Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YmAuOreINw_t-Ajv25d2jxkhZbs.roa
File: YmAuOreINw_t-Ajv25d2jxkhZbs.roa (raw, json)
Hash identifier: fzullVVD65thYcGrZ5lvI6kN1sy9vNppXCRRjvOaAwM=
Subject key identifier: 62:60:2E:3A:B7:88:37:0F:ED:F8:08:EF:DB:97:76:8F:19:21:65:BB
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018615CF91CC919B6C18E8AA368C7455E9CD
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YmAuOreINw_t-Ajv25d2jxkhZbs.roa
Signing time: Fri 03 Feb 2023 05:46:09 +0000
ROA not before: Fri 03 Feb 2023 05:46:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30738
IP address blocks: 195.211.53.0/24 maxlen: 24
46.8.184.0/21 maxlen: 24
188.130.254.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
2001:1468:8000::/36 maxlen: 36
2001:1468::/32 maxlen: 33
Validation: Failed, certificate revoked on Fri 03 Feb 2023 07:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:15:cf:91:cc:91:9b:6c:18:e8:aa:36:8c:74:55:e9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Feb 3 05:46:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62602e3ab788370fedf808efdb97768f192165bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:a3:0e:d4:03:3d:59:c9:a0:d9:b3:92:3d:
d0:56:04:f5:22:60:b6:d7:71:e4:30:23:64:01:fd:
46:0e:62:9d:7f:92:ac:d9:01:a6:d1:a9:f6:60:e6:
14:14:85:d3:d1:14:ff:c1:31:f7:0e:18:e1:1b:c2:
f7:5f:14:4d:3f:77:07:37:ee:84:d4:af:12:8f:e3:
0d:8b:1f:7f:db:7a:3a:db:f9:8d:a2:29:ce:f3:58:
d5:c4:c9:6c:77:7c:a9:80:07:70:0f:04:24:ae:d5:
31:01:15:f4:02:bf:a9:ed:98:81:cf:e9:8b:ae:4c:
96:ab:82:de:06:b4:22:69:43:91:8f:4d:36:00:92:
53:e4:15:63:0a:a7:1e:c4:99:45:c7:ce:29:99:c9:
9b:ac:5b:9c:76:05:93:36:df:2f:78:2b:07:8d:61:
fd:17:17:ce:a3:01:6e:bf:c0:11:06:77:01:df:af:
2a:88:99:a9:2a:b5:c6:f8:cf:3f:a5:fc:86:2d:55:
a7:21:de:5a:bb:6f:8f:e8:8e:30:3b:e2:a2:da:ad:
2c:7a:4f:13:76:d7:e3:a0:fa:61:01:fa:d2:6b:73:
75:99:57:02:0a:0c:88:55:3b:d9:00:40:b2:8d:a0:
4c:2c:4b:1f:e2:9e:c6:80:04:90:b7:a8:eb:fd:16:
07:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:60:2E:3A:B7:88:37:0F:ED:F8:08:EF:DB:97:76:8F:19:21:65:BB
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YmAuOreINw_t-Ajv25d2jxkhZbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.184.0/21
188.130.182.0/24
188.130.254.0/24
195.211.53.0/24
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
33:7f:51:20:f3:38:c7:b4:23:28:3f:52:3a:3e:ec:19:70:3c:
fa:10:dd:63:f4:26:1a:6d:4e:20:8d:d9:b2:22:54:e4:69:45:
dc:d9:0f:48:b8:82:10:e5:c8:47:7d:11:1b:58:45:e8:d3:d4:
11:d0:53:85:f1:a9:f3:07:c4:d9:55:c1:07:6c:50:51:bf:6a:
34:c3:77:7d:c5:d9:6c:56:b8:04:69:d4:5a:cb:24:25:3c:4f:
33:e8:d9:95:5b:b1:56:6e:fa:27:0f:6b:7d:7a:70:99:72:0a:
90:25:2b:e4:08:94:e5:17:2c:eb:28:f4:a9:97:2c:a1:ad:01:
41:05:ab:2d:bd:38:be:d7:59:3d:5c:29:c6:85:f3:7c:c9:a9:
eb:f0:b9:f7:4b:63:a2:6e:1d:06:1d:45:41:08:27:2a:c1:0c:
bb:29:31:09:c9:4c:69:0d:ab:48:46:19:55:e0:3b:d5:19:bc:
d3:45:c0:b4:03:f2:14:3c:d2:7e:5e:3c:60:93:f5:60:3b:aa:
49:cb:f3:15:67:9e:8d:00:b7:65:13:6c:5b:97:59:a2:1e:5c:
ed:90:4a:88:05:a1:55:7c:20:1c:82:65:b2:82:c2:01:19:ea:
92:52:90:cc:4f:8f:6b:54:71:b8:61:19:60:14:84:18:0a:af:
0e:8a:9d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org