Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/YkgI4-9ya3EKFS72Ap_jCnGXaQU.roa
File: YkgI4-9ya3EKFS72Ap_jCnGXaQU.roa (raw, json)
Hash identifier: t7lk/PELHW+br1tRg8PrI07uBakSDekd7mfIXA+uonU=
Subject key identifier: 62:48:08:E3:EF:72:6B:71:0A:15:2E:F6:02:9F:E3:0A:71:97:69:05
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 01857079838BBB2792799220F2D243513A56
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/YkgI4-9ya3EKFS72Ap_jCnGXaQU.roa
Signing time: Mon 02 Jan 2023 03:14:49 +0000
ROA not before: Mon 02 Jan 2023 03:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 88.218.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 07:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:83:8b:bb:27:92:79:92:20:f2:d2:43:51:3a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jan 2 03:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=624808e3ef726b710a152ef6029fe30a71976905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:40:7e:59:61:f8:15:8e:e3:8d:7e:b6:3f:56:
74:fa:42:18:6f:29:ec:40:24:7a:e1:01:a5:1e:11:
8f:12:2d:c0:a0:b3:7b:ae:d6:7e:9f:46:c5:71:b8:
7a:4e:d2:57:d3:db:f1:6c:f2:67:c2:45:9b:9d:41:
9f:47:d9:7d:ad:2c:6d:aa:94:99:72:43:68:10:c4:
92:c4:90:bf:e4:c1:06:6f:ea:b0:54:ef:9a:ae:84:
38:a6:1d:27:8a:35:67:1a:29:6b:cf:4d:62:c1:fb:
70:4e:c6:8c:c9:1d:89:a3:4b:21:f5:59:93:17:0c:
70:3f:eb:0b:5f:e4:e5:7e:44:0a:99:13:bb:c9:fc:
69:f6:fd:94:e2:4c:85:b3:26:61:01:99:7c:43:10:
83:bb:c6:0a:b5:2d:ce:a8:e0:4e:a5:57:24:e2:d9:
61:1e:69:36:25:69:da:17:c6:c8:a5:3e:db:a6:32:
1a:32:03:b9:5a:91:24:81:e8:43:22:9c:8f:22:41:
99:61:98:f3:cf:d0:42:31:4d:bd:35:9b:64:a7:af:
3b:0e:28:5e:78:39:7c:1f:5d:66:4c:97:de:f1:9c:
7c:33:6d:40:d6:d5:e7:30:81:82:4a:c1:3f:50:3a:
31:30:15:7c:81:35:2b:13:c0:d8:ee:14:0d:b9:ec:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:48:08:E3:EF:72:6B:71:0A:15:2E:F6:02:9F:E3:0A:71:97:69:05
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/YkgI4-9ya3EKFS72Ap_jCnGXaQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:66:8d:c2:1e:4f:b1:a3:21:dc:3a:1d:76:2d:86:52:52:28:
15:57:56:b4:3e:f1:35:38:6a:9d:c8:40:cc:e9:18:58:2a:86:
7e:eb:be:9a:8d:ee:88:c0:2e:ee:78:c5:88:66:69:e6:a1:a7:
c7:0d:8c:1f:6f:d4:9d:ea:96:9a:a0:9a:75:03:b6:2a:5e:12:
59:f3:bd:31:2c:86:f7:43:8f:3c:28:1e:c2:d7:96:07:27:9b:
1b:09:b7:2a:02:a4:0e:8e:79:81:4f:71:fb:e6:4b:6c:43:88:
6b:c1:f1:c1:bd:01:b1:1b:fa:45:93:71:22:74:94:65:ef:e3:
41:05:ec:8c:24:d0:47:56:62:17:f9:82:e4:ff:5d:59:5c:d7:
7e:0c:41:06:de:01:47:e3:3d:f5:ee:f5:93:48:10:64:4c:93:
a0:85:99:7e:b8:1d:94:a8:0c:c2:f8:64:9a:da:0c:55:a3:90:
6f:87:8b:61:2f:1c:d3:77:c0:3f:54:57:cf:78:e5:0b:3c:18:
ae:52:4d:f0:37:67:63:59:35:2b:53:60:9e:b6:0b:30:f5:ac:
ff:99:26:0c:ed:da:06:58:92:d9:5a:4a:7c:f8:a6:52:7a:09:
bb:24:9e:80:9b:db:e2:ae:10:3e:c2:68:06:5b:af:a5:2b:7f:
81:8e:7b:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVweYOLuyeSeZIg8tJDUTpWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZTA1M2NiOWNiNGY0MWMxZTQ3NzNlN2YxNmU4NGJiNTc1
MjIwMzMwHhcNMjMwMTAyMDMxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjQ4MDhlM2VmNzI2YjcxMGExNTJlZjYwMjlmZTMwYTcxOTc2OTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UB+WWH4FY7jjX62P1Z0+kIYbyns
QCR64QGlHhGPEi3AoLN7rtZ+n0bFcbh6TtJX09vxbPJnwkWbnUGfR9l9rSxtqpSZ
ckNoEMSSxJC/5MEGb+qwVO+aroQ4ph0nijVnGilrz01iwftwTsaMyR2Jo0sh9VmT
FwxwP+sLX+TlfkQKmRO7yfxp9v2U4kyFsyZhAZl8QxCDu8YKtS3OqOBOpVck4tlh
Hmk2JWnaF8bIpT7bpjIaMgO5WpEkgehDIpyPIkGZYZjzz9BCMU29NZtkp687Dihe
eDl8H11mTJfe8Zx8M21A1tXnMIGCSsE/UDoxMBV8gTUrE8DY7hQNuew8mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGJICOPvcmtxChUu9gKf4wpxl2kFMB8GA1UdIwQY
MBaAFH7gU8uctPQcHkdz5/FuhLtXUiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYt
MThlODZmMGIxZDgxLzEvWWtnSTQtOXlhM0VLRlM3MkFwX2pDbkdYYVFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYtMThlODZmMGIxZDgx
LzEvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNoTMA0G
CSqGSIb3DQEBCwUAA4IBAQC2Zo3CHk+xoyHcOh12LYZSUigVV1a0PvE1OGqdyEDM
6RhYKoZ+676aje6IwC7ueMWIZmnmoafHDYwfb9Sd6paaoJp1A7YqXhJZ870xLIb3
Q488KB7C15YHJ5sbCbcqAqQOjnmBT3H75ktsQ4hrwfHBvQGxG/pFk3EidJRl7+NB
BeyMJNBHVmIX+YLk/11ZXNd+DEEG3gFH4z317vWTSBBkTJOghZl+uB2UqAzC+GSa
2gxVo5Bvh4thLxzTd8A/VFfPeOULPBiuUk3wN2djWTUrU2Cetgsw9az/mSYM7doG
WJLZWkp8+KZSegm7JJ6Am9virhA+wmgGW6+lK3+Bjntv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:02 2024 by rpki-client on console-fra.rpki-client.org