Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/YL0MRGYUmTvFXO_LeDk3zjyS5yg.roa
File: YL0MRGYUmTvFXO_LeDk3zjyS5yg.roa (raw, json)
Hash identifier: PthOaQ9XUa+Yfg4GVZiPru4o+36geGsVaUhYiGh7+Hw=
Subject key identifier: 60:BD:0C:44:66:14:99:3B:C5:5C:EF:CB:78:39:37:CE:3C:92:E7:28
Certificate issuer: /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Certificate serial: 01905EB32ACCB6CF61D3B77E6E14B7E589DA
Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/YL0MRGYUmTvFXO_LeDk3zjyS5yg.roa
Signing time: Fri 28 Jun 2024 11:55:18 +0000
ROA not before: Fri 28 Jun 2024 11:55:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58327
IP address blocks: 5.252.252.0/22 maxlen: 24
176.120.168.0/21 maxlen: 24
185.74.193.0/24 maxlen: 24
185.74.194.0/23 maxlen: 24
185.194.25.0/24 maxlen: 24
185.224.93.0/24 maxlen: 24
185.224.94.0/23 maxlen: 24
185.226.228.0/24 maxlen: 24
185.239.4.0/22 maxlen: 24
188.212.32.0/23 maxlen: 24
193.242.188.0/23 maxlen: 24
2a09:4e40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 14 Oct 2024 11:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5e:b3:2a:cc:b6:cf:61:d3:b7:7e:6e:14:b7:e5:89:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Validity
Not Before: Jun 28 11:55:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60bd0c446614993bc55cefcb783937ce3c92e728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:ec:35:01:f3:37:c8:51:f7:10:cc:bb:78:
eb:b7:91:52:0a:ee:9d:1a:1b:72:e0:4b:35:29:18:
f6:f7:e1:55:96:8d:45:38:f3:01:f6:51:f3:21:71:
f9:c4:af:02:19:3d:83:25:87:17:c0:7e:ad:34:ec:
6b:3d:95:5e:6f:46:55:01:dc:9d:cb:c9:78:0c:7c:
d4:de:a4:f3:86:6c:e4:59:0d:90:22:9f:02:27:1f:
67:16:53:f0:c9:58:71:e4:db:a4:bf:08:46:30:1c:
96:5a:51:94:7f:53:b8:53:fb:6c:cf:e5:a4:71:40:
8b:a0:e4:7f:5b:c5:8a:c4:34:1d:af:65:66:3c:ef:
79:3f:17:1c:16:cd:da:0a:d7:ed:96:01:9d:82:d4:
c3:bf:e1:c2:76:46:e8:3e:d1:4a:7e:11:32:25:e4:
5c:66:91:83:c9:54:06:a7:61:7e:99:52:63:2f:8e:
56:0e:0b:4a:b8:cd:e1:cf:34:3e:62:b9:62:9f:d7:
4e:ee:be:e6:85:f1:9d:f0:57:d0:ba:d3:98:c2:1c:
8c:e2:4c:f2:e5:19:60:d9:3e:a6:53:8e:ea:21:86:
ac:1f:11:54:c6:9b:74:93:5d:de:55:ed:1f:f4:15:
ef:58:35:a9:a8:19:24:67:2d:c5:fe:10:02:60:bb:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BD:0C:44:66:14:99:3B:C5:5C:EF:CB:78:39:37:CE:3C:92:E7:28
X509v3 Authority Key Identifier:
keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/YL0MRGYUmTvFXO_LeDk3zjyS5yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.252.0/22
176.120.168.0/21
185.74.193.0-185.74.195.255
185.194.25.0/24
185.224.93.0-185.224.95.255
185.226.228.0/24
185.239.4.0/22
188.212.32.0/23
193.242.188.0/23
IPv6:
2a09:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
d7:2e:16:39:a4:9b:da:b7:b8:af:af:36:7e:33:c2:73:cd:97:
2d:d1:97:ef:46:0b:db:97:76:7c:1a:1f:60:75:5a:7a:95:20:
48:f1:c4:08:cd:80:f1:00:a8:85:79:ab:a3:39:b0:e9:88:59:
e0:ff:b5:dc:a0:6d:fd:5f:22:6c:54:05:6b:81:0b:ce:b2:ec:
12:2d:b3:07:cf:bf:ef:af:75:ed:0e:06:33:d0:fc:e9:2c:13:
d9:3a:b4:e4:b3:ab:c6:0a:6f:d3:31:1f:1e:20:11:eb:52:5b:
58:56:20:94:b4:7d:c1:be:89:9a:37:1a:fd:1f:fc:82:d3:89:
bf:7c:80:4a:b4:32:a6:8d:50:0a:ef:a1:75:6a:94:c4:c6:0b:
cd:a8:7a:49:e8:fe:7f:1b:ef:b9:72:4c:ea:14:62:0a:46:df:
6e:51:eb:05:b1:c0:7a:c0:ad:29:e1:09:a5:ed:85:e7:c4:ee:
d8:92:7d:c7:71:ac:28:a7:40:0c:d4:51:db:e8:8c:34:a5:48:
ad:a4:92:78:e4:b3:da:fc:5a:da:23:c0:7e:9d:bb:3f:0e:a4:
49:c4:68:31:33:55:62:1d:ef:50:8f:00:60:6e:21:13:d6:5c:
a8:b8:a4:af:34:92:32:81:f2:8c:6f:3d:fd:f6:61:85:8a:e6:
f9:ee:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 13:08:42 2024 by rpki-client on console-fra.rpki-client.org