cd:8b:44:d6:85:7b:19:ed:9d:0e:e8:59:07:c0:a8:
1d:ff:dc:85:55:28:36:ee:2b:c9:c3:2f:7f:e0:e4:
8a:fe:03:16:35:2b:8e:fb:ae:64:c4:60:11:6c:8c:
e1:26:01:f3:88:a3:2b:d1:b2:69:c5:db:50:cf:78:
29:55:5e:7a:6c:8e:4e:7d:c7:74:b8:f6:07:43:f3:
eb:5f:1b:01:81:ba:8f:d0:47:40:a9:fa:82:2f:02:
95:08:d7:e6:77:81:06:fa:f5:46:d9:f7:6d:3d:1f:
84:42:93:7d:49:12:e4:00:8f:e2:6c:cc:e9:36:5a:
73:06:ed:3e:55:4b:69:3d:23:e0:e1:23:8f:10:07:
67:29:95:da:93:87:53:70:df:90:8a:a1:85:a6:55:
0b:c8:82:cd:2d:ba:b0:f7:da:5a:72:17:26:3d:32:
37:ee:32:91:5b:77:91:68:de:63:15:ec:0f:c7:32:
25:b8:fd:fa:78:8e:11:29:6c:7b:f8:b0:77:2b:de:
a8:c2:18:22:92:fd:dd:0e:4a:a7:f6:ce:16:06:d1:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:14:13:90:D3:72:6A:3E:09:F6:96:8D:DE:42:90:5B:A9:E2:CC:B8
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/YhQTkNNyaj4J9paN3kKQW6nizLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.30.0/24
77.83.117.0/24
217.171.146.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e3:7b:9b:5e:6d:6a:ee:62:a4:2e:20:26:5e:f4:32:81:8b:
74:1c:7b:74:d8:ab:c7:86:3d:e4:0f:41:97:5d:f9:44:4c:79:
4b:57:32:e5:d9:db:19:22:60:3b:a3:99:31:57:3c:61:68:3c:
6b:cc:8e:0e:40:fc:6e:4f:14:46:12:0f:38:fa:95:5b:7c:80:
a0:1a:ec:ca:29:65:1a:03:4c:38:63:ab:8d:4b:13:18:dc:9a:
af:be:4b:6a:ff:c7:06:b0:8a:bc:95:fe:14:21:f6:8d:1a:64:
65:de:2e:54:b7:f0:04:e1:3b:55:88:f4:b4:a9:8f:c6:8f:9d:
2d:cc:dc:e7:cd:f2:17:10:5d:bd:58:dc:5e:15:30:26:d1:8c:
fc:32:ed:3a:d5:5b:b6:97:8d:85:8b:08:88:76:f1:cd:d3:86:
f4:01:f6:09:79:fd:7d:6b:a0:e5:b3:fe:de:f5:57:51:21:e5:
6b:c1:f6:b7:22:1a:27:60:05:44:24:b2:c4:ab:de:35:a5:e6:
5c:86:27:3e:d9:6e:7f:81:24:ec:f3:04:40:55:f1:65:df:3d:
cf:2e:a1:d9:d0:61:be:c9:2c:f1:c1:ce:78:98:6d:0f:98:43:
4b:68:d3:da:06:e6:a1:e1:8d:5b:86:00:37:21:79:ae:a0:d9:
8b:ba:02:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 11:49:19 2024 by rpki-client on console-fra.rpki-client.org