Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/y_PQ2LbHO20b18HJvX_AVvUr--A.roa
File: y_PQ2LbHO20b18HJvX_AVvUr--A.roa (raw, json)
Hash identifier: aE5JEUunAkHguVMn0j+CMiri52/alqjCiDCPlZ5RBTU=
Subject key identifier: CB:F3:D0:D8:B6:C7:3B:6D:1B:D7:C1:C9:BD:7F:C0:56:F5:2B:FB:E0
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018D73E59783AA8180B7789AA5FDE03C2A44
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/y_PQ2LbHO20b18HJvX_AVvUr--A.roa
Signing time: Sun 04 Feb 2024 11:34:02 +0000
ROA not before: Sun 04 Feb 2024 11:34:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 185.155.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 21:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:73:e5:97:83:aa:81:80:b7:78:9a:a5:fd:e0:3c:2a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Feb 4 11:34:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbf3d0d8b6c73b6d1bd7c1c9bd7fc056f52bfbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:cb:5a:1d:ba:b1:6e:cc:0a:62:08:6f:c0:
59:54:bb:14:ef:44:1b:7a:ef:7e:30:de:ab:60:48:
a4:30:33:ba:52:4d:b5:61:cc:30:89:e3:04:09:d2:
92:2e:73:95:27:4b:b9:53:69:36:93:b4:60:40:e5:
01:eb:1b:df:4d:a4:e7:2f:01:ec:61:96:02:a2:33:
0f:7e:71:8b:16:6f:31:03:62:e3:7c:3d:b4:98:e4:
61:d7:93:c1:cc:0e:fd:2b:0c:3a:89:ed:d8:f9:ca:
d3:da:e2:82:96:6d:d6:c5:71:45:43:2e:04:9f:de:
00:f7:83:ff:9f:b3:dc:38:9c:be:d0:b3:aa:c7:f6:
e4:f8:d7:07:13:de:1a:7f:9d:94:88:d6:1a:a8:c8:
86:7e:11:d1:fc:3d:81:d0:92:4d:82:88:c1:d0:b9:
da:c5:40:3c:0f:9d:34:ec:de:88:bd:45:40:1c:87:
b5:36:f0:f2:56:8c:71:01:87:db:29:ff:60:69:d4:
e4:2b:fc:d4:28:f0:0a:66:e6:8b:88:1c:ae:e0:91:
00:c3:82:81:b0:df:83:3a:58:65:b6:df:76:7d:d6:
61:fe:e8:4f:ab:f4:0a:39:cf:74:5a:5e:7b:c9:89:
f0:32:7f:40:60:78:a2:11:7e:bd:ad:2e:3b:21:32:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F3:D0:D8:B6:C7:3B:6D:1B:D7:C1:C9:BD:7F:C0:56:F5:2B:FB:E0
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/y_PQ2LbHO20b18HJvX_AVvUr--A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:29:b9:c8:bc:45:3b:b7:7c:b6:64:a3:32:ff:37:49:09:ff:
4a:e6:57:69:a6:27:cb:7b:9a:ea:a5:f1:c2:de:03:d2:56:a9:
2c:ae:ca:28:44:2f:db:cb:00:c4:06:18:b5:48:03:c9:44:c1:
54:93:e7:19:c9:66:e0:8c:fa:ef:ff:77:65:2a:67:ec:c4:32:
d9:f6:d9:89:d7:c3:ea:a5:77:98:5d:33:fe:1c:88:cf:f0:ad:
73:7a:a7:14:b4:95:f7:01:51:59:34:82:bb:fe:99:0c:de:e8:
80:37:df:3c:b1:70:74:c9:b2:ce:ba:f5:35:01:f8:85:3f:d4:
bb:c0:c9:3e:f6:00:d7:bb:4e:ed:74:02:ba:95:68:54:c9:3a:
2c:8a:03:b5:95:9e:14:c7:42:18:98:f5:0f:43:17:cf:b3:45:
f9:1a:aa:93:fe:da:6f:d8:90:e0:73:81:e8:2e:27:d0:e7:38:
49:91:3d:b2:76:da:61:61:65:e7:3e:77:66:b0:c3:3c:d2:fe:
0e:1b:46:ed:a8:03:77:ba:3d:9a:81:c7:c5:dd:2a:6d:2d:c3:
2b:11:db:1c:4e:7d:6f:fc:51:c3:7c:82:a6:cb:b9:3a:aa:73:
02:93:07:0c:84:c1:9d:f5:60:69:d3:14:d7:95:27:6d:99:14:
60:5f:47:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1z5ZeDqoGAt3iapf3gPCpEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjQwMjA0MTEzNDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmYzZDBkOGI2YzczYjZkMWJkN2MxYzliZDdmYzA1NmY1MmJmYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm3LWh26sW7MCmIIb8BZVLsU70Qb
eu9+MN6rYEikMDO6Uk21YcwwieMECdKSLnOVJ0u5U2k2k7RgQOUB6xvfTaTnLwHs
YZYCojMPfnGLFm8xA2LjfD20mORh15PBzA79Kww6ie3Y+crT2uKClm3WxXFFQy4E
n94A94P/n7PcOJy+0LOqx/bk+NcHE94af52UiNYaqMiGfhHR/D2B0JJNgojB0Lna
xUA8D5007N6IvUVAHIe1NvDyVoxxAYfbKf9gadTkK/zUKPAKZuaLiByu4JEAw4KB
sN+DOlhltt92fdZh/uhPq/QKOc90Wl57yYnwMn9AYHiiEX69rS47ITJXUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMvz0Ni2xzttG9fByb1/wFb1K/vgMB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEveV9QUTJMYkhPMjBiMThISnZYX0FWdlVyLS1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZs0MA0G
CSqGSIb3DQEBCwUAA4IBAQB/KbnIvEU7t3y2ZKMy/zdJCf9K5ldppifLe5rqpfHC
3gPSVqksrsooRC/bywDEBhi1SAPJRMFUk+cZyWbgjPrv/3dlKmfsxDLZ9tmJ18Pq
pXeYXTP+HIjP8K1zeqcUtJX3AVFZNIK7/pkM3uiAN988sXB0ybLOuvU1AfiFP9S7
wMk+9gDXu07tdAK6lWhUyTosigO1lZ4Ux0IYmPUPQxfPs0X5GqqT/tpv2JDgc4Ho
LifQ5zhJkT2ydtphYWXnPndmsMM80v4OG0btqAN3uj2agcfF3SptLcMrEdscTn1v
/FHDfIKmy7k6qnMCkwcMhMGd9WBp0xTXlSdtmRRgX0eA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:17 2024 by rpki-client on console-fra.rpki-client.org