Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/YTCBkCYwZGrPMU7GTuZB0qQ5aSY.roa
File: YTCBkCYwZGrPMU7GTuZB0qQ5aSY.roa (raw, json)
Hash identifier: ujmCuCG3jt4oJupflUU7hU9y0xHt0/5lXn/RTa1YfOA=
Subject key identifier: 61:30:81:90:26:30:64:6A:CF:31:4E:C6:4E:E6:41:D2:A4:39:69:26
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 018C7DE9D7B805CCCFC08FB521850EC6AB71
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/YTCBkCYwZGrPMU7GTuZB0qQ5aSY.roa
Signing time: Mon 18 Dec 2023 17:12:06 +0000
ROA not before: Mon 18 Dec 2023 17:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 194.127.111.0/24 maxlen: 24
194.127.108.0/24 maxlen: 24
194.127.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:e9:d7:b8:05:cc:cf:c0:8f:b5:21:85:0e:c6:ab:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Dec 18 17:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=613081902630646acf314ec64ee641d2a4396926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:7a:3e:7f:0e:ab:3a:d9:4d:a0:b2:83:e5:
85:95:98:ce:60:22:60:3b:af:b8:1a:e9:dd:57:3f:
fb:1b:0f:a7:c8:4e:91:cb:2d:2a:cc:1a:92:d8:71:
df:2f:dc:9d:0e:5f:de:e4:9b:7f:96:81:dc:4e:fd:
e6:86:c4:3f:57:e2:2f:ca:3b:c7:11:b0:5e:c3:de:
c8:7e:44:0e:7e:d5:c1:1f:0a:c5:16:97:a7:1b:4c:
93:3f:f5:d8:f8:c5:27:61:f7:92:5a:85:ca:30:53:
03:7f:9d:4f:40:ce:0a:97:2e:39:ac:43:ea:7b:be:
b3:f8:95:26:73:11:e2:a0:19:e5:75:5c:9d:8c:f3:
e9:b9:f5:05:d7:05:bb:bd:85:68:96:1f:dd:fe:ec:
29:97:98:92:cf:53:ef:34:28:95:66:b4:ce:dc:d7:
10:e3:43:c3:b5:a9:92:cc:ce:20:86:c4:c1:ee:8e:
e4:38:c4:75:02:88:99:da:be:69:19:4d:b2:9b:af:
d4:7f:b8:4a:7e:34:e0:30:3f:f2:f1:1c:cc:3a:04:
4d:ad:c6:0d:98:2e:44:56:79:26:e1:24:bc:38:96:
68:08:88:b6:d1:e0:40:bc:c4:73:2f:9f:f4:66:fa:
95:9f:c2:d8:4a:2c:ec:55:ed:c3:66:21:1e:9e:33:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:30:81:90:26:30:64:6A:CF:31:4E:C6:4E:E6:41:D2:A4:39:69:26
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/YTCBkCYwZGrPMU7GTuZB0qQ5aSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.108.0/24
194.127.110.0/23
Signature Algorithm: sha256WithRSAEncryption
28:d7:a1:c9:cb:39:2c:77:9b:02:e2:25:44:5b:e9:87:c7:fe:
48:9d:dd:28:c3:38:24:47:90:c9:7b:ec:de:87:d8:68:5c:07:
b3:cd:1d:49:dd:1e:fe:10:69:9b:db:83:0a:2b:55:3a:c1:9a:
9a:65:4d:53:98:37:e2:6d:87:00:b2:24:44:24:e1:37:a6:d9:
7b:29:d5:a8:15:05:68:d0:cf:23:b6:11:2c:0d:56:32:29:97:
e8:2d:10:89:0c:d2:86:b0:5f:be:83:7e:3f:34:21:e6:6f:b9:
c1:10:71:61:73:de:95:fd:04:fc:20:24:73:af:50:84:f6:cf:
18:ee:22:d0:b7:73:d7:15:47:9c:7e:7e:40:d6:bc:cf:3c:44:
71:22:5e:a0:69:e8:59:cd:68:f2:0c:25:fa:df:04:79:78:32:
a7:d9:1b:20:dd:bf:7b:72:ed:73:93:90:64:6c:0d:6d:a9:b2:
8f:89:6d:4e:9a:73:3b:c0:05:c6:f3:39:cc:f4:51:81:e5:d3:
c9:f4:69:4c:43:ab:8e:df:2a:be:40:a2:29:cf:37:16:4b:20:
1f:d5:9a:e9:56:30:e4:75:2a:93:d3:f8:1a:76:d7:a1:b2:ec:
4f:53:1d:09:8e:fd:e6:94:38:b8:59:4c:47:d8:02:5a:c1:db:
63:14:a8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:59 2024 by rpki-client on console-ams.rpki-client.org