Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ytjEoap_5RH_NVk2MxPldLD9-1U.roa
File: ytjEoap_5RH_NVk2MxPldLD9-1U.roa (raw, json)
Hash identifier: 1wYEyazvGr2O+CO9twIK1qmVuYnJYY1+n2zJ5UtPIGk=
Subject key identifier: CA:D8:C4:A1:AA:7F:E5:11:FF:35:59:36:33:13:E5:74:B0:FD:FB:55
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0186885EBACA6543B8B5DCE38C0D47090F60
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ytjEoap_5RH_NVk2MxPldLD9-1U.roa
Signing time: Sat 25 Feb 2023 11:39:14 +0000
ROA not before: Sat 25 Feb 2023 11:39:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 45.15.208.0/23 maxlen: 23
45.15.210.0/24 maxlen: 24
45.90.200.0/22 maxlen: 24
45.86.190.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 25 May 2023 07:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:88:5e:ba:ca:65:43:b8:b5:dc:e3:8c:0d:47:09:0f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Feb 25 11:39:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cad8c4a1aa7fe511ff3559363313e574b0fdfb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9e:b9:57:cc:94:9d:68:10:db:82:ad:f0:e3:
13:3c:00:70:15:a4:1f:d5:32:94:98:f4:9f:e9:ae:
fa:d2:02:94:4d:23:b0:83:dc:4a:8b:d8:e1:13:1a:
87:ea:ec:77:ba:1e:15:bd:7f:50:53:9d:54:1d:13:
86:77:f8:20:c7:39:29:b3:7d:53:e1:db:af:07:56:
b6:31:6c:40:9d:e3:c2:dd:4f:3f:18:ea:bd:0e:e4:
36:20:b4:60:86:65:51:7e:a8:b5:3d:e2:d1:6d:05:
68:be:5a:e6:88:39:e7:b9:d7:cc:7e:9b:86:ed:5f:
af:0c:a9:f8:fb:04:ea:07:ef:a4:95:a4:bd:9f:03:
1b:77:39:bc:ee:00:58:c4:f3:33:31:73:ac:88:80:
95:45:58:48:04:a9:33:99:0a:b4:69:c9:b0:4a:4e:
fc:ea:c2:81:88:de:1b:4d:b1:5f:9d:e6:32:14:37:
e6:a7:e7:57:0a:ca:f0:1f:91:3a:2d:80:53:04:7d:
6f:42:9a:35:41:a3:52:38:f8:cd:3b:38:ac:c0:5c:
6b:0f:07:9d:b7:be:a5:f6:8b:51:e8:a6:3a:1d:74:
8a:7c:3a:0d:be:b3:db:32:8a:b0:e2:42:32:44:8d:
be:60:e4:08:60:2d:f7:02:f0:e2:ad:bf:ee:f6:40:
74:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D8:C4:A1:AA:7F:E5:11:FF:35:59:36:33:13:E5:74:B0:FD:FB:55
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ytjEoap_5RH_NVk2MxPldLD9-1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.208.0-45.15.210.255
45.86.190.0/23
45.90.200.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:c2:df:28:b2:5c:aa:5e:da:10:a2:f8:ff:5e:d8:0a:10:fd:
41:3b:1e:d1:ed:cf:7e:09:55:de:2c:21:e4:87:50:71:69:5d:
72:cb:1d:86:40:ef:d3:32:49:97:57:5c:e3:d9:8a:df:9b:75:
5f:a0:d3:b7:d3:23:c3:3c:90:5a:9e:37:77:6a:00:c0:16:e1:
63:ef:28:98:35:3c:15:bd:b8:64:68:e8:d1:62:4c:ff:c5:61:
d1:44:63:af:a7:ff:aa:3a:dc:98:79:9f:a7:35:f3:0c:0c:20:
24:4d:70:84:a8:d5:c4:86:d0:cc:86:51:ca:67:c8:b1:42:07:
1b:95:5c:c9:6e:16:4e:e0:c3:f2:f8:48:16:46:68:b4:13:d3:
63:7e:b8:ee:0e:eb:a2:68:ce:1a:fa:f5:68:ef:51:e3:51:4d:
46:f6:f5:78:f0:80:07:4e:16:7d:0d:d9:f8:f9:21:59:55:95:
74:d8:72:fa:1b:a6:f2:92:58:84:56:40:9d:9a:52:21:77:33:
6a:c6:ae:42:c8:9f:07:e2:5f:c5:45:d7:ec:08:36:a7:94:82:
c2:ef:66:1d:0a:2e:da:78:0b:9c:6c:fd:34:85:11:3c:15:ad:
5a:34:52:97:2d:39:ad:bb:9b:f7:4c:1a:e4:f4:00:6b:65:40:
21:54:f1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:37 2024 by rpki-client on console-ams.rpki-client.org