Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/Ystugnj4v4nmECapFfbG_43M8NY.roa
File: Ystugnj4v4nmECapFfbG_43M8NY.roa (raw, json)
Hash identifier: xsje69p3wxso9UbJbtEEkOSbZVNmy8MMvzWsYEoCdow=
Subject key identifier: 62:CB:6E:82:78:F8:BF:89:E6:10:26:A9:15:F6:C6:FF:8D:CC:F0:D6
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 0185720C79B2F689D93E56E3ACC1FFC2B4E3
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/Ystugnj4v4nmECapFfbG_43M8NY.roa
Signing time: Mon 02 Jan 2023 10:34:58 +0000
ROA not before: Mon 02 Jan 2023 10:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57136
IP address blocks: 91.230.248.0/24 maxlen: 24
194.105.143.0/24 maxlen: 24
194.105.142.0/23 maxlen: 23
194.105.142.0/24 maxlen: 24
194.126.205.0/24 maxlen: 24
194.102.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:79:b2:f6:89:d9:3e:56:e3:ac:c1:ff:c2:b4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Jan 2 10:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62cb6e8278f8bf89e61026a915f6c6ff8dccf0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:b0:93:c7:a8:c5:0b:90:5b:87:af:5c:b4:
74:22:dd:e8:1d:7a:60:a6:28:51:11:da:62:b8:32:
a1:26:1d:f2:63:be:7a:bb:4b:2a:d7:de:ac:0a:d3:
b5:6f:39:ed:af:f8:28:f3:da:cb:05:ce:90:f6:dc:
f3:d3:7e:d0:b1:c8:16:81:2e:68:5f:c1:82:03:a0:
0d:d7:c5:f9:b8:81:24:4c:26:5d:63:8d:f3:47:33:
4d:89:a6:10:41:be:65:cd:74:52:18:ab:e3:84:a8:
f0:81:fc:a5:44:d0:83:2b:8e:8e:46:30:24:2a:5d:
3c:53:c6:18:6d:aa:33:67:54:5f:b3:e5:a0:90:86:
f1:37:50:26:fa:99:3f:5a:25:ac:eb:99:66:c3:77:
ba:15:68:46:6b:f1:9a:7c:7f:8c:87:50:74:15:6c:
9b:11:9f:61:07:42:19:ac:2f:a7:b1:07:75:80:64:
a9:e5:63:23:7c:d4:c9:e7:da:52:2b:c0:ea:5c:c0:
31:7c:90:8d:b4:9f:02:66:e4:c1:0b:df:5a:44:07:
ba:e3:72:d3:c4:3e:59:82:a1:2e:dc:a3:5d:e3:b9:
85:3f:ca:c6:cd:81:fd:35:32:9d:49:ed:05:87:fd:
ef:63:57:7f:4c:44:81:87:98:c2:a6:19:db:64:36:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CB:6E:82:78:F8:BF:89:E6:10:26:A9:15:F6:C6:FF:8D:CC:F0:D6
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/Ystugnj4v4nmECapFfbG_43M8NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.248.0/24
194.102.117.0/24
194.105.142.0/23
194.126.205.0/24
Signature Algorithm: sha256WithRSAEncryption
85:96:d4:82:33:aa:3e:8a:b2:a6:a6:f9:13:c6:79:b6:72:70:
4c:09:63:0e:15:d9:2c:1e:11:22:c8:0a:af:90:a3:a4:25:41:
cc:f1:a5:e9:8e:b4:75:3f:85:dd:66:a1:a4:94:87:e9:a2:69:
96:1a:28:d1:63:d5:f6:8b:05:1c:b2:0f:89:20:f1:f7:bf:d6:
32:45:70:8a:a9:8f:ab:04:28:0d:67:3a:7f:1f:d2:d2:18:4a:
03:cc:b9:c7:ae:b0:49:d0:70:5e:93:7a:df:90:2b:4f:00:12:
ff:20:09:c2:ca:c7:d0:d7:af:ee:a7:3b:01:32:e6:92:bc:68:
d8:a0:e7:d9:4a:6e:f4:0e:86:6f:af:8a:95:34:41:5e:5a:bc:
1d:44:5b:75:cc:01:3a:e0:ce:97:0d:cf:69:09:44:86:eb:b6:
20:68:5f:ba:a7:b3:99:b8:ec:8b:a1:7e:8a:c6:62:b9:d4:61:
01:af:c3:c6:aa:9b:b3:8d:c9:d9:95:fe:2c:37:cd:8d:42:77:
f2:7c:2e:77:82:2f:d4:9e:23:e9:b4:24:fd:09:ef:5f:36:7f:
30:e4:35:f9:e0:e8:d9:04:12:48:0b:32:10:9a:3f:7f:b3:df:
dc:9e:2d:49:ce:29:7a:91:51:64:42:15:44:dc:c1:6b:57:94:
06:fe:06:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:10 2024 by rpki-client on console-fra.rpki-client.org