Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/YNY7M2j2hTcV__snujOxwhevm_U.roa
File: YNY7M2j2hTcV__snujOxwhevm_U.roa (raw, json)
Hash identifier: ZR8T7hBHCg6aNadiMGAy+K1vvUw06Z04RTsD4m30Wqs=
Subject key identifier: 60:D6:3B:33:68:F6:85:37:15:FF:FB:27:BA:33:B1:C2:17:AF:9B:F5
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 018E19EC01DF69B0633CA4F68EB48BE7E5CE
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/YNY7M2j2hTcV__snujOxwhevm_U.roa
Signing time: Thu 07 Mar 2024 17:18:01 +0000
ROA not before: Thu 07 Mar 2024 17:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 11325
IP address blocks: 2.57.248.0/22 maxlen: 22
45.80.96.0/22 maxlen: 22
45.85.128.0/23 maxlen: 23
171.22.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 07 Mar 2024 17:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:19:ec:01:df:69:b0:63:3c:a4:f6:8e:b4:8b:e7:e5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Mar 7 17:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60d63b3368f6853715fffb27ba33b1c217af9bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:3d:7d:f0:61:d9:21:06:51:4d:22:89:a2:
a3:c5:74:00:0b:21:f5:e5:7b:8a:79:4e:47:32:01:
9d:ef:e5:67:57:98:8e:c5:53:74:61:7b:ef:fc:be:
e4:6a:7e:a6:c8:cf:00:31:01:25:5c:3d:13:3f:b5:
ad:6b:ed:10:10:8a:41:e5:4a:2c:a8:28:86:a4:a9:
ad:f1:16:3a:97:34:44:7b:9e:f2:75:e5:4b:04:27:
ad:77:f9:b8:51:c4:fd:a9:a7:d2:45:58:5e:2a:4f:
a6:db:8a:e4:88:80:04:ee:19:7e:82:73:f7:80:ab:
a4:cb:7a:da:ba:6c:76:5e:3e:93:5b:db:80:52:76:
d8:b2:64:a8:25:24:0a:82:82:4f:ea:d5:72:36:57:
1f:93:ff:1d:65:97:9a:49:13:62:de:ae:f6:ae:8a:
25:b9:1a:23:31:1a:a5:8e:65:63:29:71:a2:24:f2:
79:6e:ea:c2:b9:8a:22:74:c8:e0:c1:b9:24:0f:2e:
e2:99:d3:fd:e1:05:2d:96:b8:80:c5:ae:c6:92:34:
24:41:f2:57:7c:c8:7d:26:9e:92:49:5f:1d:9c:a7:
21:7c:95:59:f2:c6:0e:5c:e4:cb:3d:df:1d:c3:4e:
c0:55:59:56:1f:0e:7d:0d:0f:9e:9f:5c:25:4a:13:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D6:3B:33:68:F6:85:37:15:FF:FB:27:BA:33:B1:C2:17:AF:9B:F5
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/YNY7M2j2hTcV__snujOxwhevm_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.248.0/22
45.80.96.0/22
45.85.128.0/23
171.22.62.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:e0:0d:1a:b6:e6:b2:f3:df:8a:59:1b:c9:8a:c5:c6:3c:2c:
1d:fd:2d:20:98:70:f6:b4:50:b8:6f:73:87:a5:51:e7:1d:44:
12:a1:92:e9:06:4a:e7:bc:4a:53:44:92:e2:ea:9d:f9:b0:78:
90:e7:1b:2e:0d:35:e5:83:87:31:50:d6:9c:4b:b8:fe:71:81:
99:b8:73:e9:c4:e3:56:b4:e7:6e:30:80:2f:c2:16:4d:b6:af:
d5:39:14:de:45:a4:1f:bd:e8:ce:ef:7b:03:58:6c:dd:bc:fa:
c9:e3:a2:1d:b0:c6:d6:fb:a3:d3:a2:3a:06:88:6e:f9:36:ea:
87:1d:52:e3:96:69:d3:f7:9e:4e:a5:6a:6e:08:3b:96:97:c0:
d5:4d:67:e7:0b:84:32:1d:82:2b:de:5a:db:03:91:d5:f3:80:
f1:7e:87:20:3f:93:d8:b5:2b:a6:c4:c6:52:f4:5a:93:57:fe:
5e:21:22:a5:6b:83:af:d5:32:78:14:52:d9:0c:27:b3:9f:63:
f9:ac:7b:59:17:3c:12:c4:fd:5a:19:0d:3b:f3:d1:fd:05:4b:
5e:fa:0d:4f:3e:c1:69:93:47:e8:67:c2:af:03:21:26:10:cd:
33:4f:d0:f1:b3:48:29:73:d8:c7:7c:9e:28:5f:41:86:81:db:
c1:07:0c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:50 2024 by rpki-client on console-ams.rpki-client.org