Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/YTkMhMGg78m9j6hgJeM0yXD9xd4.roa
File: YTkMhMGg78m9j6hgJeM0yXD9xd4.roa (raw, json)
Hash identifier: JrhUR6WL7A8ev2dD6b9H++fqN4sI4G2O4CmAj0zWuVw=
Subject key identifier: 61:39:0C:84:C1:A0:EF:C9:BD:8F:A8:60:25:E3:34:C9:70:FD:C5:DE
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01856E01C02F929589774A9A71507982D86E
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/YTkMhMGg78m9j6hgJeM0yXD9xd4.roa
Signing time: Sun 01 Jan 2023 15:44:46 +0000
ROA not before: Sun 01 Jan 2023 15:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47637
IP address blocks: 176.100.33.0/24 maxlen: 24
37.114.37.0/24 maxlen: 24
94.154.49.0/24 maxlen: 24
2a00:ccc4::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 26 Feb 2023 19:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:c0:2f:92:95:89:77:4a:9a:71:50:79:82:d8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 15:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61390c84c1a0efc9bd8fa86025e334c970fdc5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:54:76:63:94:2a:1d:01:c0:64:d6:af:1d:a1:
60:c9:3b:0b:bb:ec:f0:09:47:18:c7:4c:90:49:fe:
94:40:34:e1:4b:ba:b9:da:ea:27:2c:0f:d6:12:f9:
75:c6:66:a7:6f:69:67:89:60:72:c0:f0:cb:79:1d:
d0:03:54:40:72:8a:1e:ae:89:2e:e8:c7:25:a2:4d:
c2:94:9d:88:4c:6f:74:3a:08:54:5a:53:af:61:08:
a5:8f:50:cf:e6:e3:f0:c0:68:ea:08:63:89:fc:d4:
c2:20:08:ab:49:eb:85:7d:d1:9d:85:db:d2:30:c8:
4d:bd:4c:36:c7:55:da:8b:db:05:d2:12:a0:5c:cb:
07:03:0a:ab:08:11:e4:2c:fa:c2:e6:a4:c2:75:ff:
fe:93:27:16:00:5c:f5:52:7a:47:18:f1:d4:25:73:
29:c9:19:38:79:94:5c:20:31:6f:dc:07:be:d6:59:
df:b4:7a:8e:87:5c:69:9b:2e:97:80:24:d2:bb:8e:
30:c7:ee:dd:eb:5f:ef:e9:55:df:9b:fe:09:fe:4c:
44:23:0f:58:14:1b:80:ef:3f:15:95:d1:e7:a1:84:
2f:ed:e4:56:a9:ae:29:10:65:4a:48:9f:e0:9a:8f:
34:83:d6:18:be:5c:ed:b0:2b:95:f0:7a:4c:9f:b5:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:39:0C:84:C1:A0:EF:C9:BD:8F:A8:60:25:E3:34:C9:70:FD:C5:DE
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/YTkMhMGg78m9j6hgJeM0yXD9xd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.37.0/24
94.154.49.0/24
176.100.33.0/24
IPv6:
2a00:ccc4::/32
Signature Algorithm: sha256WithRSAEncryption
cc:35:f2:b7:c3:eb:42:bb:f2:fd:90:88:0c:6c:26:1f:10:35:
5f:7e:86:5c:78:ee:b4:49:36:6b:88:14:66:e1:8f:ab:fb:2f:
f1:b0:c4:5c:08:0a:ea:ec:77:9b:07:a7:56:31:6e:23:e7:6d:
cf:60:69:96:34:ab:62:ba:d4:0d:54:e7:fd:48:bc:5a:63:83:
c5:09:a2:58:85:63:01:fb:a0:78:1e:ca:6f:f8:b5:f9:d5:61:
9c:54:20:38:4b:8e:42:66:66:87:fd:15:0e:85:55:93:55:0f:
63:cb:f0:b5:a8:cd:fd:1c:af:d0:a2:6e:76:c0:f7:0f:f9:8f:
b1:b8:ef:d7:f9:fd:9e:fb:4a:ca:f2:82:b5:d8:ea:9b:d1:1c:
ca:a2:16:22:03:de:14:6e:1d:b2:27:41:95:9b:0f:0f:e6:ce:
c5:a3:f9:9b:79:00:d6:df:45:a7:02:11:74:9e:df:fd:de:e0:
85:d9:60:e5:bc:d8:3b:a3:7d:57:8a:97:e6:ec:7e:fe:bc:b7:
75:87:4e:4e:f7:85:db:ff:e7:b5:da:cb:99:f3:9b:f2:1a:a3:
f3:58:ca:7c:04:07:9b:3d:ac:bc:7a:de:26:7e:9d:db:9c:4b:
81:0f:6e:6f:b1:fa:81:16:19:b8:52:22:b1:9a:bb:e4:16:05:
ba:0d:87:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:18 2024 by rpki-client on console-ams.rpki-client.org