Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yfkwgQHCywQ-izJXtiVRHPF46RI.roa
File: yfkwgQHCywQ-izJXtiVRHPF46RI.roa (raw, json)
Hash identifier: cKKiPD7NUZZKA4n37pFfsf8RV//57OB3XC2NCUoVzeI=
Subject key identifier: C9:F9:30:81:01:C2:CB:04:3E:8B:32:57:B6:25:51:1C:F1:78:E9:12
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D83C227AC8D85B3C5043889CC77A974B5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yfkwgQHCywQ-izJXtiVRHPF46RI.roa
Signing time: Wed 07 Feb 2024 13:29:15 +0000
ROA not before: Wed 07 Feb 2024 13:29:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 5.253.64.0/24 maxlen: 24
5.253.66.0/24 maxlen: 24
5.253.67.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 02:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:83:c2:27:ac:8d:85:b3:c5:04:38:89:cc:77:a9:74:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 7 13:29:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9f9308101c2cb043e8b3257b625511cf178e912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:18:8e:ad:d1:95:67:e9:9b:8e:b2:cf:99:
21:82:fe:e1:4b:31:50:6a:a7:75:28:01:d6:13:61:
5f:bb:4f:06:4b:7f:85:78:68:e5:5d:ae:d5:77:c1:
01:31:b8:ce:41:01:a9:da:46:f5:d2:4e:67:43:ee:
c2:30:34:73:4d:5f:ef:47:bf:ce:b7:1d:e9:a9:c4:
c6:8a:7c:d7:f9:bf:78:9a:f9:59:09:0e:c2:a6:22:
ac:b3:d1:e6:1c:79:ba:05:ae:5a:6d:bd:e8:74:c0:
a1:02:77:e2:f2:13:d4:55:3e:b4:b7:6c:88:d9:57:
4d:7c:cf:f9:21:10:c8:a7:5a:58:7d:05:bc:79:65:
40:a1:ad:ea:ca:29:66:fb:71:6e:9e:dd:fd:08:40:
aa:fb:c5:17:dc:d8:0c:ad:4e:c5:8e:04:9b:66:2a:
e4:15:84:d8:d4:44:a0:0c:ae:c0:e0:a3:c3:87:40:
f5:d3:db:c3:7b:de:c4:fa:21:da:61:6c:8e:68:4f:
18:e4:c7:9e:f7:5d:f7:56:b1:ba:1e:37:4b:31:3f:
27:14:1c:4e:2b:45:44:3b:9d:37:37:17:38:2d:d7:
8c:74:54:84:25:63:01:be:3d:21:c7:78:11:ff:9b:
27:4a:7c:f8:86:b7:67:6e:86:ca:22:8f:7f:9b:e4:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F9:30:81:01:C2:CB:04:3E:8B:32:57:B6:25:51:1C:F1:78:E9:12
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yfkwgQHCywQ-izJXtiVRHPF46RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.64.0/24
5.253.66.0/23
87.120.192.0/23
87.121.60.0/22
87.121.114.0/23
93.123.75.0/24
93.123.80.0/24
93.123.119.0/24
Signature Algorithm: sha256WithRSAEncryption
28:67:c4:67:19:4d:8d:fc:0b:c9:59:a9:96:ed:f0:5c:88:23:
ba:b1:9e:9b:20:6b:5b:9e:8d:bc:15:98:fa:66:0e:42:40:d1:
b4:fb:83:35:3d:d3:e9:6a:b4:d8:1f:cb:3b:af:a7:cb:0c:5c:
a4:e7:b7:e9:e0:ce:6a:e7:35:6a:8f:41:5e:5b:25:09:4c:98:
39:ee:b8:86:4f:6c:7d:b8:16:3b:79:ee:5d:37:70:bc:22:6f:
6a:8a:a6:1b:4c:0a:2a:b2:12:d5:0c:0b:33:a6:2e:65:e7:53:
d3:41:e2:f7:55:2b:94:e5:28:3a:ae:13:43:75:cd:63:a8:71:
a2:93:c8:7e:de:a4:36:b2:f9:19:0c:be:cf:17:5a:4c:e9:f5:
51:e0:0c:23:a5:00:82:f4:d7:4b:91:26:bb:6e:7c:cb:32:c6:
72:96:d4:98:7c:71:0d:6a:09:31:3f:42:3e:83:68:75:78:67:
3f:93:f0:11:d9:b3:9c:d1:75:b4:f5:52:71:37:fa:5d:c0:98:
14:91:00:5a:89:bf:77:1d:b0:c9:c9:de:a3:03:c9:8a:e7:49:
65:03:0d:be:2f:7f:8f:95:e4:95:be:24:20:9c:0f:a4:a9:71:
2b:99:9f:05:ee:e8:45:56:c1:e0:83:fb:72:db:90:2d:54:5a:
9d:24:c4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 03:45:46 2024 by rpki-client on console-ams.rpki-client.org