Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/YOLL7W2ntQTJ9RanSxwG7fo1TWc.roa
File: YOLL7W2ntQTJ9RanSxwG7fo1TWc.roa (raw, json)
Hash identifier: z+hNS4sGvmrypv6V7wqTjrMzq5oVUxhoszDSZrzBzoo=
Subject key identifier: 60:E2:CB:ED:6D:A7:B5:04:C9:F5:16:A7:4B:1C:06:ED:FA:35:4D:67
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018A982CD91AAF3BC339B9A821C7074BEA33
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/YOLL7W2ntQTJ9RanSxwG7fo1TWc.roa
Signing time: Fri 15 Sep 2023 09:29:50 +0000
ROA not before: Fri 15 Sep 2023 09:29:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47499
IP address blocks: 80.233.228.0/23 maxlen: 23
80.233.252.0/23 maxlen: 23
80.233.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 28 Dec 2023 14:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:2c:d9:1a:af:3b:c3:39:b9:a8:21:c7:07:4b:ea:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Sep 15 09:29:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60e2cbed6da7b504c9f516a74b1c06edfa354d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:67:6e:04:23:80:3b:b1:7b:41:74:85:ed:76:
85:3a:1a:89:01:34:c0:d1:e8:cc:51:e3:53:db:00:
1f:1d:51:5f:1b:4c:c1:7c:58:01:e0:a1:41:4e:4f:
d8:83:a6:72:e5:dc:44:9d:ec:54:84:f8:d6:df:b2:
4c:31:15:1d:15:07:ab:20:59:ff:ea:f4:2f:b6:47:
e4:53:c1:ea:cd:dc:9e:e1:c8:25:da:71:3e:4c:94:
0e:3c:2f:6f:6d:f8:32:29:86:97:9a:a2:12:92:4e:
f6:13:ca:37:b2:f2:f0:bb:0f:2d:e6:8a:18:fd:55:
37:31:48:c0:9c:f3:7d:6b:e9:94:e1:61:70:71:0b:
91:c8:7a:06:f3:87:35:10:53:e3:21:db:b7:32:a2:
89:f6:3a:fa:63:46:43:dd:ad:f0:2e:1c:f4:08:ab:
5d:73:88:ef:f2:1d:28:6b:a2:54:48:ff:cc:ec:ba:
c7:52:04:c0:b5:ee:01:cf:56:04:64:1e:31:7a:9b:
5d:d4:9b:d4:eb:93:c2:f1:fe:2b:3b:7f:2c:2a:09:
31:68:aa:8e:ec:77:0d:52:f0:9a:8f:bb:e8:8d:71:
d5:8c:16:ae:fb:06:28:e1:b6:c5:9f:34:c0:eb:c8:
f1:4d:ee:41:b2:78:03:3d:ef:fb:f4:39:2e:33:b1:
34:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E2:CB:ED:6D:A7:B5:04:C9:F5:16:A7:4B:1C:06:ED:FA:35:4D:67
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/YOLL7W2ntQTJ9RanSxwG7fo1TWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.160.0/23
80.233.228.0/23
80.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:40:42:d8:74:f3:27:ed:d4:f8:af:f6:2b:c9:e8:ff:99:a3:
72:89:70:4a:91:70:90:3a:43:f7:b4:0a:d0:d5:67:eb:78:ea:
d6:8b:64:81:93:39:aa:29:bd:f1:8e:52:1d:12:0a:37:c8:b9:
76:65:dd:49:64:69:1e:0f:97:ef:fd:ff:8f:7c:b0:9b:99:7e:
8e:6e:4a:30:bd:5f:b6:8a:c8:6c:0e:e4:f6:6b:24:e6:55:65:
ad:b6:1a:e5:16:93:72:cd:01:29:e8:e9:de:86:a9:30:b3:6a:
c4:87:4f:30:90:68:9c:ca:93:99:10:1f:27:d2:e0:bd:f9:25:
8f:38:a4:50:e3:fb:d0:04:76:8a:fa:39:7a:eb:31:31:1c:9d:
d8:e3:96:54:9a:cb:9c:8c:bb:7a:c7:1a:a7:00:61:c7:4d:bf:
45:23:67:e5:9c:6e:a7:62:fe:9f:d0:a5:01:de:53:6e:c6:12:
6f:85:1b:99:4c:60:69:a7:87:ad:28:4d:a0:a6:d7:ca:04:7a:
f6:1a:b3:dd:46:0d:d0:62:4e:df:3b:60:68:c3:f5:35:a8:0e:
33:a4:3e:df:2b:9a:4e:3b:08:18:32:2c:16:3c:c2:55:76:15:
f2:c7:3f:c5:a7:e2:d2:f9:ba:e6:f9:89:4e:42:e6:b7:e7:19:
52:a5:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:47 2024 by rpki-client on console-ams.rpki-client.org