Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/yc0Z-lblY2m8c2UzrQ00OlmuLTQ.roa
File: yc0Z-lblY2m8c2UzrQ00OlmuLTQ.roa (raw, json)
Hash identifier: lD6VA1ybpGobXcyDJ/svmmbYtR1r416BNpWqjDHM3MA=
Subject key identifier: C9:CD:19:FA:56:E5:63:69:BC:73:65:33:AD:0D:34:3A:59:AE:2D:34
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018BC0B03D39DD23C05F1A8BBC632CF494F4
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/yc0Z-lblY2m8c2UzrQ00OlmuLTQ.roa
Signing time: Sat 11 Nov 2023 23:20:57 +0000
ROA not before: Sat 11 Nov 2023 23:20:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30938
IP address blocks: 45.12.216.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
45.12.218.0/24 maxlen: 24
5.39.248.0/24 maxlen: 24
5.39.251.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.39.253.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
31.192.240.0/21 maxlen: 21
5.178.98.0/24 maxlen: 24
5.178.97.0/24 maxlen: 24
5.178.96.0/24 maxlen: 24
5.178.99.0/24 maxlen: 24
5.178.100.0/24 maxlen: 24
5.178.105.0/24 maxlen: 24
5.178.104.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
5.178.109.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.39.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c0:b0:3d:39:dd:23:c0:5f:1a:8b:bc:63:2c:f4:94:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Nov 11 23:20:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9cd19fa56e56369bc736533ad0d343a59ae2d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f1:c4:ec:83:52:04:a3:bd:71:1e:dd:4a:da:
4e:db:fc:c5:e0:8c:8d:45:38:4b:7b:6c:7d:91:d7:
3c:36:e9:83:9d:ad:c8:52:c6:7d:db:21:7c:5c:18:
c0:bb:a8:98:9f:ed:bf:22:62:08:52:66:60:d7:b4:
14:78:3e:35:88:06:0a:b3:dd:b3:a5:a9:c9:eb:3b:
da:b4:3b:79:3b:e4:b3:c8:5e:f5:f8:bb:7e:3f:e9:
a9:9a:22:14:19:a9:c5:d4:37:94:cb:07:ce:ee:8e:
3d:7c:a6:2f:ac:1d:17:e1:5f:99:85:b0:7e:27:26:
6f:a7:ae:5b:1a:e2:a0:b6:ea:9d:7b:d8:c0:3d:c9:
76:da:a7:f5:48:91:97:3e:63:47:11:7f:32:b7:50:
43:95:4d:14:42:e6:ed:f0:93:21:43:59:8a:2d:77:
76:b8:b0:d7:34:2f:7d:15:30:2b:f1:72:78:46:db:
9c:f6:dd:6f:cf:01:be:37:51:6b:f7:4a:81:fd:f2:
5b:40:1f:b4:15:ab:b2:18:13:d6:a3:2b:e3:06:70:
ab:90:cd:13:1d:e2:bd:a2:a3:81:46:78:31:82:4e:
04:22:28:6d:cf:c5:fd:a0:71:7a:6e:84:8e:07:7a:
f5:d3:8c:d0:5b:93:9c:19:d1:61:9a:d2:0d:92:e0:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:19:FA:56:E5:63:69:BC:73:65:33:AD:0D:34:3A:59:AE:2D:34
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/yc0Z-lblY2m8c2UzrQ00OlmuLTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.39.250.0-5.39.255.255
5.178.96.0-5.178.100.255
5.178.104.0-5.178.106.255
5.178.109.0/24
31.192.240.0/21
45.12.216.0/22
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:98:c8:62:da:a9:20:d6:d8:24:cc:91:96:c0:15:0f:e5:9d:
82:8e:39:b7:cc:58:f1:5a:49:60:85:e1:22:67:2b:62:81:ef:
4a:d5:26:47:98:0a:f9:42:83:75:c8:17:85:a4:98:6b:1d:e5:
2d:90:52:dd:37:b1:0f:7f:0b:b8:c9:bb:a2:2d:06:ef:c1:1c:
a1:4f:ed:cf:33:74:0c:b1:39:a1:a5:87:57:c8:00:1f:98:23:
41:a1:35:04:a0:21:3f:5f:ce:a1:4a:38:77:d6:17:c1:24:1e:
a8:16:2c:4c:1b:58:9f:ee:79:83:81:a0:82:95:03:b7:64:05:
f1:97:f3:73:95:eb:e9:f7:2a:bb:a1:75:cc:e6:79:07:a7:02:
4e:15:2a:bd:b9:cd:98:b4:0d:18:2a:a2:89:73:5c:1b:e7:8b:
58:46:1c:6c:cd:57:6e:2a:c1:13:cf:3f:54:4d:96:98:d1:f8:
f7:0c:c4:cd:3f:9e:6b:88:a6:12:ef:ed:63:d5:08:66:bc:1e:
b7:cf:49:72:c2:c6:95:b6:08:7a:49:53:cd:55:ef:48:35:6d:
95:bc:cf:8c:9e:5a:7f:27:09:dc:79:c7:38:aa:8d:b5:23:c1:
37:d1:6b:b9:f0:c0:7d:e8:83:16:b5:26:33:f4:42:da:3f:92:
d2:4e:32:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 17:42:19 2023 by rpki-client on console-ams.rpki-client.org