Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YBc_Ig2Zn1zp9dLbP5LPCGhH9HA.roa
File: YBc_Ig2Zn1zp9dLbP5LPCGhH9HA.roa (raw, json)
Hash identifier: jvze7k7/N61852Vj2k3j1q51Tmftf6XnEfdI6LSzVLY=
Subject key identifier: 60:17:3F:22:0D:99:9F:5C:E9:F5:D2:DB:3F:92:CF:08:68:47:F4:70
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187C7C3F7DB9AF37AEA28A52C4497D93FB0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YBc_Ig2Zn1zp9dLbP5LPCGhH9HA.roa
Signing time: Fri 28 Apr 2023 12:08:41 +0000
ROA not before: Fri 28 Apr 2023 12:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
188.241.136.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
77.81.88.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Apr 2023 12:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:c3:f7:db:9a:f3:7a:ea:28:a5:2c:44:97:d9:3f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 28 12:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60173f220d999f5ce9f5d2db3f92cf086847f470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:e8:9c:e5:5d:1e:b3:33:06:61:b9:2b:9e:
e8:9e:22:fc:39:c0:93:eb:3f:75:b8:19:d5:f9:62:
ad:cb:ac:0f:fd:72:fe:99:b1:cd:fe:ef:d2:b5:f9:
41:25:ee:d6:90:f3:a1:54:5f:39:4e:6b:d9:92:ae:
e2:a9:68:41:99:85:54:2f:27:1f:3c:2f:0e:9f:58:
0f:9c:67:9d:6e:b5:85:b8:be:aa:ec:9f:52:9d:30:
92:c0:09:48:6d:9e:cb:5d:09:65:38:7d:1c:a8:07:
74:70:3e:9a:98:d1:0c:c7:0a:22:ce:6b:9a:57:ef:
be:4c:22:a2:ec:e1:a2:d4:dc:af:f3:20:e9:5e:f0:
01:6e:2e:85:55:8c:6f:5c:c5:d7:9a:31:ad:7b:e4:
f6:dc:2e:34:43:e1:8f:ff:f7:c7:4c:6c:dd:9e:7b:
a7:a8:ee:89:5a:36:37:db:da:1f:0a:04:16:f2:a1:
25:7a:8d:2b:84:02:72:c8:e4:da:f5:0e:d8:5b:78:
c5:5c:6e:ca:d6:65:a4:10:e6:93:b0:08:4d:82:eb:
d9:18:6c:b1:03:d5:f3:45:6c:f4:4a:36:c2:ef:60:
11:ba:c0:b0:60:f1:9c:7d:f3:ce:46:5a:33:e0:f4:
34:4c:df:b1:d7:cc:0d:8b:27:eb:3d:61:bd:7f:c2:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:17:3F:22:0D:99:9F:5C:E9:F5:D2:DB:3F:92:CF:08:68:47:F4:70
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YBc_Ig2Zn1zp9dLbP5LPCGhH9HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
77.81.88.0/24
77.81.100.0/24
86.107.51.0/24
86.107.100.0/24
89.34.219.0/24
89.35.129.0-89.35.131.255
89.45.35.0/24
89.47.55.0/24
94.198.171.0/24
176.223.188.0/24
188.214.107.0/24
188.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
48:09:20:df:93:c7:6b:d4:6c:24:29:96:dd:59:ee:ee:a5:8e:
98:55:88:b5:5e:d1:fb:ec:40:b8:5f:71:6d:2a:52:b3:a2:fc:
95:90:9e:a8:ff:e4:bb:56:b2:9c:73:30:51:b8:39:1d:2e:be:
eb:d6:b1:70:36:61:71:1a:62:7e:40:5f:04:fd:de:8b:aa:13:
d2:ec:80:f8:49:4c:b0:a2:30:82:72:f6:9f:8f:0f:11:0a:81:
8d:cd:6a:47:87:3b:53:8c:5f:38:d6:15:fe:fb:21:f9:e1:9a:
d6:26:00:ad:14:2e:f0:c1:46:a1:cb:ba:32:80:c3:bb:77:da:
a0:99:fc:68:0c:26:a8:f2:f5:07:aa:47:48:f9:91:33:bb:34:
66:11:96:f8:37:3e:2d:9c:67:93:5a:0b:a5:a0:65:da:da:21:
e6:3f:43:4c:02:54:f3:bc:fa:f1:25:4e:60:70:39:bd:37:30:
18:c3:33:06:7f:89:f5:ae:b8:b2:35:3a:56:7c:06:23:c1:f3:
4a:be:3b:b8:af:71:c2:ce:92:4d:d2:02:b5:73:89:72:e7:cd:
a9:4c:56:60:27:8b:c8:a0:bc:41:6d:9c:6c:0b:26:5a:37:5e:
b0:36:35:56:3b:b2:70:e6:24:67:88:fa:e9:67:88:81:39:92:
80:ae:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org