Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/yv-Ge51ekqYE8TA5QGKJ6J_lZoM.roa
File: yv-Ge51ekqYE8TA5QGKJ6J_lZoM.roa (raw, json)
Hash identifier: E9uqJF/iauKyDIoHVdl0xMcV4/+eMdTfLjlPXj+cWKY=
Subject key identifier: CA:FF:86:7B:9D:5E:92:A6:04:F1:30:39:40:62:89:E8:9F:E5:66:83
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 018CB0436E07C7FE1B7422B6E40097C2808B
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/yv-Ge51ekqYE8TA5QGKJ6J_lZoM.roa
Signing time: Thu 28 Dec 2023 11:50:58 +0000
ROA not before: Thu 28 Dec 2023 11:50:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207992
IP address blocks: 146.19.168.0/24 maxlen: 24
45.145.164.0/24 maxlen: 24
45.145.166.0/24 maxlen: 24
45.145.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:43:6e:07:c7:fe:1b:74:22:b6:e4:00:97:c2:80:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: Dec 28 11:50:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caff867b9d5e92a604f13039406289e89fe56683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1c:bd:ef:5a:c1:22:18:bb:f6:59:36:49:69:
df:de:52:e7:d2:65:3b:df:ea:84:38:05:e0:04:7f:
49:76:03:73:3b:99:d3:ab:9f:43:91:28:9f:4c:c2:
f0:85:80:0e:f9:46:db:b0:39:43:24:9c:62:86:3a:
95:92:6d:f0:45:c4:db:64:3a:eb:54:24:23:a2:d6:
23:63:a2:2e:2d:9d:e5:58:a5:8c:a2:b5:00:2c:9a:
3e:4f:20:1f:48:db:23:4f:5b:92:84:41:e3:fc:58:
4d:93:59:9a:95:2b:6a:c6:7f:69:0f:42:fc:ac:99:
ee:4a:af:1c:76:f2:9a:33:8e:b5:35:8d:e0:8d:a8:
f5:1f:d2:4e:56:fe:f5:45:f7:86:58:fc:11:dd:75:
af:0f:1c:f6:c6:91:e1:08:ed:2c:aa:16:b3:5a:b2:
7f:5c:0f:30:75:0d:5a:a5:b3:85:a3:ac:f3:4e:fe:
5c:d5:11:48:29:03:27:3a:af:0e:ad:06:ce:b7:98:
97:e0:e3:9c:f3:95:b0:de:9e:69:5d:4a:1f:d4:b5:
66:e0:f9:02:ac:35:4e:b8:1e:d0:ee:57:5e:99:29:
e7:9b:63:07:76:06:a3:d8:d4:b9:7f:cf:e8:d0:68:
17:3c:b3:3a:63:66:3b:6d:c0:93:cc:34:4c:08:0a:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FF:86:7B:9D:5E:92:A6:04:F1:30:39:40:62:89:E8:9F:E5:66:83
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/yv-Ge51ekqYE8TA5QGKJ6J_lZoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.164.0/24
45.145.166.0/23
146.19.168.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a5:e1:88:99:b2:ba:d2:0a:46:82:9d:ab:ce:41:47:28:09:
cc:93:71:fd:91:20:bc:0a:6e:6c:b1:34:4a:d5:b6:9f:aa:1a:
26:4b:93:8b:ac:7e:bd:73:ef:b3:d7:97:65:42:de:e3:ed:3d:
dd:07:5d:25:43:27:8d:e9:ba:e4:91:01:aa:b7:16:94:f6:9d:
fb:95:c4:b5:67:27:a1:90:bd:e8:3f:3e:0c:9d:7b:b8:61:e2:
5a:66:5a:fe:07:bd:c5:4a:91:8d:62:87:8a:7b:e5:24:e1:02:
ec:2d:b6:16:37:5a:93:8f:5f:71:8e:be:81:6e:bf:f8:20:59:
10:d8:37:f7:d1:2a:49:ae:c1:dc:6c:86:19:90:70:06:77:cb:
b1:f1:52:bd:7f:5d:b9:e0:ea:b7:a8:12:ab:d7:69:99:c2:ca:
46:c9:ad:59:58:40:98:6d:52:7a:ce:9b:3f:80:24:2d:2f:6c:
cc:30:40:79:3d:0a:63:b1:f0:18:00:1a:58:e7:d8:1f:b8:cf:
14:c4:e1:38:56:ed:c2:e2:cd:1d:b1:6e:d3:07:4c:dd:2d:0b:
6a:b5:1a:80:30:5b:19:d6:e2:94:42:0b:f4:c2:bf:4b:5e:ab:
01:2b:da:f7:f3:f7:9d:f5:cf:d8:ea:18:14:cb:f4:8c:e2:ec:
24:af:af:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:11 2024 by rpki-client on console-fra.rpki-client.org