Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yBAeBTY-pYBZ3CWHYNdP_whCiDI.roa
File: yBAeBTY-pYBZ3CWHYNdP_whCiDI.roa (raw, json)
Hash identifier: swc5angeAH9qW92LZK1vWfjYEzK1UOps+8xpcX8/FDg=
Subject key identifier: C8:10:1E:05:36:3E:A5:80:59:DC:25:87:60:D7:4F:FF:08:42:88:32
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01929E441EE7908B8F21DA01DC1E9CC37C45
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yBAeBTY-pYBZ3CWHYNdP_whCiDI.roa
Signing time: Fri 18 Oct 2024 06:15:17 +0000
ROA not before: Fri 18 Oct 2024 06:15:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 107.150.169.0/24 maxlen: 24
107.150.173.0/24 maxlen: 24
162.218.177.0/24 maxlen: 24
162.218.178.0/24 maxlen: 24
167.160.1.0/24 maxlen: 24
167.160.2.0/24 maxlen: 24
185.192.213.0/24 maxlen: 24
185.192.214.0/24 maxlen: 24
185.203.150.0/24 maxlen: 24
185.212.173.0/24 maxlen: 24
185.212.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 06:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9e:44:1e:e7:90:8b:8f:21:da:01:dc:1e:9c:c3:7c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 18 06:15:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8101e05363ea58059dc258760d74fff08428832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:62:14:b5:f2:6f:61:9a:73:05:45:4c:8e:
f3:4f:23:16:1e:e1:a7:1b:2c:d6:16:0f:7e:8e:bc:
26:fc:d6:56:06:29:f3:73:3f:20:e3:44:dd:7c:a6:
71:33:e0:ae:35:3b:a4:18:29:64:d9:16:0b:80:91:
7c:12:a5:1c:7c:af:ee:f8:bf:49:2c:0a:df:41:a7:
d6:01:0c:b5:a9:72:ef:28:71:ef:17:8c:43:91:1f:
cc:66:dc:e5:3a:c8:c1:78:c1:0d:4b:9b:a5:da:58:
4f:79:2d:8f:29:41:7e:6e:e1:38:45:c7:c6:e8:0b:
80:ae:ca:cf:01:a1:10:f2:b5:2c:37:9a:5f:4c:0e:
d3:fb:ee:86:b5:3c:98:38:3f:cb:27:f6:fa:3b:c8:
a4:26:e6:e6:9c:e9:f2:0b:35:c9:97:8a:2d:04:0f:
51:9b:22:0c:0b:c8:3f:1c:81:70:3b:5b:27:ac:46:
88:4a:99:b1:e6:b0:5d:38:bd:74:35:21:52:37:ba:
31:60:ac:bc:7b:4a:e4:ca:e6:a5:31:6b:cb:37:b0:
b5:5c:b4:ee:ab:7f:75:5d:27:f8:b5:14:d4:a0:4e:
b5:94:39:fe:7a:c5:dd:55:82:d2:fc:68:81:59:86:
10:e0:23:72:23:e9:bc:f2:f2:24:1b:bf:52:87:7a:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:10:1E:05:36:3E:A5:80:59:DC:25:87:60:D7:4F:FF:08:42:88:32
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yBAeBTY-pYBZ3CWHYNdP_whCiDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.150.169.0/24
107.150.173.0/24
162.218.177.0-162.218.178.255
167.160.1.0-167.160.2.255
185.192.213.0-185.192.214.255
185.203.150.0/24
185.212.173.0-185.212.174.255
Signature Algorithm: sha256WithRSAEncryption
6a:3c:4e:59:df:ba:02:a3:7e:be:ad:42:42:39:5d:24:41:b0:
83:5a:72:e0:dd:1d:bc:86:b8:ef:09:8b:ca:5d:7b:e2:02:28:
ca:08:59:fc:d6:0b:23:31:58:3f:df:52:7f:bd:8a:a7:80:1c:
88:8b:e6:61:0a:a8:19:d0:c1:83:36:fa:37:63:c4:ce:b6:fa:
53:ea:e3:c2:27:0a:7e:d1:fa:24:4b:2a:e5:bf:57:28:57:96:
59:cd:f0:c5:df:35:77:c1:dc:b0:f0:08:97:d6:ac:e5:60:24:
f7:67:5b:0e:9b:65:d2:2b:e7:2b:7b:c0:ea:03:8d:a1:d8:02:
1b:65:31:c6:c8:f7:c8:d5:af:1d:4b:82:eb:54:75:94:a5:14:
c7:93:13:c2:6b:d2:6c:7d:4c:67:6a:4d:9b:0a:eb:9c:a2:7b:
f9:55:8a:90:47:0b:5e:cd:de:8f:96:a5:aa:5e:f9:51:9c:81:
85:a1:e8:ca:35:f1:10:76:29:97:bb:de:5f:ea:ec:d6:71:1a:
74:51:ba:e9:30:7e:81:ee:1e:64:94:20:c3:cc:0b:07:4f:d0:
19:bc:ce:e1:4d:f1:01:2c:2b:60:07:70:b9:1c:18:dc:6a:18:
92:a6:a8:45:19:11:b9:6b:dc:ea:8c:e8:cc:87:81:16:bd:b0:
cd:92:7e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 09:32:27 2024 by rpki-client on console-fra.rpki-client.org