Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ys-YQeawQo8wqJTT5mfU6TuDLLc.roa
File: ys-YQeawQo8wqJTT5mfU6TuDLLc.roa (raw, json)
Hash identifier: +MAqXEI0a1ypaU+XoXnt2NsA6vphjgXAwami4rPH888=
Subject key identifier: CA:CF:98:41:E6:B0:42:8F:30:A8:94:D3:E6:67:D4:E9:3B:83:2C:B7
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018A984BF883824523624316216F854811C7
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ys-YQeawQo8wqJTT5mfU6TuDLLc.roa
Signing time: Fri 15 Sep 2023 10:03:50 +0000
ROA not before: Fri 15 Sep 2023 10:03:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5518
IP address blocks: 80.233.128.0/17 maxlen: 17
80.233.136.0/24 maxlen: 24
80.233.140.0/24 maxlen: 24
80.233.146.0/24 maxlen: 24
62.63.128.0/21 maxlen: 21
62.63.136.0/22 maxlen: 22
80.233.168.0/24 maxlen: 24
62.63.144.0/20 maxlen: 20
78.154.128.0/19 maxlen: 19
80.233.232.0/24 maxlen: 24
80.233.244.0/24 maxlen: 24
62.63.159.0/24 maxlen: 24
62.63.160.0/19 maxlen: 19
194.19.224.0/24 maxlen: 24
194.19.224.0/19 maxlen: 19
80.233.200.0/21 maxlen: 21
62.63.191.0/24 maxlen: 24
62.63.190.0/24 maxlen: 24
194.19.246.0/24 maxlen: 24
185.87.204.0/24 maxlen: 24
185.87.204.0/22 maxlen: 22
78.28.223.0/24 maxlen: 24
78.28.229.0/24 maxlen: 24
78.28.228.0/24 maxlen: 24
78.28.240.0/24 maxlen: 24
213.175.117.0/24 maxlen: 24
78.28.234.0/24 maxlen: 24
78.28.244.0/24 maxlen: 24
78.28.252.0/24 maxlen: 24
78.28.250.0/24 maxlen: 24
213.175.64.0/18 maxlen: 18
78.28.197.0/24 maxlen: 24
78.28.195.0/24 maxlen: 24
78.28.192.0/18 maxlen: 18
213.175.75.0/24 maxlen: 24
78.28.211.0/24 maxlen: 24
78.28.212.0/24 maxlen: 24
2a02:16d8:104::/48 maxlen: 48
2a02:16d8:107::/48 maxlen: 48
2a02:16d8:102::/48 maxlen: 48
2a02:16d8::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 27 Dec 2023 13:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:4b:f8:83:82:45:23:62:43:16:21:6f:85:48:11:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Sep 15 10:03:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cacf9841e6b0428f30a894d3e667d4e93b832cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:cc:54:f5:69:7e:4a:74:fd:6a:06:f9:1b:
a5:0e:e8:d5:f9:34:3a:12:52:a3:a4:b4:41:d3:0a:
dd:d1:cc:60:94:24:31:26:e0:a6:c5:34:6c:ba:e8:
5a:93:be:76:50:f7:3c:8b:be:1d:c7:3a:fa:af:9d:
41:2a:7b:a5:7b:73:cc:22:3f:b8:d9:de:a3:97:f5:
26:85:df:0b:0f:8e:8f:a0:aa:cd:ab:4a:1b:48:03:
8e:8a:b3:5e:03:d0:d3:cf:0a:28:3a:9c:3d:58:a0:
6e:08:29:af:4f:19:ea:78:67:39:a9:aa:49:ea:be:
a2:fd:2c:05:2c:c2:5b:6c:27:03:88:fb:12:46:55:
d0:b8:12:65:7d:24:a6:52:03:36:0b:54:7e:bb:5a:
84:e4:a9:c3:f3:6d:68:02:eb:32:28:7d:ec:62:c1:
b5:42:d1:74:3e:54:55:57:1e:35:38:f3:99:46:f2:
45:3e:38:4d:b9:c1:9c:c6:85:a2:f5:b3:8b:bf:f6:
21:2c:e9:81:30:79:a1:de:0d:d0:61:7b:61:2d:d2:
ae:70:f6:b1:9f:4b:96:77:44:30:9d:cf:fa:4c:1a:
ae:e6:59:44:5b:9d:1c:16:15:a7:0b:ce:a9:2d:6e:
53:16:1d:3c:03:42:3b:dd:39:be:58:b9:ae:6e:2c:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CF:98:41:E6:B0:42:8F:30:A8:94:D3:E6:67:D4:E9:3B:83:2C:B7
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ys-YQeawQo8wqJTT5mfU6TuDLLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.128.0-62.63.139.255
62.63.144.0-62.63.191.255
78.28.192.0/18
78.154.128.0/19
80.233.128.0/17
185.87.204.0/22
194.19.224.0/19
213.175.64.0/18
IPv6:
2a02:16d8::/32
Signature Algorithm: sha256WithRSAEncryption
63:04:11:72:c7:ee:08:c2:e0:a6:d7:7a:1a:43:e7:c2:4c:05:
f1:00:86:83:76:79:80:62:96:15:1b:c8:79:7a:54:c0:7c:91:
be:7c:2f:36:f1:c0:bd:00:5a:4f:e7:1d:4e:aa:1c:d4:c7:c7:
f3:2b:b8:0c:e9:49:40:de:95:89:06:35:67:26:c8:13:dc:c1:
12:dd:40:a7:82:3a:33:18:42:2f:22:0f:e1:38:e0:97:ec:6e:
24:e4:5f:84:e6:2e:dd:e5:05:db:53:e8:97:9f:b0:27:b9:4b:
dc:ab:26:ab:f2:2d:7c:69:03:1f:34:9a:25:09:7c:3f:9e:6e:
98:d4:71:80:19:12:f6:1d:08:bf:9f:07:78:df:1d:6a:fe:7f:
e3:25:72:5a:71:a6:57:d8:93:50:24:fe:fe:ff:81:6a:14:3e:
22:f5:d6:ff:42:b3:0b:96:af:89:18:26:99:b2:04:97:5a:76:
a9:5f:cf:a2:c0:d7:d1:c2:1f:31:cc:5f:fe:d9:64:c9:35:e2:
62:22:d4:35:c7:5c:37:84:80:d5:8d:e0:ca:0b:7c:be:75:4a:
7f:37:21:7a:b2:81:df:8c:11:d8:3b:32:a7:6a:33:b3:cb:1b:
8e:4d:a7:c0:93:cf:23:b9:c2:af:93:88:03:8c:04:62:28:63:
5a:0e:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org