Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/YPDMh3wGUJxi3pwVvFhjcyap1Gk.roa
File: YPDMh3wGUJxi3pwVvFhjcyap1Gk.roa (raw, json)
Hash identifier: UWIuDhes3XQpV8S7HGh6tU6yvrndznAVhFmZ050giTo=
Subject key identifier: 60:F0:CC:87:7C:06:50:9C:62:DE:9C:15:BC:58:63:73:26:A9:D4:69
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 018BAB4F89F08048F178C25E89E96A8A3914
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/YPDMh3wGUJxi3pwVvFhjcyap1Gk.roa
Signing time: Tue 07 Nov 2023 19:43:18 +0000
ROA not before: Tue 07 Nov 2023 19:43:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41075
IP address blocks: 185.6.136.0/22 maxlen: 22
94.199.176.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 18:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ab:4f:89:f0:80:48:f1:78:c2:5e:89:e9:6a:8a:39:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Nov 7 19:43:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60f0cc877c06509c62de9c15bc58637326a9d469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:2b:da:fb:0e:c3:09:86:1b:ba:45:bd:18:
a5:61:96:26:73:2f:af:90:47:d5:8b:9b:ee:15:34:
cf:42:12:68:55:0d:2a:a2:fb:25:91:55:b8:14:1b:
fd:ba:4e:15:c0:e8:54:2f:ec:48:a5:a3:ab:d5:4e:
88:bc:b0:65:a4:bf:6e:05:ea:3d:de:f1:40:11:2d:
d2:cb:95:f2:fc:54:71:52:85:a6:62:56:6f:d5:6e:
6a:9b:7a:0f:dc:dd:99:16:1b:28:bd:58:05:ff:98:
4e:95:78:8a:38:80:17:f0:32:bd:60:a1:62:e8:c2:
4a:81:b8:84:3f:ac:42:7a:c5:2d:07:f4:5e:31:e2:
e1:14:f8:8d:07:75:46:71:ed:db:cf:16:a7:fe:74:
09:a4:f7:b1:a0:11:72:93:b6:2b:50:6e:cc:e7:1a:
c9:04:a7:cb:bb:56:63:2c:6b:28:27:fa:91:98:bf:
8c:88:6b:e6:d4:52:05:33:83:ad:05:1c:e6:a6:dd:
a4:36:61:b5:18:ad:d2:35:22:47:94:02:7a:7c:82:
9d:16:de:57:09:0f:25:65:ab:85:5c:9e:50:f0:03:
bd:1d:11:34:f5:5f:cb:a8:fe:2d:e5:9c:f7:3f:87:
8d:3f:db:c9:89:61:4d:ca:e5:d9:f8:7d:17:e9:d9:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F0:CC:87:7C:06:50:9C:62:DE:9C:15:BC:58:63:73:26:A9:D4:69
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/YPDMh3wGUJxi3pwVvFhjcyap1Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.176.0/23
185.6.136.0/22
Signature Algorithm: sha256WithRSAEncryption
95:39:b8:72:65:da:40:96:cb:8f:3a:a2:b9:c3:f6:bc:63:28:
e4:2a:b7:f6:5c:42:99:bc:45:09:af:57:75:6e:69:74:8a:7f:
28:31:1b:fa:39:31:0f:a1:ee:5d:6b:75:e6:a9:71:5c:59:ff:
01:4f:cb:17:84:a1:6a:90:94:8d:6c:e0:35:28:fc:fa:8d:71:
e7:22:e6:a0:7a:20:2f:cb:36:0f:fb:ae:79:bf:62:14:f1:ca:
ba:6c:56:aa:ae:e7:a7:5f:81:3d:b4:29:b0:f0:7c:1e:f5:9b:
d1:03:7d:8b:97:22:02:dc:3d:8e:51:bb:5a:6b:60:65:85:77:
b4:a0:00:69:3b:68:9e:1b:27:32:19:9b:7a:36:8e:7a:94:ce:
03:36:31:c0:3f:ed:c9:32:2c:71:4f:2a:61:d6:e7:07:b7:21:
f8:a0:f9:5b:8b:83:44:c6:6d:30:d0:20:e8:54:fe:fb:52:2b:
2d:f8:67:c5:d3:31:32:54:9a:d0:47:43:fd:c6:38:5b:83:75:
6c:8d:56:61:9f:10:b2:48:b2:4a:fa:11:04:5b:95:1e:bc:74:
54:6f:a3:d5:1c:5f:cf:c0:f7:9e:79:e9:6e:58:3d:f2:0a:09:
3c:a9:30:85:f3:f4:24:16:61:0f:72:c1:c2:40:14:11:44:90:
40:7e:c6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:32 2024 by rpki-client on console-fra.rpki-client.org