Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/y9_j3woC9db_Belu07FW5iLklNY.roa
File: y9_j3woC9db_Belu07FW5iLklNY.roa (raw, json)
Hash identifier: n/4tXLg3AL6i+FwU1AOOWn0IgbyAX6DhcEQGTYoiKbs=
Subject key identifier: CB:DF:E3:DF:0A:02:F5:D6:FF:05:E9:6E:D3:B1:56:E6:22:E4:94:D6
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018B3D36D89CE667F04C273253426DF6887B
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/y9_j3woC9db_Belu07FW5iLklNY.roa
Signing time: Tue 17 Oct 2023 10:38:06 +0000
ROA not before: Tue 17 Oct 2023 10:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8262
IP address blocks: 194.12.224.0/19 maxlen: 19
194.12.231.0/24 maxlen: 24
194.12.234.0/24 maxlen: 24
194.12.249.0/24 maxlen: 24
194.12.254.0/24 maxlen: 24
82.119.92.0/24 maxlen: 24
82.119.94.0/24 maxlen: 24
185.92.132.0/22 maxlen: 22
82.119.64.0/19 maxlen: 19
82.119.68.0/24 maxlen: 24
82.119.69.0/24 maxlen: 24
82.119.84.0/24 maxlen: 24
82.119.83.0/24 maxlen: 24
82.119.80.0/21 maxlen: 21
89.252.223.0/24 maxlen: 24
89.252.241.0/24 maxlen: 24
89.252.246.0/24 maxlen: 24
89.252.192.0/18 maxlen: 18
85.14.36.0/24 maxlen: 24
85.14.44.0/24 maxlen: 24
85.14.49.0/24 maxlen: 24
85.14.47.0/24 maxlen: 24
176.67.233.0/24 maxlen: 24
85.14.0.0/23 maxlen: 23
85.14.0.0/18 maxlen: 18
176.67.234.0/24 maxlen: 24
85.14.12.0/24 maxlen: 24
85.14.13.0/24 maxlen: 24
85.14.24.0/24 maxlen: 24
2001:1ae0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:36:d8:9c:e6:67:f0:4c:27:32:53:42:6d:f6:88:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Oct 17 10:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbdfe3df0a02f5d6ff05e96ed3b156e622e494d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:2f:35:85:ba:75:47:3a:7a:58:9d:c6:36:
22:65:5a:45:4f:9e:70:73:09:bb:32:22:49:d0:09:
83:15:b0:0d:dd:2e:02:52:7b:38:ce:26:79:af:4e:
eb:dc:ba:28:bf:62:fd:54:be:5c:4e:fa:48:49:23:
5c:8f:62:4e:f8:ee:f7:44:e6:77:a7:61:bf:c2:9d:
07:8a:7d:a7:42:49:8c:d3:cd:03:7a:62:3b:00:24:
b9:9b:a8:07:60:50:12:ce:f9:51:97:6b:8e:c6:9d:
ab:66:55:e1:7c:03:ff:f9:ea:44:c1:1d:f3:65:73:
2c:26:18:77:74:f8:0c:0e:6f:7d:23:3b:81:8a:57:
03:e5:a2:f2:3f:62:37:6f:be:c8:ac:61:fa:7b:6b:
97:b8:80:5e:45:a4:35:5c:c8:62:a8:b4:eb:b9:0d:
7d:56:6b:f9:ad:ee:a1:3b:30:6d:61:b4:2c:f4:57:
da:cb:2d:fd:ed:ce:2b:f7:71:3d:9a:ae:47:4a:e0:
67:49:a9:d6:a9:90:27:56:b2:39:a1:3e:ec:39:ef:
56:6f:0b:e7:1a:04:06:8c:a4:87:37:54:b2:0c:e6:
d8:98:a5:07:d2:b9:4e:8c:73:95:9b:fd:f5:15:20:
71:ee:9a:eb:9a:f0:22:a1:b5:21:3e:e7:a7:0f:7e:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DF:E3:DF:0A:02:F5:D6:FF:05:E9:6E:D3:B1:56:E6:22:E4:94:D6
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/y9_j3woC9db_Belu07FW5iLklNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.64.0/19
85.14.0.0/18
89.252.192.0/18
176.67.233.0-176.67.234.255
185.92.132.0/22
194.12.224.0/19
IPv6:
2001:1ae0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:9d:23:34:f5:57:9c:c4:5e:b6:1d:64:d9:00:e8:ba:30:38:
3b:30:d0:34:78:68:66:8f:76:5b:15:95:5b:e0:ca:be:84:f1:
d0:96:8c:91:59:2c:87:ab:d4:ac:68:be:18:27:da:c6:3f:7c:
28:62:d7:6b:20:52:c9:9b:16:da:22:5f:be:9b:dd:98:1d:d7:
89:85:d6:3f:dc:01:6b:90:58:cc:90:fe:3f:f8:24:db:ed:75:
92:bb:2b:0b:d6:fa:89:d8:69:ec:cd:24:8a:72:d0:b3:08:53:
03:ce:98:fe:36:15:25:f5:c0:0a:de:57:0b:62:a5:62:5f:01:
17:06:ca:fe:e8:9a:43:53:78:b9:9c:40:47:52:ac:24:f2:d0:
62:44:c0:b7:98:01:b6:b3:32:c0:44:a2:a5:b8:a0:06:c5:68:
30:6a:f6:11:1d:e6:ed:5c:0b:89:43:a6:63:e1:41:20:06:ff:
ff:42:c8:bd:6d:60:ba:34:90:98:e8:9d:a6:99:ae:0c:4d:e4:
23:93:e0:64:dc:df:ab:8b:82:2d:01:50:44:be:11:f3:8e:c1:
32:44:cc:dc:7f:84:a6:6a:a0:47:b2:28:f8:e1:f0:58:0d:83:
4d:05:ec:0b:e2:24:23:d7:bd:4f:ef:02:56:31:a5:0d:2a:17:
2f:7c:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:19 2024 by rpki-client on console-ams.rpki-client.org