Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/YyQeehBhDABGCrqP2EEe2DtYmPw.roa
File: YyQeehBhDABGCrqP2EEe2DtYmPw.roa (raw, json)
Hash identifier: EWAVFE2H2o5iYkKXUs+T/UmL3LaS+j6DzVGkxeFTSyc=
Subject key identifier: 63:24:1E:7A:10:61:0C:00:46:0A:BA:8F:D8:41:1E:D8:3B:58:98:FC
Certificate issuer: /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial: 018EC1F835266D7112D5487D647FC9661790
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/YyQeehBhDABGCrqP2EEe2DtYmPw.roa
Signing time: Tue 09 Apr 2024 08:27:32 +0000
ROA not before: Tue 09 Apr 2024 08:27:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35130
IP address blocks: 80.91.48.0/21 maxlen: 24
80.91.56.0/24 maxlen: 24
80.91.57.0/24 maxlen: 24
80.91.58.0/24 maxlen: 24
185.196.160.0/22 maxlen: 24
2a02:6000::/33 maxlen: 33
2a02:6000:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 May 2024 08:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c1:f8:35:26:6d:71:12:d5:48:7d:64:7f:c9:66:17:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Validity
Not Before: Apr 9 08:27:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63241e7a10610c00460aba8fd8411ed83b5898fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:41:5e:a9:6e:4c:4d:83:7a:61:0b:27:c2:5a:
78:17:a4:1c:c9:26:d8:31:bb:51:d1:88:a3:ab:23:
d4:73:48:22:21:65:c7:27:23:b8:cb:ad:6a:77:70:
2f:5e:04:39:64:fc:5e:4d:b1:ae:2c:ac:e9:60:48:
fc:10:2c:18:ed:a4:82:b1:24:d8:8f:9c:6e:4b:31:
ed:e6:f4:6b:a2:82:eb:31:0e:4b:6b:16:09:8b:c5:
03:f6:e5:1b:31:24:4c:c7:83:34:a7:c5:9c:61:bf:
74:c6:35:69:c7:cf:03:0a:d3:d6:25:24:31:10:24:
d1:94:c2:57:1c:5b:83:8c:27:cf:d5:06:68:c5:aa:
b0:1c:a5:6e:b6:5f:d6:1f:79:2d:a0:de:4d:2a:9b:
be:82:5e:ed:f9:00:99:ea:7c:47:f0:45:9a:f8:d7:
aa:07:e5:b9:ea:67:f3:29:aa:6b:24:6d:22:33:bb:
30:46:b0:25:9d:a6:21:e1:ed:08:f8:af:1a:4d:58:
e6:c4:29:8e:87:f7:7b:76:a8:72:85:b5:78:46:7a:
f0:e1:e1:74:40:98:dd:d0:49:6f:4e:e4:46:dd:83:
a7:cb:1f:c7:be:da:8c:f0:61:0c:ed:e5:f1:bd:0a:
11:34:84:36:15:37:8b:8d:1d:b3:72:31:5f:d1:f8:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:24:1E:7A:10:61:0C:00:46:0A:BA:8F:D8:41:1E:D8:3B:58:98:FC
X509v3 Authority Key Identifier:
keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/YyQeehBhDABGCrqP2EEe2DtYmPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.48.0-80.91.58.255
185.196.160.0/22
IPv6:
2a02:6000::/33
2a02:6000:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
62:28:0d:48:8b:cc:39:7b:9a:a1:df:cc:47:2a:ea:57:1e:f0:
d2:55:e2:bb:df:3a:88:e7:ff:38:c7:2b:7d:0a:81:cc:6b:fb:
50:df:9e:dc:e4:5a:0d:bd:66:1b:57:4f:29:f0:3c:3e:6c:63:
b5:27:16:e8:01:f6:fc:11:9a:8e:6c:ef:b1:10:8a:dd:7b:fa:
fe:a9:37:93:94:bf:77:df:e9:7c:42:44:1b:19:96:9a:62:7c:
d1:52:72:5e:c5:2f:68:5e:50:bd:86:f9:20:55:bd:aa:92:82:
2c:14:1b:e0:c2:71:f6:25:4a:82:98:92:c6:81:8d:64:02:ad:
b8:bd:ce:1f:5f:ad:f3:46:9c:8f:c7:6d:25:c5:b6:71:8a:54:
f3:94:6a:b1:c8:7a:15:e4:95:38:54:a5:76:58:c4:91:4a:32:
b1:fa:03:84:6d:0a:dd:cc:db:2e:0e:84:43:da:23:bd:c8:3f:
68:d7:45:4c:39:6c:54:bb:10:71:2e:16:0a:99:fb:fc:f2:ad:
ae:fd:86:84:8a:c3:d6:57:37:4e:de:bc:b2:b3:14:df:93:7b:
c7:80:bc:f9:34:99:6a:21:b4:9f:02:47:a5:f8:48:06:4d:c7:
63:58:85:02:4d:7a:59:06:aa:da:b0:b3:02:2a:fe:72:0d:e0:
52:0b:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:08 2025 by rpki-client