Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YWG3v_oOme5Ub3BrLS-V5nUQUdw.roa
File: YWG3v_oOme5Ub3BrLS-V5nUQUdw.roa (raw, json)
Hash identifier: lZoVybf8o9KO6fjV2f11DhM8pC3FL9jbfcIagVEjtgg=
Subject key identifier: 61:61:B7:BF:FA:0E:99:EE:54:6F:70:6B:2D:2F:95:E6:75:10:51:DC
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01922EFEE282BAB5D5086DDF9D44841CAC48
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YWG3v_oOme5Ub3BrLS-V5nUQUdw.roa
Signing time: Thu 26 Sep 2024 15:41:48 +0000
ROA not before: Thu 26 Sep 2024 15:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 2.56.0.0/22 maxlen: 22
45.67.117.0/24 maxlen: 24
45.150.168.0/22 maxlen: 22
45.151.196.0/22 maxlen: 22
89.40.161.0/24 maxlen: 24
91.242.70.0/24 maxlen: 24
91.242.71.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.75.0/24 maxlen: 24
91.242.123.0/24 maxlen: 24
91.242.124.0/24 maxlen: 24
91.242.125.0/24 maxlen: 24
91.242.126.0/24 maxlen: 24
91.242.127.0/24 maxlen: 24
185.40.105.0/24 maxlen: 24
185.173.244.0/24 maxlen: 24
193.31.104.0/22 maxlen: 22
194.50.201.0/24 maxlen: 24
194.180.238.0/24 maxlen: 24
195.138.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 15:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:fe:e2:82:ba:b5:d5:08:6d:df:9d:44:84:1c:ac:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 26 15:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6161b7bffa0e99ee546f706b2d2f95e6751051dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:ea:22:ea:e2:73:4f:9b:a8:16:08:72:ca:
58:3a:44:9d:d1:17:e7:36:74:5a:3a:b1:f7:07:d3:
b2:b9:5e:db:67:53:a2:56:d6:0d:66:96:4e:f9:9f:
7b:bc:59:c5:6d:8f:fc:e0:2b:4f:bf:e1:d7:03:db:
84:e4:a1:06:66:3f:0c:6d:ee:6e:69:82:b2:3b:28:
9a:02:53:1c:2f:ea:66:ba:39:e2:71:f9:5b:5c:be:
fd:66:c7:db:e4:17:1a:b2:88:6e:d6:60:e0:7b:52:
d8:ee:e5:6a:3d:cb:f3:eb:eb:5a:5f:8d:bf:f8:99:
8c:4d:a2:7b:5d:bc:21:26:d2:5c:66:45:87:88:c3:
1f:c7:67:ab:bc:7b:70:04:76:67:60:5a:d2:87:2a:
39:69:43:57:71:13:9b:fd:7f:11:e0:31:c2:92:aa:
b7:be:1c:ac:d6:a1:71:d5:d1:1a:f5:de:7a:c2:81:
3a:2e:33:71:69:1b:3f:f8:a2:b9:89:84:8b:ee:d9:
6a:a2:a0:85:80:6e:cf:58:b8:99:2a:cc:f3:69:19:
5f:44:21:89:da:ac:32:ab:b8:78:2f:15:e0:1b:da:
20:f3:44:30:86:c5:37:f7:53:8f:4b:f5:fe:02:2f:
e6:1b:42:5d:d1:8f:b0:b5:21:ce:bb:af:57:ac:60:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:61:B7:BF:FA:0E:99:EE:54:6F:70:6B:2D:2F:95:E6:75:10:51:DC
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YWG3v_oOme5Ub3BrLS-V5nUQUdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/22
45.67.117.0/24
45.150.168.0/22
45.151.196.0/22
89.40.161.0/24
91.242.70.0-91.242.73.255
91.242.75.0/24
91.242.123.0-91.242.127.255
185.40.105.0/24
185.173.244.0/24
193.31.104.0/22
194.50.201.0/24
194.180.238.0/24
195.138.109.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d5:c6:1e:b8:81:05:ce:73:b6:88:c9:e0:51:40:a7:b6:ac:
3b:d5:16:09:45:ff:ef:57:5a:6f:c1:a4:1c:63:89:a9:8c:9b:
7f:0b:4a:26:fd:5d:ad:ec:ba:9e:1c:e8:0d:fa:d3:f9:46:26:
ba:2d:63:92:f0:03:a4:05:91:06:34:11:22:40:2e:af:2a:10:
0f:98:ad:51:ad:9d:23:07:0d:ae:e5:c9:c9:ea:63:25:62:6e:
d0:da:31:19:b6:ed:07:49:9a:8d:80:e4:91:93:f1:9d:a1:85:
6a:fe:62:44:85:f9:60:31:46:ae:58:bb:c2:08:c1:6d:fa:28:
86:30:df:29:8f:d5:29:6e:6f:75:2a:5c:05:ff:70:3a:b0:2e:
e7:7b:c6:e1:9a:1e:2a:ec:5b:6e:46:06:01:3c:a9:92:51:cd:
c4:25:98:8d:55:a8:eb:c0:1e:c8:f2:ec:23:50:4c:56:fa:ce:
3d:0f:58:82:ad:2c:4a:1f:f7:33:43:36:82:27:96:15:ab:c0:
67:bf:d4:f2:9f:25:88:30:a7:74:5a:36:18:28:90:92:60:b8:
1d:6d:34:de:6e:8a:2a:cd:4f:2b:d7:ad:52:ee:bf:6e:eb:95:
5e:f8:d8:34:d8:fc:54:a3:1d:97:63:df:be:8a:7d:ab:f9:7d:
a4:61:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 18:08:11 2024 by rpki-client on console-fra.rpki-client.org