Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/yhuYYXqG76xviN4TIujDxJqN2K8.roa
File: yhuYYXqG76xviN4TIujDxJqN2K8.roa (raw, json)
Hash identifier: UPcZfnLo57RkF2OSI+oqJaxD6Hj+RsohAftcRc/8X1E=
Subject key identifier: CA:1B:98:61:7A:86:EF:AC:6F:88:DE:13:22:E8:C3:C4:9A:8D:D8:AF
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 018D4B4EEB017B6636AEA917F7C0DDB6F4BC
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/yhuYYXqG76xviN4TIujDxJqN2K8.roa
Signing time: Sat 27 Jan 2024 14:24:39 +0000
ROA not before: Sat 27 Jan 2024 14:24:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209828
IP address blocks: 178.255.218.0/24 maxlen: 24
185.203.67.0/24 maxlen: 24
193.163.88.0/24 maxlen: 24
2a0c:ae80::/29 maxlen: 29
2a10:7cc0::/29 maxlen: 29
2a11:1ec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 05 Feb 2024 11:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4b:4e:eb:01:7b:66:36:ae:a9:17:f7:c0:dd:b6:f4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Jan 27 14:24:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca1b98617a86efac6f88de1322e8c3c49a8dd8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:27:9c:e0:8b:cb:b1:fb:b5:01:3d:3b:60:
03:87:cb:4c:2a:f0:03:bf:2e:0b:e0:6c:62:ff:9d:
cf:57:a7:73:ad:fc:19:7b:04:d7:bf:3e:21:4b:8c:
42:df:8a:7c:33:1f:d2:3e:e8:c5:a3:30:1f:40:74:
49:91:41:5e:41:10:82:85:8b:63:a4:2d:c3:2f:6e:
dd:d8:30:86:2e:12:f8:5b:1a:c2:20:a1:ce:be:b2:
59:b3:52:3c:72:77:91:7a:09:43:5e:79:e0:b7:d2:
6a:46:72:00:6b:cf:77:f0:cf:2a:07:66:62:ce:df:
51:9b:4b:29:33:a0:aa:f7:61:25:2e:27:8d:4f:95:
36:e9:f6:fe:51:30:b6:53:9d:28:15:45:ee:fa:b8:
72:c7:8f:4f:6d:20:43:21:27:07:29:76:dd:1a:be:
61:09:5b:5e:6b:b8:97:6b:a4:27:73:7a:b7:63:5d:
c9:38:07:0d:5b:0b:51:6e:d3:d0:b0:93:25:f0:f9:
5a:fd:93:43:06:8e:08:f7:83:d2:f0:f9:89:a0:5c:
81:c1:9b:8e:ba:38:f4:70:22:6b:99:73:6d:39:13:
4c:b3:0e:5e:59:9e:20:3c:d2:70:28:02:c2:e6:30:
f8:60:56:80:3a:00:b2:10:d6:b6:c0:70:3e:14:10:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1B:98:61:7A:86:EF:AC:6F:88:DE:13:22:E8:C3:C4:9A:8D:D8:AF
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/yhuYYXqG76xviN4TIujDxJqN2K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.218.0/24
185.203.67.0/24
193.163.88.0/24
IPv6:
2a0c:ae80::/29
2a10:7cc0::/29
2a11:1ec0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:b6:62:78:04:7c:72:00:b0:04:33:3e:56:ac:f2:4b:93:15:
87:5c:c6:35:99:d8:81:77:37:62:8f:e6:e4:5c:e3:4a:55:81:
0f:78:54:4b:70:dd:a1:b7:3d:d5:23:66:bc:5e:16:70:97:81:
d7:1a:b6:8a:5b:52:bc:46:00:70:b2:e1:94:d2:42:85:47:5d:
c6:5f:e1:4f:4a:4d:f1:38:32:fb:12:39:9d:11:e2:42:c5:83:
ae:06:a9:39:ae:9a:49:f8:b0:93:34:43:51:c7:58:a2:4f:7b:
d1:a9:98:b9:0a:e5:00:bc:7d:8b:bf:08:c8:88:2b:b2:df:6f:
07:a2:cc:f8:e1:88:29:7a:0e:88:84:a6:6d:61:42:12:a4:99:
39:cd:4b:98:11:fa:c9:9a:42:16:08:fb:9b:77:2f:bc:5e:c2:
dd:d1:a5:9e:9b:2c:2a:cb:31:78:2f:a4:25:9d:f5:e4:53:69:
8c:46:e5:c5:cb:86:21:8d:4f:0c:3a:cf:c7:c1:41:33:80:d5:
7d:e2:0a:af:d5:fb:9d:ab:ee:a5:ce:1f:fa:19:d8:8d:2c:8b:
1e:07:08:3f:a0:14:59:51:99:51:7d:d8:1b:04:55:ec:66:f3:
ad:03:d2:a1:11:f9:8b:bd:25:3e:1e:12:da:15:81:72:3b:9b:
8f:84:e9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:45 2024 by rpki-client on console-ams.rpki-client.org