Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/YtIqR1spEUdtyv98y8BmGM0VJhI.roa
File: YtIqR1spEUdtyv98y8BmGM0VJhI.roa (raw, json)
Hash identifier: oqIyfxW6LcOJ5HX08QTp5B58oRdM7eohHtMBsxdusxo=
Subject key identifier: 62:D2:2A:47:5B:29:11:47:6D:CA:FF:7C:CB:C0:66:18:CD:15:26:12
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 018C651D9456D9F5B33AA5A0A1B3D74AE9D9
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/YtIqR1spEUdtyv98y8BmGM0VJhI.roa
Signing time: Wed 13 Dec 2023 21:38:06 +0000
ROA not before: Wed 13 Dec 2023 21:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 91.230.49.0/24 maxlen: 24
91.226.227.0/24 maxlen: 24
5.182.208.0/22 maxlen: 24
185.244.36.0/22 maxlen: 24
45.87.40.0/22 maxlen: 24
185.224.128.0/22 maxlen: 24
45.14.224.0/22 maxlen: 24
146.19.248.0/24 maxlen: 24
2a0d:2780::/29 maxlen: 32
2a0e:16c0::/29 maxlen: 29
2a0e:1740::/29 maxlen: 29
2a12:a8c0::/29 maxlen: 29
2a11:b240::/29 maxlen: 32
2a0d:2400::/29 maxlen: 39
2a0e:2000::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:65:1d:94:56:d9:f5:b3:3a:a5:a0:a1:b3:d7:4a:e9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Dec 13 21:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62d22a475b2911476dcaff7ccbc06618cd152612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:9c:50:6e:66:51:26:3e:f3:11:84:f0:8a:
78:b9:2f:34:59:ce:fb:96:d5:a8:1c:bc:3d:a5:ca:
a0:0d:23:ca:08:6b:ed:a3:e0:30:87:78:00:47:dc:
96:4a:2b:f9:fc:6a:9c:c9:fa:57:16:8d:34:f1:33:
81:3c:73:ca:ab:7f:45:f0:5e:82:2f:04:8b:a1:6a:
fc:ad:9b:5b:d5:51:ef:b4:ee:9f:9c:81:f3:45:2f:
05:4d:46:f3:f7:ec:b7:d6:f0:19:93:4b:cf:7e:a6:
5f:f3:b7:20:8b:77:7a:c3:29:bd:44:a8:05:19:04:
36:cf:b1:29:0e:2f:67:67:a7:41:5b:57:f9:22:9d:
15:d9:42:72:49:5f:b6:4e:57:5c:ed:a4:07:93:75:
c8:d9:f2:b8:ef:d0:94:75:49:5e:ae:d0:c8:74:7a:
ec:23:b5:7e:cd:26:19:c2:68:80:67:a3:c7:8e:a4:
f3:a8:74:1c:01:35:b8:70:a1:a0:8f:c8:0c:ba:33:
5e:18:63:60:5a:49:14:df:d8:4f:df:5e:4b:87:72:
2a:fe:de:db:ff:37:d4:b3:09:b9:7f:12:b6:56:28:
76:55:9e:27:20:db:c6:75:5a:7c:6e:d4:2d:48:fd:
73:d2:19:71:97:f5:cf:75:2d:83:af:31:da:5f:ec:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D2:2A:47:5B:29:11:47:6D:CA:FF:7C:CB:C0:66:18:CD:15:26:12
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/YtIqR1spEUdtyv98y8BmGM0VJhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.208.0/22
45.14.224.0/22
45.87.40.0/22
91.226.227.0/24
91.230.49.0/24
146.19.248.0/24
185.224.128.0/22
185.244.36.0/22
IPv6:
2a0d:2400::/29
2a0d:2780::/29
2a0e:16c0::/29
2a0e:1740::/29
2a0e:2000::/29
2a11:b240::/29
2a12:a8c0::/29
Signature Algorithm: sha256WithRSAEncryption
84:3f:9e:05:ec:af:e4:5f:03:e2:f3:6b:41:a0:c6:b0:09:45:
b8:90:2f:40:2b:6d:fd:97:0b:4f:d6:25:46:60:7e:1b:1d:5d:
f3:6f:54:60:16:19:a8:ad:90:fa:ad:6b:5b:18:e7:23:49:a4:
56:15:3f:c8:a8:b8:95:96:f0:b7:63:e0:97:a7:ac:0a:c4:28:
e4:01:e7:5b:b3:a5:ac:15:88:87:e7:28:6a:9a:9f:e6:9f:c8:
76:48:6f:54:c5:07:e1:4d:ea:4d:24:7e:36:a9:6e:5e:32:35:
ca:b3:e3:e1:11:eb:c3:e3:71:89:7a:9a:85:d6:d5:2a:1a:7c:
e1:fa:96:6a:20:aa:a1:c9:54:1f:a6:4d:69:c5:b0:20:d7:b5:
4e:19:be:98:b0:70:ba:1f:1c:e8:17:96:ad:59:61:a0:12:ec:
fa:dd:6e:f3:02:8b:31:5f:cd:20:66:2e:2e:78:5c:09:89:b2:
65:23:34:21:26:01:23:76:ec:57:69:8c:4e:74:7c:98:b2:66:
e1:ba:a8:67:1c:d5:63:e4:c0:a8:3e:63:9a:c3:15:78:17:70:
bc:3b:c6:a5:45:e0:b2:8f:c2:33:27:b7:85:ba:b9:e1:93:4e:
fd:ac:1b:69:82:12:22:03:13:5c:61:f1:25:83:3c:3c:b0:4e:
cf:94:9e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:00 2024 by rpki-client on console-ams.rpki-client.org