Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/YvFQ0LXzzjbqrjiOcM-9wSNAFCI.roa
File: YvFQ0LXzzjbqrjiOcM-9wSNAFCI.roa (raw, json)
Hash identifier: YKD23SqmTG+a1DPgTRyKbAtRiGGoc6ZUUqykgxJA8Jg=
Subject key identifier: 62:F1:50:D0:B5:F3:CE:36:EA:AE:38:8E:70:CF:BD:C1:23:40:14:22
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01862BE6C77FDF99BDBC016400745E44F16D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/YvFQ0LXzzjbqrjiOcM-9wSNAFCI.roa
Signing time: Tue 07 Feb 2023 12:43:09 +0000
ROA not before: Tue 07 Feb 2023 12:43:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 45.92.229.0/24 maxlen: 24
45.86.202.0/24 maxlen: 24
45.86.200.0/24 maxlen: 24
136.144.17.0/24 maxlen: 24
193.37.33.0/24 maxlen: 24
193.37.32.0/24 maxlen: 24
136.144.19.0/24 maxlen: 24
194.5.48.0/24 maxlen: 24
194.5.49.0/24 maxlen: 24
136.144.33.0/24 maxlen: 24
194.5.53.0/24 maxlen: 24
136.144.42.0/24 maxlen: 24
194.34.173.0/24 maxlen: 24
45.84.216.0/24 maxlen: 24
193.36.224.0/24 maxlen: 24
193.36.225.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
193.176.211.0/24 maxlen: 24
45.154.138.0/24 maxlen: 24
45.146.54.0/24 maxlen: 24
2a0f:e387::/32 maxlen: 32
2a0f:e386::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:e6:c7:7f:df:99:bd:bc:01:64:00:74:5e:44:f1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Feb 7 12:43:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62f150d0b5f3ce36eaae388e70cfbdc123401422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:b6:0e:0c:54:7d:a2:c3:b4:21:33:d9:9f:
4c:b3:6c:6f:e6:fe:a6:5d:68:ca:5b:40:2f:cc:04:
29:48:ff:8a:41:a9:0a:6a:7e:36:07:2d:f1:c1:30:
8d:b9:96:52:56:47:85:b8:e7:3c:7f:95:25:b0:d1:
b3:94:f4:5b:37:74:a6:ae:84:70:0f:69:71:be:e5:
21:76:cd:1b:53:67:ee:6d:51:18:5c:d2:fd:ae:ad:
63:7f:0c:4a:18:03:f6:1b:e2:b4:f1:8b:8e:89:c8:
a2:b9:8a:a1:f8:76:d4:90:7d:13:ad:78:c7:85:71:
86:36:01:43:35:41:92:52:3f:8d:42:9c:4f:52:7c:
a2:fb:4d:c0:84:a1:75:6b:da:61:c8:ef:61:88:aa:
af:08:26:20:85:68:f5:a5:ce:53:8c:e9:e4:d7:e6:
31:69:06:4f:2c:98:b9:03:e4:26:46:5b:9a:f4:cc:
8d:42:f9:63:72:7f:4a:1d:a3:37:f2:58:9c:36:9a:
70:4d:b0:72:1b:f1:b3:56:84:73:c7:f9:f1:ad:1e:
fe:d2:3b:59:f3:f8:83:ff:a0:f6:19:5c:ac:5d:ef:
b2:73:4c:f2:f7:9b:0d:dd:98:14:b1:51:81:3d:71:
ff:76:5c:c1:2d:7b:ae:48:b5:cb:16:2c:44:66:ff:
11:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F1:50:D0:B5:F3:CE:36:EA:AE:38:8E:70:CF:BD:C1:23:40:14:22
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/YvFQ0LXzzjbqrjiOcM-9wSNAFCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0/24
45.86.200.0/24
45.86.202.0/24
45.92.229.0/24
45.95.243.0/24
45.146.54.0/24
45.154.138.0/24
136.144.17.0/24
136.144.19.0/24
136.144.33.0/24
136.144.42.0/24
193.36.224.0/23
193.37.32.0/23
193.176.211.0/24
194.5.48.0/23
194.5.53.0/24
194.34.173.0/24
IPv6:
2a0f:e386::/31
Signature Algorithm: sha256WithRSAEncryption
64:25:36:36:b1:b0:de:e6:a1:06:94:e1:dd:ea:41:4e:ca:36:
13:91:8e:e0:2b:6e:3b:c7:49:ac:5f:5a:d4:b2:f2:28:55:f8:
5a:42:16:83:9a:f4:5f:09:45:81:90:b8:5d:20:3a:e1:d3:66:
6d:a3:1c:53:4a:a7:54:5c:0a:cf:09:d5:69:02:a6:07:76:35:
17:a6:0b:bd:a8:3c:9b:4d:93:07:fa:b3:18:e5:d3:66:e9:83:
f7:4c:a0:28:19:b0:ad:93:04:28:6f:ed:97:5b:0d:e2:82:fd:
b1:20:4a:40:56:d8:9c:29:b6:bf:94:97:89:dc:ec:c1:78:34:
de:c7:74:e3:46:f6:9f:0f:3d:6c:57:f2:a5:d8:2b:73:b4:66:
96:b6:01:43:c7:e5:77:3c:c0:78:c1:76:52:bd:f1:d4:47:d3:
73:0e:ee:59:92:dc:52:10:d5:41:1e:16:5b:b1:7f:8d:ca:f9:
66:fa:ae:60:08:39:9d:0d:05:89:f9:2f:2d:e0:56:0e:02:e8:
8a:d4:ba:dd:a3:a2:4c:c6:ee:0c:51:ec:57:df:6e:ce:a5:12:
78:1d:94:da:35:3c:43:31:e4:05:85:7c:c4:23:d3:37:f6:ea:
cf:72:8d:c4:3f:c8:2e:26:8a:72:4e:d1:7f:3e:9a:9e:a1:a1:
a5:e5:87:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org