Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/YONGYCWt2tNDelA_beDjfcpS1GI.roa
File: YONGYCWt2tNDelA_beDjfcpS1GI.roa (raw, json)
Hash identifier: UO1kg4WLZmKPphb95Zn+z4/rvDfeUD+1XER63S2imcc=
Subject key identifier: 60:E3:46:60:25:AD:DA:D3:43:7A:50:3F:6D:E0:E3:7D:CA:52:D4:62
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 018CC726B6224B5C5B98BB228AEAC8DB6879
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/YONGYCWt2tNDelA_beDjfcpS1GI.roa
Signing time: Mon 01 Jan 2024 22:30:52 +0000
ROA not before: Mon 01 Jan 2024 22:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203684
IP address blocks: 91.199.9.0/24 maxlen: 24
91.199.18.0/24 maxlen: 24
91.199.30.0/24 maxlen: 24
91.199.27.0/24 maxlen: 24
185.187.86.0/23 maxlen: 23
185.187.86.0/24 maxlen: 24
185.187.87.0/24 maxlen: 24
185.186.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 07:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:b6:22:4b:5c:5b:98:bb:22:8a:ea:c8:db:68:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Jan 1 22:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60e3466025addad3437a503f6de0e37dca52d462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:19:ee:8a:ca:12:f6:93:be:fd:c2:86:3e:
11:e6:55:9a:b1:68:8d:58:0b:54:d2:40:82:d0:91:
de:45:7e:91:f6:e0:12:76:f4:94:0c:54:c3:4b:fd:
4a:59:fc:7a:d3:73:f9:9e:b2:d4:fa:30:b8:c6:aa:
bf:c2:e7:30:de:5b:28:fa:60:0b:f6:97:c5:23:3e:
19:22:c5:de:41:76:72:1b:bf:54:f5:ee:74:e9:24:
1a:bb:06:ad:2f:11:3c:21:c1:b7:c3:75:2a:3f:54:
97:39:22:b2:67:aa:aa:53:c7:16:46:e1:15:69:91:
0e:9a:c2:9b:91:0b:1d:a3:8e:88:c4:00:8e:69:9f:
91:f9:d0:b8:99:d9:14:92:07:c9:a9:b1:b2:cb:6e:
df:c5:44:3c:c7:ac:41:83:ac:57:1e:da:e0:bc:fb:
ea:52:30:d6:75:f8:b4:d3:17:c1:6c:dc:e8:7f:bf:
61:4b:2e:69:35:2c:cd:e8:05:34:0a:ab:98:5e:7f:
fc:e6:0c:cd:d3:21:e5:cb:a9:c8:27:8a:c3:ab:6b:
44:a7:68:b5:31:5d:b7:8d:49:8f:6f:d7:7e:46:5e:
b5:cd:e7:fd:15:37:e1:f9:39:0b:60:53:a8:46:84:
b1:57:22:22:8e:9e:79:65:75:4c:c0:30:12:64:ba:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E3:46:60:25:AD:DA:D3:43:7A:50:3F:6D:E0:E3:7D:CA:52:D4:62
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/YONGYCWt2tNDelA_beDjfcpS1GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.9.0/24
91.199.18.0/24
91.199.27.0/24
91.199.30.0/24
185.186.240.0/24
185.187.86.0/23
Signature Algorithm: sha256WithRSAEncryption
40:04:fe:56:8c:d0:0a:41:15:1c:5e:67:14:24:f6:18:b6:da:
fb:a0:0b:7c:1b:cc:d0:a6:95:5b:63:82:85:e1:00:2d:ca:d6:
30:13:27:93:9d:18:0f:09:7f:3b:3e:20:57:a6:7d:04:58:6a:
02:bf:75:68:1f:85:ed:ae:6a:e1:b4:63:a8:20:0f:1f:81:53:
eb:4c:95:20:4e:a6:45:62:fe:22:52:55:3f:4b:21:a3:74:c3:
ed:08:b9:75:58:61:45:9d:61:bb:4d:54:11:83:1c:12:7c:4e:
d0:ce:ce:a7:ce:57:e8:d8:8d:30:75:43:8b:e0:f8:38:36:d5:
72:88:76:6a:19:9e:ea:79:be:df:60:3c:69:b1:f9:41:34:0e:
96:67:ba:d3:ff:ed:79:81:d6:fa:2b:c7:53:86:47:95:e6:69:
b7:bd:61:b3:03:2c:da:7d:35:9e:5b:c9:68:67:09:04:f3:5f:
40:89:cf:ac:91:c5:6a:60:ff:4f:21:fb:3f:0e:cb:ce:5d:d4:
0c:53:45:3f:c6:de:48:01:71:d8:33:aa:ae:31:93:bf:61:d4:
07:1a:6e:ef:9e:76:88:59:39:f5:ca:df:b3:13:0d:2e:57:df:
13:42:21:a1:11:f2:7a:99:0b:76:8d:76:47:06:dd:97:48:41:
1d:4c:41:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:51 2025 by rpki-client