Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yd1-7-VCHAmz9kUttD9Pcnws3CM.roa
File: yd1-7-VCHAmz9kUttD9Pcnws3CM.roa (raw, json)
Hash identifier: vnQwO65LTs3abN8cGo4huafPTIIetW7BraraR/ojIyk=
Subject key identifier: C9:DD:7E:EF:E5:42:1C:09:B3:F6:45:2D:B4:3F:4F:72:7C:2C:DC:23
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01878FE01D9D33C40C348841CA659B79D159
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yd1-7-VCHAmz9kUttD9Pcnws3CM.roa
Signing time: Mon 17 Apr 2023 15:40:42 +0000
ROA not before: Mon 17 Apr 2023 15:40:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.206.250.0/24 maxlen: 24
185.126.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Aug 2023 12:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:e0:1d:9d:33:c4:0c:34:88:41:ca:65:9b:79:d1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 17 15:40:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9dd7eefe5421c09b3f6452db43f4f727c2cdc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:b0:dc:7c:c6:b7:20:98:16:c7:c6:ef:4a:
59:83:c3:a9:a3:87:e9:46:d9:5b:a8:19:f5:1f:58:
b8:72:66:88:59:96:1c:9c:d4:84:93:ac:55:17:8b:
0e:aa:2e:22:41:f4:f1:c5:ee:af:a2:20:ba:a8:f6:
94:f3:c1:4d:98:f2:cb:2a:b4:6a:09:1d:3e:c3:5e:
44:5c:6c:97:21:08:28:95:be:99:34:c5:e2:1d:46:
a7:c9:d4:cd:52:13:29:eb:1e:2e:b9:3d:7e:13:c2:
2c:03:4b:c6:8b:b2:6b:a2:1f:c7:48:e1:80:d0:b4:
ee:33:8c:f8:35:2a:45:53:93:98:88:5f:b6:c1:87:
43:71:22:92:5e:f0:12:7c:14:87:51:ad:39:18:35:
2a:14:93:3e:3d:68:6d:30:04:b7:3d:d4:1d:30:a1:
8c:61:82:47:86:fe:4a:ea:39:90:c4:7b:ef:89:1c:
29:53:4c:11:90:d8:6b:f2:6e:db:50:ce:67:07:92:
1c:48:00:07:b8:fd:a4:ef:c6:7d:3c:75:80:79:73:
ee:df:a0:07:b4:57:6a:94:e5:7f:4a:85:fc:be:97:
58:2a:48:35:0a:fd:ed:54:f1:0e:e4:07:1c:2d:34:
e6:9c:aa:16:59:71:d8:34:a5:a1:82:e3:57:5d:53:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DD:7E:EF:E5:42:1C:09:B3:F6:45:2D:B4:3F:4F:72:7C:2C:DC:23
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yd1-7-VCHAmz9kUttD9Pcnws3CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.80.0/24
185.206.250.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b7:bf:b0:a3:20:91:e7:04:6c:b9:93:1a:66:cc:78:47:d7:
b5:7e:fd:d1:d4:b2:75:7a:3a:ab:55:91:43:66:e2:dd:02:cc:
08:b0:84:a6:ca:14:88:e4:f8:f0:de:1c:83:65:0c:10:42:fb:
c3:55:90:18:6d:b0:c4:d1:13:96:2d:7f:9a:94:61:00:c2:89:
95:72:db:f6:9a:2d:b7:4a:8a:73:d1:56:d3:f6:20:7e:37:b4:
92:9d:e6:e7:c1:be:53:d3:b9:bd:ec:0e:d7:6a:2d:ba:6c:d3:
ce:e5:fc:7d:0b:a3:cb:2e:51:bf:60:89:e6:9e:d6:fa:02:e3:
3a:e8:27:0a:6e:d4:d5:ed:f6:19:bd:f5:59:c6:ec:eb:45:46:
05:62:1c:c3:17:45:db:64:dd:a1:39:c8:fd:92:07:d2:83:73:
06:ce:9a:95:5d:da:81:af:cd:36:bf:f3:37:8b:21:76:b9:75:
00:a0:b4:5c:8d:56:07:4d:e9:13:21:68:82:f6:d9:12:f1:9b:
b6:40:ab:a7:a0:c7:98:a3:58:6f:55:b4:ba:86:38:3b:99:46:
73:16:e3:81:01:05:ea:6e:13:53:63:2c:21:de:72:c3:e5:8f:
04:11:55:56:62:56:1e:7d:a5:65:15:3e:59:ca:00:46:33:53:
d4:94:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org