Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YGkxA5d5OJ-No11bPYMx6lgoNhQ.roa
File: YGkxA5d5OJ-No11bPYMx6lgoNhQ.roa (raw, json)
Hash identifier: xrXwgwwDx6yf4tuxf0Q6QAZuVxw8JF2mY64Gc8MKh0U=
Subject key identifier: 60:69:31:03:97:79:38:9F:8D:A3:5D:5B:3D:83:31:EA:58:28:36:14
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BB5138579044A2B05E06AAE421F57893E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YGkxA5d5OJ-No11bPYMx6lgoNhQ.roa
Signing time: Thu 09 Nov 2023 17:13:57 +0000
ROA not before: Thu 09 Nov 2023 17:13:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201749
IP address blocks: 194.55.226.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
83.171.204.0/24 maxlen: 24
83.171.205.0/24 maxlen: 24
83.171.206.0/24 maxlen: 24
45.139.105.0/24 maxlen: 24
83.171.207.0/24 maxlen: 24
194.49.87.0/24 maxlen: 24
176.125.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:13:85:79:04:4a:2b:05:e0:6a:ae:42:1f:57:89:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 9 17:13:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=606931039779389f8da35d5b3d8331ea58283614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fd:8e:d4:3d:4f:9d:15:b0:8a:d4:f1:b4:00:
07:c2:3c:85:5c:26:cd:4b:93:41:e0:ad:5e:84:68:
0c:e4:4d:a3:79:1f:78:e7:ae:3d:48:b9:ba:6a:a7:
e0:70:7f:1d:91:7d:ea:7a:6e:11:95:25:50:bf:bb:
4c:60:b0:86:ea:cf:06:d6:15:89:6d:7d:81:32:a9:
66:e9:de:d8:f8:f8:5f:35:55:fa:19:2f:68:2b:8f:
e5:b7:f4:69:25:ad:ad:cc:dc:29:a7:99:3b:9b:1d:
1c:d5:74:d7:58:e7:ba:03:12:b5:5e:ba:1b:89:1a:
c8:bc:d6:2f:b6:56:28:c8:21:e4:20:23:9d:a4:d4:
f7:79:18:44:19:60:28:1a:b8:ef:24:ba:37:7e:82:
37:69:11:c6:01:cd:55:82:a3:7a:7d:8f:ed:e5:0f:
cc:77:cd:ef:b7:d8:38:39:f0:8c:89:2a:37:f1:d8:
96:50:65:1d:af:6f:6c:13:62:bf:ba:d2:57:81:d7:
b3:45:02:4d:5e:7e:b0:a8:92:67:51:7d:15:2b:31:
57:05:74:81:a4:d2:de:56:60:fa:1f:f7:d2:00:61:
f0:da:58:db:53:73:93:50:7f:77:6d:0f:17:18:98:
36:a0:99:cc:86:a2:c2:65:e4:57:47:74:97:42:e5:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:69:31:03:97:79:38:9F:8D:A3:5D:5B:3D:83:31:EA:58:28:36:14
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YGkxA5d5OJ-No11bPYMx6lgoNhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.105.0/24
80.76.50.0/24
83.171.204.0/22
87.120.87.0/24
176.125.255.0/24
194.49.87.0/24
194.55.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e3:f2:c0:ba:a4:1c:93:14:5d:d3:76:58:c8:95:f3:2b:db:
74:5e:47:e8:84:9a:64:e1:27:0c:cf:06:85:18:c5:b9:87:3b:
a9:c4:1a:6a:9e:63:7e:3e:f2:97:48:5d:e5:f1:e3:fc:84:cb:
ec:bc:a1:06:e9:f1:2b:c7:c5:95:0a:ea:3f:16:7c:1c:ac:2d:
31:71:9a:90:33:60:cd:5a:68:a9:aa:3d:71:b9:7a:76:c8:67:
54:9e:c3:f8:25:6f:02:28:af:c1:75:f5:83:60:44:42:da:90:
e5:94:f8:24:f0:97:07:38:bd:db:74:37:37:30:14:fe:b6:3e:
2d:44:b8:8d:17:8f:87:44:b4:a0:e4:fb:4b:85:0a:47:7b:9e:
f3:5b:fb:9f:52:72:ad:f1:55:61:58:b6:bb:f0:3d:11:1a:77:
de:6a:cf:ba:39:78:6f:c0:df:65:1d:c5:26:45:96:f2:d6:51:
83:14:c7:28:af:a1:ba:85:77:75:ad:a7:02:fb:1c:d3:f3:43:
5d:c4:d2:3c:7f:08:28:0b:5a:76:b0:93:d4:28:24:08:9f:37:
19:a7:70:e7:55:93:bf:fa:67:9d:32:0e:3a:b2:cd:54:98:ef:
8f:89:b9:4d:76:ce:a6:8d:51:f1:6a:07:a7:5b:13:11:90:a7:
8b:9b:5b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:11 2024 by rpki-client on console-ams.rpki-client.org