Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YTPQJTQZXY5flEGW6_d5KAN_190.roa
File: YTPQJTQZXY5flEGW6_d5KAN_190.roa (raw, json)
Hash identifier: 1hAhpt8xEFhQBhLQWaqRo86Ns4v1iTk3+UisGATY2d8=
Subject key identifier: 61:33:D0:25:34:19:5D:8E:5F:94:41:96:EB:F7:79:28:03:7F:D7:DD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E853BFEB6900C2709BE15BA876A04A023
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YTPQJTQZXY5flEGW6_d5KAN_190.roa
Signing time: Thu 28 Mar 2024 13:24:45 +0000
ROA not before: Thu 28 Mar 2024 13:24:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 45.8.93.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
193.149.31.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
212.87.207.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 06:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:3b:fe:b6:90:0c:27:09:be:15:ba:87:6a:04:a0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 28 13:24:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6133d02534195d8e5f944196ebf77928037fd7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:16:d7:f9:46:ea:92:6c:01:05:10:7c:c4:
2a:65:db:92:90:7c:3e:ec:b2:0c:52:8f:f9:5f:99:
06:b1:aa:d3:55:c6:33:43:ae:70:60:62:0c:e8:9c:
74:ea:a0:df:b0:4e:b9:e8:c5:39:ed:09:eb:2c:5f:
a4:20:73:a9:9a:33:47:d9:c1:a9:e3:7d:d0:8d:6f:
74:44:2b:f7:b2:08:3f:d2:39:7f:36:cb:7e:9d:e8:
87:a4:bb:55:c1:78:81:4b:e3:dd:10:0a:13:26:26:
56:e8:f2:45:56:45:26:02:5b:31:2f:94:e8:2c:38:
65:ee:4b:49:6d:c0:78:7d:1c:55:03:45:65:6e:46:
c8:6c:7e:17:06:62:51:61:d6:58:1c:f5:90:53:c2:
73:d2:e6:89:da:2c:1b:6a:54:b4:ba:68:b2:97:16:
23:5f:14:04:95:74:68:4e:a3:ae:88:db:8d:27:70:
1d:0d:d5:96:66:8f:c9:a0:90:95:57:5d:00:7a:f3:
df:b9:bb:fb:bc:15:ab:1a:19:03:8c:28:c5:85:4f:
cf:0a:7d:79:7a:b1:ac:b9:39:ca:4a:76:84:2c:89:
10:13:8c:09:04:1d:76:51:4f:0a:2c:a4:0e:8e:4f:
16:3d:f0:d8:5a:cd:8c:cc:f7:83:ea:ed:e9:f4:99:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:33:D0:25:34:19:5D:8E:5F:94:41:96:EB:F7:79:28:03:7F:D7:DD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YTPQJTQZXY5flEGW6_d5KAN_190.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
45.12.255.0/24
45.66.228.0/24
82.115.211.0/24
87.121.105.0/24
178.215.238.0/24
193.25.216.0/24
193.37.47.0/24
193.149.28.0/22
194.180.36.0/24
212.87.207.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:95:a7:ba:8f:32:14:5f:51:ea:94:23:90:a4:5d:3f:a9:85:
5c:83:2a:1c:f6:00:f2:4a:bc:f6:82:1d:06:24:e2:ca:f3:15:
8d:e5:13:a9:88:af:ff:73:95:50:bc:50:55:00:e1:03:90:4a:
50:6a:19:24:18:d8:7d:94:e3:6f:41:6c:4f:4b:7d:e7:28:a3:
99:97:65:60:11:59:01:43:26:ca:7e:20:2b:f6:67:fd:82:c8:
19:fa:3a:f2:3a:2b:62:32:f7:4e:af:52:6f:76:c3:17:8e:bc:
ac:47:9b:7a:b5:7e:c2:2c:41:a4:c1:ac:e6:33:c9:df:5e:49:
14:f9:1c:23:ea:02:8c:53:84:95:ce:d4:0a:f1:9a:23:28:cb:
53:d6:5f:1b:ca:0d:19:3d:cd:d6:12:b7:12:61:dc:77:1b:c4:
31:4b:ea:d7:e0:17:f1:6a:ea:ab:cc:00:b7:e7:89:47:47:68:
55:a5:7b:67:76:be:4a:5b:ed:fb:04:b4:7f:eb:d2:a6:e1:27:
30:d0:c9:68:66:9e:59:c0:28:05:85:0c:63:1c:d9:f8:f7:f9:
d2:bc:5d:59:67:fa:7c:2f:c8:80:74:9a:c6:bd:8c:e8:12:1a:
ea:d9:88:ca:ff:6a:6e:80:5f:50:be:33:43:4f:91:b9:a7:25:
ba:12:b4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:13 2024 by rpki-client on console-fra.rpki-client.org