Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Yu4mFNSRBE6vVvDVK7I_xBZbRrE.roa
File: Yu4mFNSRBE6vVvDVK7I_xBZbRrE.roa (raw, json)
Hash identifier: 6Y9srrqs9FpkMKIGMeu2GZPV53GeDJ60bTCeOFJDfJk=
Subject key identifier: 62:EE:26:14:D4:91:04:4E:AF:56:F0:D5:2B:B2:3F:C4:16:5B:46:B1
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018B5553E7DD57D60A44275DA0FF00D73A3A
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Yu4mFNSRBE6vVvDVK7I_xBZbRrE.roa
Signing time: Sun 22 Oct 2023 03:00:44 +0000
ROA not before: Sun 22 Oct 2023 03:00:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142578
IP address blocks: 85.92.113.0/24 maxlen: 24
45.134.146.0/24 maxlen: 24
45.134.147.0/24 maxlen: 24
45.93.18.0/24 maxlen: 24
45.93.19.0/24 maxlen: 24
193.107.219.0/24 maxlen: 24
193.107.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:55:53:e7:dd:57:d6:0a:44:27:5d:a0:ff:00:d7:3a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Oct 22 03:00:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62ee2614d491044eaf56f0d52bb23fc4165b46b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:56:33:f3:fa:e9:a9:51:22:bd:e8:83:60:
a4:bc:38:5d:64:2d:7e:86:99:9a:9e:6e:31:13:e1:
80:41:ab:a1:13:22:28:b5:84:99:d9:a4:6f:ff:06:
2c:95:43:fb:72:78:bc:03:b7:d5:9e:bc:d6:08:b3:
ee:a3:04:10:04:bb:c4:78:5d:c9:e6:6d:33:23:08:
fc:d1:75:0e:41:dc:b9:6b:e8:97:dd:09:62:78:be:
27:8f:d9:97:85:b4:57:ab:c3:5e:ca:43:13:aa:2c:
38:92:9c:73:8b:49:d0:0a:15:3c:ff:74:5c:65:2a:
5d:57:97:4f:4b:76:81:e7:c7:35:96:4d:05:f7:33:
cf:dd:22:b1:a1:79:19:40:cd:e2:fa:74:a6:a2:97:
8d:8e:e2:52:bb:47:f1:51:03:d5:9f:4a:25:14:c3:
7d:b9:76:04:b4:6c:7d:cc:70:c2:ed:82:36:6a:43:
5a:20:db:d9:58:b5:64:fe:62:a8:dc:db:cc:2d:b3:
6a:83:28:c6:bd:60:76:a2:b7:c2:f4:73:01:5a:17:
0c:a0:55:84:5b:de:47:08:98:ec:8e:e9:da:e1:33:
95:d4:b1:fb:7e:ff:f1:90:f6:e7:f8:23:7a:d3:8f:
66:d9:2a:50:f5:fc:2e:33:5f:33:61:35:66:a3:ca:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EE:26:14:D4:91:04:4E:AF:56:F0:D5:2B:B2:3F:C4:16:5B:46:B1
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Yu4mFNSRBE6vVvDVK7I_xBZbRrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.18.0/23
45.134.146.0/23
85.92.113.0/24
193.107.217.0/24
193.107.219.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6e:0f:50:0b:bb:4d:2a:d0:df:51:78:b4:d5:9b:b3:66:81:
db:b7:11:ca:90:ed:c1:88:14:d3:fd:87:fa:b1:f8:a2:44:e2:
69:bc:83:67:77:51:8e:01:3a:aa:58:b9:e2:51:7c:a9:8c:07:
ed:9c:e0:7c:64:65:c9:a4:2d:98:57:19:bd:49:28:49:d5:d7:
52:d5:eb:2e:b0:40:ed:a8:b3:81:a6:99:60:0d:5d:cc:11:3e:
45:33:dd:35:d4:70:bc:db:df:7d:19:1b:f3:50:07:fc:c0:8b:
e9:b0:f8:ff:77:88:26:93:64:5d:44:f9:4d:c3:de:40:db:92:
3d:37:00:95:de:c6:90:b9:c6:ee:c9:1b:8a:ab:ff:eb:12:19:
94:08:85:ab:f8:18:5c:79:3f:ed:80:69:b7:48:f4:32:6f:40:
b7:b3:aa:9b:27:e5:f7:b3:ac:e2:c8:98:f8:03:bf:e2:55:68:
5b:e0:fc:de:7e:24:8c:6f:31:e3:18:9f:2b:8e:50:a3:59:6d:
cc:4a:9a:5d:cb:58:5f:4d:af:1a:c2:8a:3d:44:04:53:da:b1:
ba:1d:30:c2:f7:0e:7d:8b:6d:ad:29:85:3a:ae:85:d2:7b:f6:
be:b2:c3:f3:b7:34:3a:41:38:73:65:dc:f8:b8:17:47:bf:31:
55:fa:d4:f8
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYtVU+fdV9YKRCddoP8A1zo6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjMxMDIyMDMwMDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmVlMjYxNGQ0OTEwNDRlYWY1NmYwZDUyYmIyM2ZjNDE2NWI0NmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyshWM/P66alRIr3og2CkvDhdZC1+
hpmanm4xE+GAQauhEyIotYSZ2aRv/wYslUP7cni8A7fVnrzWCLPuowQQBLvEeF3J
5m0zIwj80XUOQdy5a+iX3QlieL4nj9mXhbRXq8NeykMTqiw4kpxzi0nQChU8/3Rc
ZSpdV5dPS3aB58c1lk0F9zPP3SKxoXkZQM3i+nSmopeNjuJSu0fxUQPVn0olFMN9
uXYEtGx9zHDC7YI2akNaINvZWLVk/mKo3NvMLbNqgyjGvWB2orfC9HMBWhcMoFWE
W95HCJjsjuna4TOV1LH7fv/xkPbn+CN6049m2SpQ9fwuM18zYTVmo8oEDQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGLuJhTUkQROr1bw1SuyP8QWW0axMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvWXU0bUZOU1JCRTZ2VnZEVks3SV94QlpiUnJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBLV0SAwQB
LYaSAwQAVVxxAwQAwWvZAwQAwWvbMA0GCSqGSIb3DQEBCwUAA4IBAQB2bg9QC7tN
KtDfUXi01ZuzZoHbtxHKkO3BiBTT/Yf6sfiiROJpvINnd1GOATqqWLniUXypjAft
nOB8ZGXJpC2YVxm9SShJ1ddS1esusEDtqLOBpplgDV3MET5FM9011HC82999GRvz
UAf8wIvpsPj/d4gmk2RdRPlNw95A25I9NwCV3saQucbuyRuKq//rEhmUCIWr+Bhc
eT/tgGm3SPQyb0C3s6qbJ+X3s6ziyJj4A7/iVWhb4PzefiSMbzHjGJ8rjlCjWW3M
Sppdy1hfTa8awoo9RART2rG6HTDC9w59i22tKYU6roXSe/a+ssPztzQ6QThzZdz4
uBdHvzFV+tT4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org