Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/YPg4pPR8GIW6GdYPMvm3p9PmUDs.roa
File: YPg4pPR8GIW6GdYPMvm3p9PmUDs.roa (raw, json)
Hash identifier: zY7nSsxvPBbusyVw7cTniXdKP2e65jje69ZgCbzji88=
Subject key identifier: 60:F8:38:A4:F4:7C:18:85:BA:19:D6:0F:32:F9:B7:A7:D3:E6:50:3B
Certificate issuer: /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial: 018829DC28945E9F6492D7F6E76FDF7210CF
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/YPg4pPR8GIW6GdYPMvm3p9PmUDs.roa
Signing time: Wed 17 May 2023 13:17:54 +0000
ROA not before: Wed 17 May 2023 13:17:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24843
IP address blocks: 193.57.130.0/23 maxlen: 23
193.57.130.0/24 maxlen: 24
193.57.131.0/24 maxlen: 24
193.57.129.0/24 maxlen: 24
193.57.128.0/24 maxlen: 24
193.57.128.0/23 maxlen: 23
185.108.35.0/24 maxlen: 24
193.8.206.0/24 maxlen: 24
193.8.206.0/23 maxlen: 23
193.8.207.0/24 maxlen: 24
193.8.220.0/23 maxlen: 23
193.8.220.0/24 maxlen: 24
2a02:c804::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:dc:28:94:5e:9f:64:92:d7:f6:e7:6f:df:72:10:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Validity
Not Before: May 17 13:17:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60f838a4f47c1885ba19d60f32f9b7a7d3e6503b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:34:ce:a6:2c:13:04:7b:ae:83:18:b1:4c:
5e:54:75:99:a3:a1:5c:2f:2c:a6:55:d7:c8:b8:25:
1e:56:ea:03:f3:27:34:02:18:54:0c:73:5a:17:cf:
e7:48:c8:69:fe:3e:77:b6:c6:37:fb:15:46:47:74:
71:59:46:80:19:e1:a5:6e:dc:3d:47:47:96:d6:6a:
c6:bd:b1:3e:b6:b3:d3:93:c4:b6:87:f5:e1:ac:30:
96:13:e5:fd:21:d6:c7:53:fa:64:b7:bd:b2:43:d3:
b1:81:80:21:48:83:10:92:a4:8c:a6:31:c2:7b:72:
4d:6f:09:be:ac:da:fd:eb:fd:ce:e3:6c:3d:69:ac:
f7:5c:34:58:a0:7f:a1:e9:f0:b4:da:4c:ae:4d:fd:
4e:9c:23:1b:a5:68:6c:a7:74:83:92:aa:d4:e1:e9:
cd:90:ff:90:8f:28:f8:b4:09:57:53:73:eb:89:f4:
c6:47:7f:5e:82:a6:33:4e:8a:aa:67:a7:87:52:b3:
fe:84:67:91:ae:a8:ed:87:04:7b:06:d7:d0:89:49:
33:e1:46:93:7f:83:44:d3:1f:8b:d1:e6:49:ae:ec:
2d:fa:78:48:20:4a:4c:e6:77:7a:43:d9:7e:3e:8e:
95:1b:21:d3:3c:e0:b5:e6:82:d9:ba:cb:8e:db:52:
84:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F8:38:A4:F4:7C:18:85:BA:19:D6:0F:32:F9:B7:A7:D3:E6:50:3B
X509v3 Authority Key Identifier:
keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/YPg4pPR8GIW6GdYPMvm3p9PmUDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.35.0/24
193.8.206.0/23
193.8.220.0/23
193.57.128.0/22
IPv6:
2a02:c804::/32
Signature Algorithm: sha256WithRSAEncryption
59:1a:04:13:a1:0b:d7:22:4f:d3:f9:05:03:17:c3:08:77:74:
44:5b:ca:79:36:8f:1c:af:6d:5b:48:04:fa:14:b5:00:cb:c4:
7e:a5:69:3a:bc:53:fc:a3:a2:73:ba:bb:e5:ef:f9:86:cc:1a:
00:19:32:f3:4f:b2:eb:b7:0f:17:d9:35:e1:c3:ed:06:d8:1a:
64:75:d5:f4:99:32:cb:ae:4e:29:02:37:32:ec:44:99:83:fc:
45:06:e8:a5:26:72:56:65:3a:a0:67:7b:46:fc:d0:2a:63:bd:
4e:52:7a:17:b6:d3:c7:ed:37:62:9f:cc:5c:b9:90:e9:8a:46:
9a:8e:bd:77:48:c0:26:90:6e:76:29:31:67:af:c2:3b:07:ef:
c2:cc:0c:20:05:8a:40:20:6e:d2:16:c0:c8:1d:c1:f1:13:4f:
3f:44:8f:01:46:66:75:47:77:a5:14:b6:93:01:93:0b:93:18:
32:db:1f:28:a0:45:49:70:25:b1:55:56:91:c8:48:b1:2d:b0:
4d:6f:95:7a:38:a7:35:49:9b:35:58:1f:42:78:aa:6e:20:88:
e3:98:cc:5d:66:e6:3d:72:a8:4d:d2:49:a3:f4:0d:03:c3:eb:
18:c6:b5:ec:87:7f:09:6b:70:d9:c7:71:c5:cf:86:31:ad:92:
86:b0:92:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:06 2024 by rpki-client on console-ams.rpki-client.org