Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/ylhs04phVSn7EDtG8ZJHQ3Hev18.roa
File: ylhs04phVSn7EDtG8ZJHQ3Hev18.roa (raw, json)
Hash identifier: xiV72TSXVVK5t29l+u3z0mfUHQWzbeLPgpBQS68B4RU=
Subject key identifier: CA:58:6C:D3:8A:61:55:29:FB:10:3B:46:F1:92:47:43:71:DE:BF:5F
Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial: 018570302788FA66F81B6289E6C731E814AA
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/ylhs04phVSn7EDtG8ZJHQ3Hev18.roa
Signing time: Mon 02 Jan 2023 01:54:42 +0000
ROA not before: Mon 02 Jan 2023 01:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197403
IP address blocks: 46.28.152.0/24 maxlen: 24
46.28.152.0/21 maxlen: 21
46.28.155.0/24 maxlen: 24
46.28.158.0/24 maxlen: 24
46.28.159.0/24 maxlen: 24
46.28.153.0/24 maxlen: 24
46.28.156.0/24 maxlen: 24
46.28.154.0/24 maxlen: 24
46.28.157.0/24 maxlen: 24
2a00:7840::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:27:88:fa:66:f8:1b:62:89:e6:c7:31:e8:14:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
Validity
Not Before: Jan 2 01:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca586cd38a615529fb103b46f192474371debf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5d:03:2e:a2:30:8e:6b:37:55:fe:db:a9:1f:
73:10:19:76:c8:92:25:75:08:f0:55:40:20:f3:88:
ce:21:58:d9:f7:5f:37:e0:da:53:0f:cf:54:f0:0c:
ad:c1:14:c7:71:b9:e5:b2:96:81:64:a9:e3:21:53:
00:b1:fc:2a:7b:43:a6:b8:74:35:13:4c:18:04:fa:
6b:82:16:18:10:ab:55:95:e0:a3:6e:b7:50:c4:74:
66:f5:f3:a6:ec:23:6d:32:ea:66:cc:ec:80:2b:41:
78:2e:7a:19:ab:b6:d8:a2:ab:61:66:6a:0c:4b:a5:
a3:73:e8:17:e4:b7:04:2f:a8:02:94:70:b5:0d:00:
5f:e3:f4:25:ac:75:77:85:22:81:b2:a9:6a:58:bf:
f0:ee:b8:38:e4:34:fb:18:9e:17:e8:13:01:44:4b:
ff:16:bf:05:4a:2f:de:3f:4a:ca:31:f0:69:1a:32:
f8:f8:28:21:84:19:60:f7:66:8c:a8:f9:d2:40:46:
a8:d6:fb:8f:d8:07:02:49:cf:82:23:5e:5e:a7:d7:
83:e1:88:25:d8:e8:28:51:22:15:66:69:c1:ee:b3:
da:07:65:58:78:a2:a8:c3:90:44:59:71:94:bd:ac:
ff:a1:c3:26:cc:35:c2:5d:77:78:d1:87:cf:fe:b6:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:58:6C:D3:8A:61:55:29:FB:10:3B:46:F1:92:47:43:71:DE:BF:5F
X509v3 Authority Key Identifier:
keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/ylhs04phVSn7EDtG8ZJHQ3Hev18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.152.0/21
IPv6:
2a00:7840::/32
Signature Algorithm: sha256WithRSAEncryption
23:6e:95:79:7a:08:59:f1:50:a2:60:69:49:b4:a1:3c:14:5d:
70:7a:d2:62:ec:a6:b6:d8:5f:82:ae:bf:da:f6:56:44:a1:58:
ec:75:57:ea:f9:96:27:fc:0b:ac:97:8b:a8:a4:98:cf:25:2f:
11:98:9e:dd:16:f0:01:3d:b0:4d:3d:3a:29:f0:d2:82:59:98:
3f:26:4b:e9:93:67:b5:a0:d2:86:cd:e1:89:67:2a:56:a4:88:
52:c3:05:a0:16:ac:5e:47:fd:38:a3:72:69:98:17:ca:ad:ee:
2b:1b:c8:a0:e7:52:bb:23:ba:7f:59:47:24:3a:d6:15:9a:06:
54:9d:de:33:88:f6:57:74:35:22:7e:1c:1d:66:48:ba:ab:69:
a8:8a:57:84:28:f7:56:cb:cd:d5:70:97:76:c8:1a:5f:94:59:
f1:f3:7b:e8:35:22:fd:ac:87:33:5f:26:a3:e9:5a:7d:b5:73:
84:a7:51:f7:d7:f6:63:fe:cf:7d:da:d1:d6:2c:c9:0d:a6:b7:
ae:c6:ad:49:5f:aa:05:c9:65:3c:9c:8c:db:b0:31:64:a1:ca:
ec:97:5e:6a:ec:c4:dc:b9:dc:68:1d:de:af:1c:35:2b:67:9c:
e7:f3:99:3f:8e:37:9c:2c:86:90:86:4e:ad:91:7a:dc:9b:f9:
f8:93:e8:d4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVwMCeI+mb4G2KJ5scx6BSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MGFhZWI1Mzc5MmQ1MjAxNjliY2UyODBjM2RkODZmODM3
NmVjNjMwHhcNMjMwMTAyMDE1NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTU4NmNkMzhhNjE1NTI5ZmIxMDNiNDZmMTkyNDc0MzcxZGViZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll0DLqIwjms3Vf7bqR9zEBl2yJIl
dQjwVUAg84jOIVjZ91834NpTD89U8AytwRTHcbnlspaBZKnjIVMAsfwqe0OmuHQ1
E0wYBPprghYYEKtVleCjbrdQxHRm9fOm7CNtMupmzOyAK0F4LnoZq7bYoqthZmoM
S6Wjc+gX5LcEL6gClHC1DQBf4/QlrHV3hSKBsqlqWL/w7rg45DT7GJ4X6BMBREv/
Fr8FSi/eP0rKMfBpGjL4+CghhBlg92aMqPnSQEao1vuP2AcCSc+CI15ep9eD4Ygl
2OgoUSIVZmnB7rPaB2VYeKKow5BEWXGUvaz/ocMmzDXCXXd40YfP/rYy4QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMpYbNOKYVUp+xA7RvGSR0Nx3r9fMB8GA1UdIwQY
MBaAFEgKrrU3ktUgFpvOKAw92G+DduxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDkt
ZDE2NjkxYWQ2OWZhLzEveWxoczA0cGhWU243RUR0RzhaSkhRM0hldjE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDktZDE2NjkxYWQ2OWZh
LzEvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLhyYMA0E
AgACMAcDBQAqAHhAMA0GCSqGSIb3DQEBCwUAA4IBAQAjbpV5eghZ8VCiYGlJtKE8
FF1wetJi7Ka22F+Crr/a9lZEoVjsdVfq+ZYn/Ausl4uopJjPJS8RmJ7dFvABPbBN
PTop8NKCWZg/Jkvpk2e1oNKGzeGJZypWpIhSwwWgFqxeR/04o3JpmBfKre4rG8ig
51K7I7p/WUckOtYVmgZUnd4ziPZXdDUifhwdZki6q2moileEKPdWy83VcJd2yBpf
lFnx83voNSL9rIczXyaj6Vp9tXOEp1H31/Zj/s992tHWLMkNpreuxq1JX6oFyWU8
nIzbsDFkocrsl15q7MTcudxoHd6vHDUrZ5zn85k/jjecLIaQhk6tkXrcm/n4k+jU
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:27 2024 by rpki-client on console-ams.rpki-client.org