Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/YbpTCPFqqoxfsYS3bqlPEQF46-Y.roa
File: YbpTCPFqqoxfsYS3bqlPEQF46-Y.roa (raw, json)
Hash identifier: pQP6jk99H5XH/qwXR+xRofj56CrIlBw3Vr2LeskDdgE=
Subject key identifier: 61:BA:53:08:F1:6A:AA:8C:5F:B1:84:B7:6E:A9:4F:11:01:78:EB:E6
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 018CC9BC4CF3915448CEE93C88004BDEA8D7
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/YbpTCPFqqoxfsYS3bqlPEQF46-Y.roa
Signing time: Tue 02 Jan 2024 10:33:30 +0000
ROA not before: Tue 02 Jan 2024 10:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60989
IP address blocks: 185.21.248.0/22 maxlen: 24
2a04:1d80::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 24 May 2024 08:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:4c:f3:91:54:48:ce:e9:3c:88:00:4b:de:a8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Jan 2 10:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61ba5308f16aaa8c5fb184b76ea94f110178ebe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:03:97:b0:a7:98:0d:67:c4:64:bd:1f:4a:
ea:f7:ed:f7:c9:3c:14:a7:67:6b:ca:cc:96:ee:81:
e6:b9:ec:bf:fe:e5:c4:88:b6:d8:25:38:1a:00:84:
58:ad:4c:be:8f:38:ba:af:dc:5c:72:41:2a:90:e4:
30:7f:d7:5a:30:1b:50:70:7a:b7:49:c2:24:45:1d:
3b:53:42:42:e2:df:33:e0:6f:e0:f8:25:e4:97:75:
55:b6:bd:e3:6a:e5:c4:a4:b9:b0:31:6d:8b:39:79:
e5:ba:fb:a8:74:7c:8f:3c:30:1a:fd:d9:46:d6:f4:
a4:83:04:21:c8:e7:d3:f1:48:c7:4c:07:c6:cb:6c:
2c:7c:23:f1:a1:c1:c2:8f:39:c2:bd:c7:ee:41:c9:
47:a3:20:e5:b6:a1:00:a3:06:af:8e:7f:55:29:5f:
26:2d:10:66:ba:e1:cf:77:9c:b1:9d:52:66:98:aa:
4b:63:6e:89:07:c8:24:dc:87:63:27:4e:cd:a1:04:
6f:9a:a1:be:51:5e:fe:7b:08:ce:5b:9c:f0:60:f0:
6c:90:aa:39:7f:5a:ec:14:81:ef:d9:4d:23:65:c8:
bb:72:16:28:9a:1b:b7:37:b5:39:f0:2b:aa:55:f4:
8a:38:16:a0:27:d8:6d:4b:98:1b:45:3f:80:7a:30:
0b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BA:53:08:F1:6A:AA:8C:5F:B1:84:B7:6E:A9:4F:11:01:78:EB:E6
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/YbpTCPFqqoxfsYS3bqlPEQF46-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.248.0/22
IPv6:
2a04:1d80::/29
Signature Algorithm: sha256WithRSAEncryption
39:c3:7a:5a:0f:bf:cb:7a:fb:b4:1b:18:16:dc:b1:2c:bc:ea:
0d:51:f1:be:30:96:13:31:33:26:a7:39:36:cd:91:9b:d5:ca:
6e:f5:8b:9a:91:15:f8:7a:88:d3:b1:81:43:6a:c7:52:63:44:
4a:a5:6c:f9:4f:55:19:07:b6:31:8b:0b:65:56:0f:8d:1a:22:
99:44:4b:df:d3:85:bc:29:14:51:d6:b8:b6:c9:43:12:ae:02:
6f:37:74:5f:2e:23:5c:22:92:e1:7f:6f:f8:fd:5f:bd:ff:e8:
81:f3:ca:82:28:46:99:9c:7c:3b:58:f7:e8:00:86:55:3a:5d:
46:ae:08:92:3c:0b:cb:7a:60:82:25:0c:64:14:58:ed:7d:50:
9e:2a:27:5e:9f:69:e4:bc:6b:c9:ac:68:e0:de:bf:cb:28:89:
1c:b0:97:d1:d1:78:0e:0f:92:56:14:30:c6:28:e7:ee:49:67:
92:a1:09:ad:55:c2:c2:b9:aa:88:37:12:eb:c6:c0:7d:4b:65:
53:48:77:1d:6c:4e:25:ae:93:5e:91:75:87:79:48:6b:51:ce:
a2:65:d2:65:80:4c:05:77:f8:08:89:07:4b:44:06:43:32:36:
a1:30:41:63:82:3c:58:21:37:32:75:05:68:31:02:0c:0f:95:
56:97:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:38 2024 by rpki-client on console-fra.rpki-client.org