Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yObgwtn4iNASdlX-IJnr13QXMtU.roa
File: yObgwtn4iNASdlX-IJnr13QXMtU.roa (raw, json)
Hash identifier: x3nrHzLIPZCxr4OhCvBXM8KeMiTNYaG8EPK6ua3PM88=
Subject key identifier: C8:E6:E0:C2:D9:F8:88:D0:12:76:55:FE:20:99:EB:D7:74:17:32:D5
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B41F0982D8C06E3852107AF5342C6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yObgwtn4iNASdlX-IJnr13QXMtU.roa
Signing time: Sun 01 Jan 2023 18:14:58 +0000
ROA not before: Sun 01 Jan 2023 18:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18978
IP address blocks: 141.98.188.0/22 maxlen: 24
88.218.92.0/22 maxlen: 24
45.149.112.0/22 maxlen: 24
85.209.192.0/22 maxlen: 24
194.59.220.0/23 maxlen: 24
45.66.156.0/22 maxlen: 24
45.66.164.0/22 maxlen: 24
194.59.244.0/23 maxlen: 24
5.180.24.0/22 maxlen: 24
5.180.20.0/22 maxlen: 24
5.180.28.0/22 maxlen: 24
5.180.44.0/22 maxlen: 24
5.180.40.0/22 maxlen: 24
194.55.136.0/23 maxlen: 24
85.208.108.0/22 maxlen: 24
85.208.116.0/22 maxlen: 24
45.128.60.0/22 maxlen: 24
194.124.244.0/23 maxlen: 24
194.124.250.0/23 maxlen: 24
5.180.144.0/22 maxlen: 24
5.180.52.0/22 maxlen: 24
45.136.112.0/22 maxlen: 24
45.136.116.0/22 maxlen: 24
45.136.124.0/22 maxlen: 24
45.136.128.0/22 maxlen: 24
194.55.188.0/23 maxlen: 24
45.136.148.0/22 maxlen: 24
85.209.152.0/22 maxlen: 24
194.36.36.0/22 maxlen: 24
85.209.156.0/22 maxlen: 24
194.76.146.0/23 maxlen: 24
194.76.154.0/23 maxlen: 24
5.253.28.0/22 maxlen: 24
5.253.40.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:41:f0:98:2d:8c:06:e3:85:21:07:af:53:42:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8e6e0c2d9f888d0127655fe2099ebd7741732d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:b6:09:1d:c6:a8:4b:3c:88:6e:03:2f:39:
c1:9d:0c:fe:4c:19:65:14:68:36:aa:c1:1b:6d:fa:
83:b2:9c:71:46:0c:32:e5:c5:72:d5:8e:1a:df:c1:
30:e8:f8:d7:98:97:1d:4f:fa:41:88:d4:ab:26:a2:
25:15:d1:19:e9:7e:14:c6:67:34:9b:87:88:5c:3c:
5c:3a:3a:2c:c2:0c:74:f7:a4:3d:1e:71:fd:66:85:
5e:df:e5:70:d5:c7:83:29:5c:60:c2:cc:5f:6c:b0:
80:79:88:d1:47:ee:f3:30:2d:83:71:6e:1e:9c:82:
00:29:ed:c4:fb:ec:45:ac:4b:35:7b:8a:b5:0b:86:
b2:d7:f3:54:ab:9d:f0:af:6e:e8:79:f4:71:f5:f9:
6d:b5:ac:e2:51:d8:6c:3d:55:e0:ea:64:2f:61:fc:
b7:e4:87:f2:82:1e:eb:d3:da:e0:16:e0:41:94:6b:
fc:53:4e:4c:ae:c1:38:1e:ff:b7:72:48:b8:52:95:
80:01:8d:49:c4:fc:45:9e:cb:63:4d:7a:d9:a0:60:
8f:34:b7:59:fc:64:0d:37:ce:bc:ad:d2:5d:2f:74:
0c:dc:0a:c5:60:ec:04:27:03:32:0c:0e:ff:b0:60:
f0:84:ad:05:e2:df:b1:35:40:5f:2e:f5:a7:9f:81:
21:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E6:E0:C2:D9:F8:88:D0:12:76:55:FE:20:99:EB:D7:74:17:32:D5
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yObgwtn4iNASdlX-IJnr13QXMtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.20.0-5.180.31.255
5.180.40.0/21
5.180.52.0/22
5.180.144.0/22
5.253.28.0/22
5.253.40.0/22
45.66.156.0/22
45.66.164.0/22
45.128.60.0/22
45.136.112.0/21
45.136.124.0-45.136.131.255
45.136.148.0/22
45.149.112.0/22
85.208.108.0/22
85.208.116.0/22
85.209.152.0/21
85.209.192.0/22
88.218.92.0/22
141.98.188.0/22
194.36.36.0/22
194.55.136.0/23
194.55.188.0/23
194.59.220.0/23
194.59.244.0/23
194.76.146.0/23
194.76.154.0/23
194.124.244.0/23
194.124.250.0/23
Signature Algorithm: sha256WithRSAEncryption
06:2f:84:44:cf:7d:81:b0:ae:79:52:c0:ad:79:f0:b4:2c:45:
ff:b1:69:46:08:89:ac:6d:27:94:92:30:46:c6:69:3c:12:71:
be:d5:a9:0f:60:5a:b8:db:ea:38:3e:15:1f:91:62:62:69:13:
b2:09:67:8a:91:c7:61:b2:f9:2b:5f:9e:e8:a2:a3:e0:cc:93:
81:41:c9:3b:1f:33:9e:39:42:6f:bb:3e:7c:62:68:72:de:ae:
7f:be:6e:5f:15:52:28:9a:a2:bf:39:58:2e:18:84:fd:74:b2:
25:7e:88:e8:e8:fa:8f:d2:ce:48:0b:1e:66:22:4f:f4:1c:9b:
48:52:ab:e0:e5:ab:a6:5f:81:9b:c9:0b:05:bc:04:85:63:02:
5c:1c:09:69:f6:69:d6:38:d2:a5:90:3b:98:e1:99:15:2a:48:
bf:0a:fb:83:b9:d7:27:17:89:a0:66:93:66:56:03:a8:6a:01:
a7:50:3b:67:8c:96:d6:56:99:25:32:f1:ff:01:b3:a4:2f:48:
8e:06:7b:1e:9a:b2:60:9b:c0:f6:53:ed:f6:14:64:d9:be:78:
ca:0c:9c:92:92:e9:df:0b:6f:81:5c:03:41:a0:41:57:32:65:
ab:a6:4b:d6:71:7c:31:03:2e:6b:d2:04:84:e7:ad:b4:23:ee:
58:8d:f6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:03 2024 by rpki-client on console-ams.rpki-client.org