Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/YO0BvnUHDeqn9JgVzuNoLeewYgY.roa
File: YO0BvnUHDeqn9JgVzuNoLeewYgY.roa (raw, json)
Hash identifier: UiaGWup3UtNyqZ64uBKO/8h9/xCxBClGYuN1HvlLtXc=
Subject key identifier: 60:ED:01:BE:75:07:0D:EA:A7:F4:98:15:CE:E3:68:2D:E7:B0:62:06
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018E85C72907FBED067C46644BE7EC8659B2
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/YO0BvnUHDeqn9JgVzuNoLeewYgY.roa
Signing time: Thu 28 Mar 2024 15:56:45 +0000
ROA not before: Thu 28 Mar 2024 15:56:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 45.87.126.0/24 maxlen: 24
45.95.29.0/24 maxlen: 24
94.154.190.0/24 maxlen: 24
193.187.105.0/24 maxlen: 24
194.59.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 17:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:c7:29:07:fb:ed:06:7c:46:64:4b:e7:ec:86:59:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 28 15:56:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60ed01be75070deaa7f49815cee3682de7b06206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:57:bc:88:3b:07:9d:62:58:b1:e9:10:d2:b7:
58:47:65:ab:7b:15:5c:50:7f:b1:04:b2:eb:e7:89:
83:ab:f2:a9:c6:7d:2e:9b:eb:68:49:76:4c:20:bd:
00:05:c9:ac:f9:53:34:46:ff:b7:3b:55:89:d1:60:
1e:68:60:d4:7b:21:05:5d:32:80:f7:b5:a3:6b:e8:
e4:eb:d0:f0:63:73:2b:15:89:c5:31:37:3d:a1:c0:
93:27:c8:bd:b5:2a:43:12:53:f5:b3:b7:1e:31:ff:
f5:14:c2:17:1b:c7:e7:f0:f8:93:c4:58:3f:86:03:
e3:ac:7c:75:2a:9e:db:dc:9d:b7:53:a4:a0:2d:18:
99:02:2b:22:0d:b5:a8:69:ae:4b:9c:1f:0e:ec:fd:
08:da:db:11:09:45:37:cb:0a:15:d7:73:06:98:a8:
ae:da:29:00:0b:39:9b:4d:1d:aa:4c:bb:4a:18:8f:
a8:ee:91:78:41:64:56:85:95:d6:07:12:fd:18:03:
3d:a5:88:cc:cb:e7:e5:94:82:7a:b5:44:61:2b:8e:
aa:bf:70:53:ce:b3:bc:50:7f:3a:79:cf:7e:78:51:
33:e3:a3:3d:87:07:b7:07:96:fa:e6:c5:57:63:8d:
12:dd:0f:c7:90:28:7c:b6:80:85:96:e6:4d:43:95:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:ED:01:BE:75:07:0D:EA:A7:F4:98:15:CE:E3:68:2D:E7:B0:62:06
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/YO0BvnUHDeqn9JgVzuNoLeewYgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.126.0/24
45.95.29.0/24
94.154.190.0/24
193.187.105.0/24
194.59.187.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:34:25:45:b4:b5:eb:82:e4:d3:8e:2d:28:5f:a5:08:cd:2f:
3b:0c:20:0f:e1:2d:17:79:4d:6c:46:26:ff:ff:a4:28:c0:56:
f1:e3:6e:18:28:29:26:d5:b3:b7:7d:b2:ca:4f:04:86:ce:b8:
aa:89:7e:04:8f:27:d6:c3:a3:4f:25:76:5d:5d:32:c0:3c:e4:
db:2d:c7:fb:22:4c:15:73:0b:bc:a2:b4:76:5e:f6:bb:99:5f:
be:0c:28:95:95:a0:36:0c:7b:13:b8:6e:4d:e3:01:c7:91:45:
3c:a8:c1:ff:63:7b:55:43:e1:25:05:df:08:ed:44:39:85:9b:
c9:46:6e:59:ae:10:4f:0a:38:d2:1f:94:18:1a:72:e1:25:98:
ad:14:a9:2a:74:38:f9:1a:00:3f:69:32:65:8a:a2:97:e9:96:
54:a9:23:1b:b5:95:92:39:d7:3f:a9:3e:7f:a5:69:9d:e5:9e:
57:0a:90:a7:4d:31:49:db:98:62:4d:f0:93:7d:d7:bf:36:88:
70:bd:29:cb:b0:a4:db:4e:f3:56:f2:af:20:17:2a:21:9b:57:
f1:5a:9f:93:6b:f5:e2:a4:44:eb:a2:10:ad:f2:d4:5a:1b:0f:
c8:87:14:12:09:c8:10:fa:7e:34:91:a0:23:7b:13:b2:e8:f8:
d3:b2:97:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 21:42:04 2024 by rpki-client on console-fra.rpki-client.org