Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/YA95amOcZot-wjaFtcCYG_ggoZQ.roa
File: YA95amOcZot-wjaFtcCYG_ggoZQ.roa (raw, json)
Hash identifier: VBYc3EBILqG9VZd2vlNPsHyKUFoZPI17HT/l7G6g3Og=
Subject key identifier: 60:0F:79:6A:63:9C:66:8B:7E:C2:36:85:B5:C0:98:1B:F8:20:A1:94
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC649FC27D825B8D3E0B584459B650E97
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/YA95amOcZot-wjaFtcCYG_ggoZQ.roa
Signing time: Mon 01 Jan 2024 18:29:46 +0000
ROA not before: Mon 01 Jan 2024 18:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52041
IP address blocks: 185.248.134.0/24 maxlen: 24
82.215.64.0/24 maxlen: 24
2a12:bec0:7004::/48 maxlen: 48
2a12:bec1:b00b::/48 maxlen: 48
2a12:bec0:d0::/44 maxlen: 48
2a12:bec0:e40::/44 maxlen: 44
2a12:bec2:b00b::/48 maxlen: 48
2a12:bec0:7003::/48 maxlen: 48
2a12:bec2::/32 maxlen: 32
2a12:bec3:b00b::/48 maxlen: 48
2a12:bec0:7007::/48 maxlen: 48
2a12:bec0:7002::/48 maxlen: 48
2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
2a12:bec0:7006::/48 maxlen: 48
2a12:bec0:7001::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jan 2024 00:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:fc:27:d8:25:b8:d3:e0:b5:84:45:9b:65:0e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=600f796a639c668b7ec23685b5c0981bf820a194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3c:62:8b:23:e1:c7:f9:c5:f5:09:83:54:5e:
0f:ea:21:58:e5:a8:27:1f:6a:d7:84:2e:88:e5:a4:
f7:fe:87:20:c6:5b:6e:89:b9:4b:e9:0e:9c:16:03:
a1:94:c9:64:13:33:80:ad:c6:f1:a1:fa:0f:0f:73:
97:13:8b:da:d2:16:9b:58:d9:90:4b:b5:74:20:b4:
94:4b:a3:0b:ca:12:74:3d:fe:51:68:49:8d:9c:26:
36:bf:c2:3e:b5:d0:23:e0:32:11:0b:6a:8d:b1:5c:
13:38:07:9b:f1:fc:dc:e8:e2:47:51:e2:0d:3e:ee:
6b:55:f2:08:a3:06:d3:43:dd:b8:7d:0d:00:1b:b3:
a7:c1:5a:dc:1d:e4:77:b8:38:9d:2f:50:ed:f8:58:
58:55:fb:51:a7:c7:56:39:d5:74:d1:9b:3e:1e:85:
ea:89:00:ce:dd:1d:28:9a:12:15:3c:fb:89:31:66:
1b:f1:f3:6d:f4:ff:64:82:29:c1:00:a2:57:5c:39:
47:b7:1d:63:84:07:8c:a4:6a:34:a2:70:4b:8d:01:
c8:0c:13:c1:61:2c:bf:52:31:4b:60:a5:66:1f:70:
1b:51:c3:14:b0:61:86:7b:68:dd:48:fc:fc:ef:ac:
c4:d0:7a:2c:35:c0:06:d1:40:3b:5e:c4:bd:4d:fa:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0F:79:6A:63:9C:66:8B:7E:C2:36:85:B5:C0:98:1B:F8:20:A1:94
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/YA95amOcZot-wjaFtcCYG_ggoZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.64.0/24
185.248.134.0/24
IPv6:
2a12:bec0:d0::/44
2a12:bec0:e40::/44
2a12:bec0:7000::-2a12:bec0:7004:ffff:ffff:ffff:ffff:ffff
2a12:bec0:7006::/47
2a12:bec0:b00b::/48
2a12:bec1:b00b::/48
2a12:bec2::/32
2a12:bec3:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
5a:ff:ea:3e:10:6e:bf:97:cf:ef:9a:09:fb:27:1b:a0:1b:d7:
83:cf:f0:ca:7b:3a:f6:bf:0d:3c:1b:62:1c:09:77:7b:68:6c:
cc:63:2d:65:f3:17:99:5d:81:d1:59:5e:fc:dc:54:2a:12:4d:
6b:05:d3:cb:15:1b:1a:c3:c2:7b:41:25:8e:ad:a4:20:59:84:
46:71:40:17:12:d3:03:2e:ca:b6:2a:6a:9f:b2:18:93:6f:0e:
fe:c7:c4:a8:1b:b6:a8:90:b1:31:4b:0b:ef:85:1f:84:4b:a0:
22:74:1b:41:47:f5:6d:d8:45:85:53:af:eb:3d:bb:eb:20:9a:
6a:f0:4b:ca:fb:c2:ad:b1:11:0c:6c:e6:07:36:0a:26:ad:d2:
94:99:d9:91:61:48:15:88:0d:56:d3:74:39:51:06:62:3a:33:
b5:4f:ad:09:65:a3:5f:2b:39:af:38:71:d3:53:8e:d1:a6:13:
91:0f:36:62:2e:57:4f:9b:4b:8b:06:b6:76:5d:51:41:1f:c5:
e9:4d:e4:d5:61:5c:82:cb:6e:4c:01:cd:46:c3:c5:22:fb:93:
ed:2c:c0:0c:1d:46:f0:ce:3e:d9:9c:89:97:8c:2f:52:72:1f:
7a:45:07:cd:49:0f:5d:bc:02:ed:73:a4:6a:18:50:57:2f:d8:
88:2c:ae:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org