Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/YaD0ifMqvmr6-6sflJDviWG8-Zg.roa
File: YaD0ifMqvmr6-6sflJDviWG8-Zg.roa (raw, json)
Hash identifier: O06NjXZh6jojlyXDCugrOqQtfKbRiwa2NNxXzQTeC+A=
Subject key identifier: 61:A0:F4:89:F3:2A:BE:6A:FA:FB:AB:1F:94:90:EF:89:61:BC:F9:98
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 0190011761110C685C2CEA8B804124342CE7
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/YaD0ifMqvmr6-6sflJDviWG8-Zg.roa
Signing time: Mon 10 Jun 2024 07:40:27 +0000
ROA not before: Mon 10 Jun 2024 07:40:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50810
IP address blocks: 37.98.64.0/18 maxlen: 22
37.98.114.0/24 maxlen: 24
62.102.128.0/20 maxlen: 22
93.117.176.0/20 maxlen: 22
93.119.208.0/20 maxlen: 22
178.131.0.0/18 maxlen: 22
178.131.4.0/24 maxlen: 24
178.131.64.0/18 maxlen: 22
178.131.128.0/18 maxlen: 22
188.211.0.0/20 maxlen: 20
188.211.15.0/24 maxlen: 24
188.212.240.0/21 maxlen: 21
188.213.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 20 Aug 2024 06:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:17:61:11:0c:68:5c:2c:ea:8b:80:41:24:34:2c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Jun 10 07:40:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61a0f489f32abe6afafbab1f9490ef8961bcf998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:3d:78:53:a7:1c:18:85:1a:e4:f9:a2:0e:
7c:07:6a:70:f8:86:06:9a:ef:2b:5e:68:a4:a3:ff:
ce:ac:03:bc:ca:ac:ed:d7:b7:d2:b1:47:76:71:fd:
35:07:f6:2d:67:4b:93:c3:44:65:a4:1c:b5:74:73:
7f:9b:e3:8c:e9:25:17:06:b4:0b:e7:4b:53:83:de:
bc:2b:06:74:9f:ca:ad:78:b8:f1:70:72:0f:d3:6a:
b9:1e:f4:02:bc:20:fc:71:59:72:e5:b1:54:da:dd:
fa:9a:0d:81:00:60:01:a6:f2:56:72:54:fc:9e:47:
ae:c6:74:a8:dc:83:5c:10:b6:24:ec:a4:bd:5d:4b:
c3:7c:d0:27:3b:8a:15:bc:61:70:ef:b1:5d:79:c2:
04:01:d8:68:e2:2d:1f:02:27:0a:be:21:54:77:71:
46:6d:d6:dd:e9:10:36:8a:e4:38:5c:86:6b:32:05:
8b:46:4b:5e:f0:82:d9:8f:e6:c6:b1:9b:9b:fd:93:
d2:c4:c2:71:da:7e:aa:db:6b:8e:ae:aa:27:43:5b:
ec:f6:de:ac:7d:15:40:75:b7:4b:19:75:6c:08:7b:
d5:38:99:49:74:f6:03:cc:53:67:2f:bb:8f:9a:99:
e4:4a:9b:aa:3a:37:72:52:76:c5:b7:22:14:58:75:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A0:F4:89:F3:2A:BE:6A:FA:FB:AB:1F:94:90:EF:89:61:BC:F9:98
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/YaD0ifMqvmr6-6sflJDviWG8-Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.64.0/18
62.102.128.0/20
93.117.176.0/20
93.119.208.0/20
178.131.0.0-178.131.191.255
188.211.0.0/20
188.212.240.0/21
188.213.192.0/22
Signature Algorithm: sha256WithRSAEncryption
35:c1:cc:ed:3e:b1:97:b1:94:6a:94:f9:cb:6e:df:de:a4:a6:
e6:70:34:cc:d6:7e:9a:38:79:a6:30:ee:23:e5:fb:7b:3c:9e:
32:65:6d:e1:f5:1b:f5:4a:9d:51:a9:6d:69:e5:93:d9:f5:d1:
60:23:8d:50:89:39:ec:6d:4b:b1:0d:a1:92:11:d6:21:23:c1:
46:a0:cd:18:81:d0:b4:a6:30:f4:76:bd:69:e1:1a:83:ee:6e:
8e:52:a2:c7:54:5a:a8:16:cb:dd:4a:0f:06:99:50:03:67:89:
20:d5:b7:e0:1f:d6:57:2e:e6:b8:2e:f1:c9:3a:bc:4e:5a:49:
b8:d5:a0:0b:bb:da:33:31:a3:83:a4:27:2d:58:aa:b1:67:6a:
40:56:7a:9b:33:f9:a5:e9:e5:1d:a8:7b:ce:16:b4:cd:7c:05:
66:07:95:11:bb:61:4e:e3:48:0c:a6:c1:30:4c:bf:82:3c:f2:
70:c0:2c:91:71:5f:c7:3e:5f:b8:60:37:dd:cd:e4:cb:c7:bc:
5a:bf:1c:02:f5:12:fc:16:bb:f2:e4:38:69:d1:43:e8:bf:66:
2f:02:00:29:73:3f:b9:06:cf:fd:3d:9d:58:e1:6f:58:26:bf:
78:94:9b:9d:11:ac:19:cc:5e:ba:6a:64:4f:23:5d:6c:4b:1e:
a9:a5:94:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 09:33:11 2024 by rpki-client on console-fra.rpki-client.org