Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/YvDbIRGRTXrqHekt0UlB1zmN6mM.roa
File: YvDbIRGRTXrqHekt0UlB1zmN6mM.roa (raw, json)
Hash identifier: 5ccpOtNQY6d+gAK8Ydpjg06wmPeMZDIE1hSmx3bbRGg=
Subject key identifier: 62:F0:DB:21:11:91:4D:7A:EA:1D:E9:2D:D1:49:41:D7:39:8D:EA:63
Certificate issuer: /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Certificate serial: 0192DA2B31F881B2692DCEE4FEA2FE072EE7
Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/YvDbIRGRTXrqHekt0UlB1zmN6mM.roa
Signing time: Tue 29 Oct 2024 21:25:16 +0000
ROA not before: Tue 29 Oct 2024 21:25:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208882
IP address blocks: 45.81.40.0/23 maxlen: 23
45.81.40.0/24 maxlen: 24
92.249.26.0/24 maxlen: 24
2a0d:ff40::/29 maxlen: 29
2a0e:4d80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 06 Nov 2024 08:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:da:2b:31:f8:81:b2:69:2d:ce:e4:fe:a2:fe:07:2e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Validity
Not Before: Oct 29 21:25:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62f0db2111914d7aea1de92dd14941d7398dea63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:20:ef:18:e5:2b:ff:a8:af:36:d9:28:1b:
f3:99:19:50:ca:76:09:1c:35:01:61:60:68:81:9f:
6f:5e:62:be:7c:16:bb:d8:7a:05:e4:36:7c:3f:28:
16:3b:e5:82:27:f4:8a:e4:c3:27:54:47:ac:58:2f:
81:8d:b3:13:76:fe:cf:49:44:e5:ca:0a:81:2e:5d:
f7:71:a3:80:c5:96:94:e9:53:75:45:44:2d:f7:b8:
20:3f:7c:44:b1:95:70:ca:01:76:b1:4b:e8:6f:11:
22:70:56:1c:12:86:52:62:41:8f:3f:94:f4:98:ed:
3b:61:6f:27:05:3e:7b:9a:06:b6:2d:a0:ae:4e:19:
4c:fa:5a:26:e3:75:57:7e:13:6b:09:79:63:a4:15:
26:76:aa:0d:c2:91:72:7c:54:fc:03:6e:46:5c:bc:
96:3b:2f:e2:cc:b7:d1:04:34:3c:5f:8f:d9:bd:81:
fc:e5:01:34:73:a1:f0:0c:6b:23:02:e1:36:59:d0:
8c:2f:b7:f7:ec:02:83:f9:2f:d8:6b:34:6b:0f:61:
a1:30:b4:51:32:5c:13:42:e0:31:40:f9:57:7c:cf:
48:5a:b1:7f:69:be:86:09:9f:26:97:9a:ae:b8:13:
0a:29:99:d7:af:8d:76:f6:a9:c7:7e:9a:2b:c8:33:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F0:DB:21:11:91:4D:7A:EA:1D:E9:2D:D1:49:41:D7:39:8D:EA:63
X509v3 Authority Key Identifier:
keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/YvDbIRGRTXrqHekt0UlB1zmN6mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.40.0/23
92.249.26.0/24
IPv6:
2a0d:ff40::/29
2a0e:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
02:37:2d:14:e0:3d:9d:e3:a7:18:fb:e3:44:04:c6:b4:bb:c1:
19:fa:99:54:0b:3f:95:76:e1:7c:1d:ce:d5:61:15:f1:c7:15:
0b:ed:0f:a2:14:c5:34:bc:ce:78:da:45:b3:c4:2e:d0:23:47:
f9:7c:10:7a:b9:a2:16:32:d3:cf:37:15:c8:55:02:b6:92:97:
b6:ee:f0:12:50:11:32:90:7b:e5:b1:d4:e0:34:21:eb:b5:58:
d4:26:75:0f:ed:75:ad:6f:3e:fb:f9:96:bd:ce:92:7c:67:05:
dd:02:99:f8:d2:93:56:9a:ec:bf:40:09:17:6a:9d:2b:02:9e:
dd:51:e2:3b:21:16:b5:84:29:1b:8c:ff:d0:d2:28:15:ab:e6:
eb:54:b9:96:ee:03:e0:d4:7b:06:ee:20:e7:69:c9:dc:d0:03:
8f:12:f3:a1:c6:51:42:7b:d1:22:6d:58:ca:f1:60:77:63:6f:
e2:11:d0:59:32:8a:e0:f1:54:da:61:0a:3b:35:2a:8f:8b:33:
4f:ef:a1:91:cb:9a:54:c4:4f:f5:21:2a:77:a3:ea:08:1e:c7:
b6:51:fd:37:89:df:33:3b:f3:69:45:62:d3:c8:69:37:47:43:
83:55:b2:79:53:b5:5d:32:c2:a9:47:55:37:7f:fe:2c:3a:c0:
f5:97:f4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 10:12:03 2024 by rpki-client on console-fra.rpki-client.org