Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/YADQb0pm_heeKvf_PE85XRockic.roa
File: YADQb0pm_heeKvf_PE85XRockic.roa (raw, json)
Hash identifier: BuE/75dIblEA0Ny8PrzcClTBnx0mItfWRG2XsTH02UY=
Subject key identifier: 60:00:D0:6F:4A:66:FE:17:9E:2A:F7:FF:3C:4F:39:5D:1A:1C:92:27
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 0186C067E9861D0F7A534F85F1C9BBDB1B2C
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/YADQb0pm_heeKvf_PE85XRockic.roa
Signing time: Wed 08 Mar 2023 08:48:00 +0000
ROA not before: Wed 08 Mar 2023 08:48:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15659
IP address blocks: 213.187.160.0/19 maxlen: 19
80.202.0.0/16 maxlen: 16
89.10.0.0/16 maxlen: 16
217.13.0.0/19 maxlen: 19
213.187.190.0/24 maxlen: 24
213.145.160.0/19 maxlen: 19
84.48.0.0/17 maxlen: 18
84.48.0.0/18 maxlen: 18
89.11.0.0/17 maxlen: 17
84.49.101.0/24 maxlen: 24
84.49.0.0/16 maxlen: 16
2a04:980::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 16 Mar 2023 11:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:67:e9:86:1d:0f:7a:53:4f:85:f1:c9:bb:db:1b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Mar 8 08:48:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6000d06f4a66fe179e2af7ff3c4f395d1a1c9227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f3:ed:c8:f5:48:65:ae:69:d2:2b:89:b5:94:
45:ec:03:5c:7c:2a:7c:84:e1:99:72:c0:b8:5f:49:
2d:ce:11:b0:e7:b4:0e:ec:7b:5d:b7:ef:ef:4e:40:
81:3f:1c:01:7b:3c:4a:b8:2d:73:23:f7:cc:70:a4:
57:eb:9e:1d:83:ff:f3:af:4d:51:4e:f8:2f:3a:5c:
93:23:47:aa:3c:03:95:1b:05:61:2a:33:40:ec:61:
0d:92:9f:51:c7:b4:62:fe:20:61:21:82:28:cc:14:
4f:d2:60:42:6a:b5:0a:94:47:c6:92:cc:52:41:de:
b2:f2:30:38:64:af:12:96:7c:40:1a:87:d9:f9:ea:
0f:f9:e3:c2:1e:07:83:40:55:4d:3b:c7:18:38:c6:
3f:28:6d:79:b0:32:e7:7e:4b:0c:d0:1b:0f:78:41:
38:06:c8:62:94:60:4e:ab:66:86:74:a6:2b:f0:ca:
93:32:d9:ae:b5:bd:ad:20:98:06:85:ee:73:eb:0b:
5a:94:73:c9:95:e0:f3:a6:a8:c7:e6:9f:06:25:5f:
0e:c9:c4:6d:66:df:d0:2e:73:4f:7c:92:46:cb:0b:
86:4a:ca:4f:3c:09:55:be:cf:cb:e1:d2:04:29:75:
90:e1:5a:b0:95:6b:a4:1b:fd:61:ff:4c:6b:8a:34:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:00:D0:6F:4A:66:FE:17:9E:2A:F7:FF:3C:4F:39:5D:1A:1C:92:27
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/YADQb0pm_heeKvf_PE85XRockic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.202.0.0/16
84.48.0.0/17
84.49.0.0/16
89.10.0.0-89.11.127.255
213.145.160.0/19
213.187.160.0/19
217.13.0.0/19
IPv6:
2a04:980::/29
Signature Algorithm: sha256WithRSAEncryption
cb:30:c1:42:24:93:bf:08:a8:64:3d:0a:4a:7b:b6:de:f3:d5:
ec:f0:dc:4a:09:48:c4:32:9d:0f:44:21:da:03:b1:df:de:69:
ae:6d:fd:45:5f:e1:35:24:0b:a5:96:01:2f:e2:77:09:fa:50:
e4:10:01:db:98:37:84:9f:2f:08:d5:ca:bc:09:d4:40:06:4d:
5a:8f:66:cc:60:8c:28:7b:92:16:15:38:2d:c5:ac:d1:1d:ff:
cd:e7:85:1a:ff:c4:20:0e:35:f9:41:23:d5:80:a5:d8:60:fc:
5f:1a:3f:34:ac:80:3d:bf:ca:3e:d0:be:63:c7:95:75:0b:39:
40:2e:8e:7d:58:77:87:45:0d:56:61:3a:d5:6c:b6:5c:e3:95:
20:75:fe:89:89:da:70:4d:11:3e:31:2a:34:d1:89:25:8d:dc:
bd:f2:d2:91:d2:15:a1:42:f3:54:e8:a3:ae:b7:6d:c7:cf:e3:
b4:24:a1:ff:2c:0b:c8:e2:f3:3b:19:d2:28:6e:57:79:43:33:
a3:ec:82:a6:17:f7:82:94:59:32:72:75:8d:aa:99:60:d2:b8:
4c:5a:27:33:2b:da:6a:52:2e:50:d5:2f:7f:cf:9f:70:e1:fd:
3e:25:26:69:fa:72:88:49:1b:39:79:41:58:a7:ba:ca:b9:c4:
ef:19:00:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:08 2024 by rpki-client on console-ams.rpki-client.org