Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YJ-HL1uO_ShPI3kL1tlqZ3XAuCo.roa
File: YJ-HL1uO_ShPI3kL1tlqZ3XAuCo.roa (raw, json)
Hash identifier: D+EJg6vwZugKW7Hw3/rYB7ivhpPiV5V3kvSdUjOchZA=
Subject key identifier: 60:9F:87:2F:5B:8E:FD:28:4F:23:79:0B:D6:D9:6A:67:75:C0:B8:2A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CFD1FADBB0BFC50E473612C1720E494CA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YJ-HL1uO_ShPI3kL1tlqZ3XAuCo.roa
Signing time: Fri 12 Jan 2024 10:02:40 +0000
ROA not before: Fri 12 Jan 2024 10:02:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 92.114.93.0/24 maxlen: 24
89.37.195.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
213.134.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 08:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fd:1f:ad:bb:0b:fc:50:e4:73:61:2c:17:20:e4:94:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 12 10:02:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=609f872f5b8efd284f23790bd6d96a6775c0b82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:7e:6e:67:42:8b:6e:8b:93:45:06:f9:5d:
54:5e:7b:30:02:36:19:c6:39:09:13:24:26:10:30:
90:46:2b:8d:03:69:5c:6b:c8:f4:74:8d:79:c6:eb:
7a:5f:21:a8:51:24:ad:aa:2d:3d:12:7f:3c:0d:fc:
e1:4d:9f:16:dd:9e:17:bd:e5:5d:37:13:67:ad:76:
e8:ae:3d:70:73:29:ca:fa:74:33:7c:12:8a:3a:12:
51:3c:8d:5b:6c:c3:ad:8e:16:a8:d8:b6:92:2c:de:
cf:c7:49:09:6b:68:5d:33:c7:c9:18:7b:c2:b7:a4:
e5:a6:35:44:3e:aa:4a:2f:2e:2b:10:7a:d5:c7:6a:
d6:10:5b:3c:48:e4:14:cb:f9:56:2a:b1:70:f1:62:
f7:d0:39:6b:e3:57:1d:08:b4:d2:fa:f9:74:5f:9b:
e1:ad:ad:75:3d:8a:8a:0a:a8:0c:6b:8f:72:aa:b2:
92:e6:9f:f6:93:a5:4f:7d:f1:95:26:d2:ff:ca:72:
6f:46:9d:5f:38:9f:00:7f:27:76:0e:a4:8f:e7:46:
cc:ef:51:8a:fe:a9:f0:39:0f:65:21:3f:b2:a2:07:
1a:86:5f:28:ae:8f:b7:23:1d:c0:78:d6:6f:ee:c1:
b7:25:bf:fd:e5:83:bc:c5:14:e5:f9:e9:02:06:e5:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9F:87:2F:5B:8E:FD:28:4F:23:79:0B:D6:D9:6A:67:75:C0:B8:2A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YJ-HL1uO_ShPI3kL1tlqZ3XAuCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.195.0/24
92.114.93.0/24
93.114.244.0/24
195.88.89.0/24
213.134.11.0/24
Signature Algorithm: sha256WithRSAEncryption
45:bb:d8:f1:2a:41:dc:5e:e2:23:22:33:46:2b:4a:5f:6b:24:
32:38:ee:ae:cc:2f:c2:5e:ed:45:cc:f5:76:b7:75:39:35:41:
93:b3:65:6d:a1:b4:0e:7e:ed:02:e4:ed:a3:b0:52:87:11:d9:
02:ae:6e:ad:a9:98:70:cb:c7:97:9d:a7:eb:89:4b:a9:42:18:
83:40:8b:e8:10:3b:2f:14:68:b2:b2:9c:53:3f:41:0b:e2:1b:
94:70:77:98:5f:7e:e1:68:2f:1e:a5:2f:98:13:00:32:89:cf:
18:09:68:1f:5a:2c:e1:0c:69:fa:30:0f:e0:ab:7d:c8:5a:62:
8c:c2:50:a4:65:e3:c9:6c:35:67:39:f9:27:03:f2:4e:b6:ac:
c2:62:84:40:04:be:da:a2:3d:0d:0e:2b:90:86:80:4e:cb:c4:
c5:eb:4c:03:f0:e5:67:be:05:e6:f2:62:82:16:a9:24:cc:76:
c9:44:1f:46:7a:b4:f8:32:b9:da:19:c8:20:b1:e9:a6:9c:e9:
13:47:56:95:2d:3a:50:23:9a:25:00:34:56:28:3c:3c:fa:f6:
38:95:58:66:1e:c9:60:31:2c:95:2d:5c:e0:71:8b:b8:08:30:
2c:85:af:49:f8:aa:3e:6f:f5:3d:01:a3:27:a4:9b:2d:80:82:
20:de:0d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org