Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/YPL1MPnb77VDekhI_98UOMbAVSs.roa
File: YPL1MPnb77VDekhI_98UOMbAVSs.roa (raw, json)
Hash identifier: /hRO8ZZ83XNn3j1EFENEOL/Mefuth3Y+IxTNGTnMCV4=
Subject key identifier: 60:F2:F5:30:F9:DB:EF:B5:43:7A:48:48:FF:DF:14:38:C6:C0:55:2B
Certificate issuer: /CN=782325321a302f0bac131bee11c9aea696e510ba
Certificate serial: 01856F5DABD8C6591D24FDC519A04CE3BA34
Authority key identifier: 78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/YPL1MPnb77VDekhI_98UOMbAVSs.roa
Signing time: Sun 01 Jan 2023 22:04:47 +0000
ROA not before: Sun 01 Jan 2023 22:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8867
IP address blocks: 147.237.4.0/24 maxlen: 24
147.237.1.0/24 maxlen: 24
147.237.2.0/24 maxlen: 24
147.237.3.0/24 maxlen: 24
147.237.0.0/24 maxlen: 24
147.237.5.0/24 maxlen: 24
147.237.6.0/24 maxlen: 24
147.237.7.0/24 maxlen: 24
147.237.0.0/16 maxlen: 16
147.237.11.0/24 maxlen: 24
147.237.8.0/24 maxlen: 24
147.237.9.0/24 maxlen: 24
147.237.10.0/24 maxlen: 24
147.237.70.0/24 maxlen: 24
147.237.71.0/24 maxlen: 24
147.237.69.0/24 maxlen: 24
147.237.74.0/24 maxlen: 24
147.237.76.0/24 maxlen: 24
147.237.72.0/24 maxlen: 24
147.237.73.0/24 maxlen: 24
147.237.77.0/24 maxlen: 24
147.237.80.0/24 maxlen: 24
147.237.14.0/24 maxlen: 24
147.237.15.0/24 maxlen: 24
147.237.12.0/24 maxlen: 24
147.237.13.0/24 maxlen: 24
147.237.248.0/24 maxlen: 24
2001:678:a3c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ab:d8:c6:59:1d:24:fd:c5:19:a0:4c:e3:ba:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782325321a302f0bac131bee11c9aea696e510ba
Validity
Not Before: Jan 1 22:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60f2f530f9dbefb5437a4848ffdf1438c6c0552b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:37:a7:d8:41:78:27:7f:f5:a9:a6:33:bd:
a5:aa:3b:8f:a1:44:08:80:3c:85:90:8f:5d:9f:b4:
e5:f0:05:67:90:f3:af:37:61:87:29:b2:63:e9:33:
d1:a9:80:a8:0d:f6:ff:40:af:19:cb:9f:92:25:3f:
8b:d8:56:96:27:dc:ae:ed:9a:49:f6:d5:a8:cf:13:
37:ef:53:7d:b5:87:45:d1:b8:81:b4:46:f9:d6:de:
d4:24:c1:9c:0f:6b:87:ab:21:f3:8e:fa:6d:27:33:
4a:ff:5a:1c:be:ec:81:85:9d:a8:a9:d9:67:b9:e1:
67:88:d3:4f:a7:5d:4f:31:f5:0e:20:12:45:4f:32:
9c:20:dd:a1:7d:a3:f5:f0:7b:9e:cc:9e:55:1b:3b:
97:83:e5:95:c4:57:3a:ba:70:94:86:ac:a6:55:e1:
4e:91:22:f3:66:ec:da:38:91:59:ad:15:55:54:a5:
dd:c2:88:31:d9:66:5f:a6:40:1e:74:be:74:a6:51:
00:02:11:eb:a3:90:b9:b4:0a:d7:94:ce:c3:15:24:
45:e9:fe:71:dd:bb:e6:24:a3:f4:49:de:d3:2d:5a:
14:e6:7b:f3:ea:34:c3:6c:a9:32:48:88:21:2b:bf:
d7:df:41:8f:63:9b:1a:89:4a:8d:69:b3:e8:39:3e:
6c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F2:F5:30:F9:DB:EF:B5:43:7A:48:48:FF:DF:14:38:C6:C0:55:2B
X509v3 Authority Key Identifier:
keyid:78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/YPL1MPnb77VDekhI_98UOMbAVSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.237.0.0/16
IPv6:
2001:678:a3c::/48
Signature Algorithm: sha256WithRSAEncryption
2f:c3:c0:5a:7c:8d:9b:9c:fe:d9:4f:e5:83:39:0b:d9:9e:a9:
58:31:e7:33:a0:c9:09:85:46:f0:4b:d7:b0:35:86:98:d9:1f:
a5:64:9b:12:68:82:e2:ca:d6:93:12:6a:30:83:22:2b:e2:35:
3b:29:98:0f:41:bd:52:81:43:0e:60:a2:9e:ba:83:8a:2f:56:
f0:b2:52:be:4a:76:89:4e:3c:9d:57:aa:75:f8:af:14:6d:2e:
a7:a2:8b:64:72:be:ee:92:b8:c6:8e:90:2e:38:f6:aa:14:52:
06:0f:65:cf:75:31:36:51:e8:e7:9b:e3:5b:12:26:ea:09:7f:
d1:6d:1e:0b:d5:34:9b:08:14:9a:19:2c:d5:19:aa:3f:c4:d2:
ac:f0:4e:60:98:ed:17:74:fb:d8:b8:d7:28:fe:29:14:40:4a:
da:5b:5d:01:16:96:af:22:49:d9:86:b7:50:da:14:37:ab:24:
0c:7f:6d:52:3e:53:a8:e0:5e:7d:6f:81:f3:96:9e:4d:be:5d:
11:68:df:ad:8c:f0:7b:18:44:02:6a:28:28:8c:36:07:11:2d:
44:d0:31:80:32:63:50:6e:64:cb:a9:e2:d0:49:66:7c:e8:1c:
64:15:d5:7e:cc:26:af:e9:87:9d:74:c3:3f:3e:66:3c:ea:99:
67:48:88:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:16 2024 by rpki-client on console-fra.rpki-client.org