Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/Cyh_KdFErAQaVtbfCkv_ViiO-Ww.roa
File: Cyh_KdFErAQaVtbfCkv_ViiO-Ww.roa (raw, json)
Hash identifier: RfaTk2V4Aq+OJkRg/nz6sdvPRxskty4J7GQ5o5vk0y0=
Subject key identifier: 0B:28:7F:29:D1:44:AC:04:1A:56:D6:DF:0A:4B:FF:56:28:8E:F9:6C
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 0190CCA3B4935DCE93EC7CFA1BB66D6B2C84
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/Cyh_KdFErAQaVtbfCkv_ViiO-Ww.roa
Signing time: Fri 19 Jul 2024 20:16:38 +0000
ROA not before: Fri 19 Jul 2024 20:16:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14593
IP address blocks: 87.251.24.0/21 maxlen: 24
91.102.180.0/22 maxlen: 24
145.224.64.0/18 maxlen: 24
145.224.64.0/21 maxlen: 24
145.224.72.0/21 maxlen: 24
145.224.80.0/21 maxlen: 24
145.224.88.0/22 maxlen: 24
145.224.92.0/23 maxlen: 24
145.224.94.0/23 maxlen: 24
145.224.96.0/21 maxlen: 24
145.224.108.0/22 maxlen: 24
145.224.124.0/22 maxlen: 24
162.43.192.0/22 maxlen: 24
169.155.224.0/19 maxlen: 24
176.116.124.0/23 maxlen: 24
188.92.248.0/21 maxlen: 24
188.95.144.0/23 maxlen: 24
209.198.128.0/19 maxlen: 24
216.128.0.0/19 maxlen: 24
217.65.136.0/21 maxlen: 24
217.65.136.0/22 maxlen: 24
217.142.16.0/20 maxlen: 24
2a0d:3340::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 02 Oct 2024 23:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:cc:a3:b4:93:5d:ce:93:ec:7c:fa:1b:b6:6d:6b:2c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Jul 19 20:16:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b287f29d144ac041a56d6df0a4bff56288ef96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:c2:ac:43:26:2e:9a:f0:df:37:15:a6:5b:
0f:c9:e9:e4:34:cc:ee:40:39:3f:50:be:69:b5:56:
53:b7:c8:7c:99:b4:9a:df:71:6f:08:68:80:42:ec:
17:75:10:31:b4:77:bd:19:61:82:3c:f9:99:d9:c3:
aa:3d:fc:96:09:87:08:8f:6d:50:69:2c:94:2f:a2:
3b:02:e9:18:7d:b2:2a:0e:68:9f:5f:99:71:77:23:
ba:3d:be:20:02:16:31:3e:f4:60:47:93:fd:b8:8e:
41:c3:4a:db:e6:0b:0d:e7:d5:1d:fc:4f:21:12:a1:
bb:54:0d:af:f7:35:9d:62:21:c4:2c:b9:29:28:d3:
be:a3:48:af:06:0e:7d:df:c5:af:4b:0a:eb:4c:bf:
b6:25:01:ec:9d:da:88:8b:7b:7c:b1:bb:06:9d:5a:
91:fb:7d:87:8b:36:e2:49:f7:ca:f3:46:50:fc:c7:
c0:39:ef:17:64:b6:4e:0a:5b:82:0d:19:fa:4f:76:
bf:b2:7d:7a:05:e2:7d:a1:71:c6:cd:4a:80:3c:bf:
ea:52:53:34:3e:fb:63:ef:df:8d:54:b0:26:95:4a:
73:96:45:22:57:9f:33:bd:f1:67:3d:8a:61:46:5a:
99:60:5d:8a:fa:6f:fe:07:5f:50:91:28:c0:f3:92:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:28:7F:29:D1:44:AC:04:1A:56:D6:DF:0A:4B:FF:56:28:8E:F9:6C
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/Cyh_KdFErAQaVtbfCkv_ViiO-Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.24.0/21
91.102.180.0/22
145.224.64.0/18
162.43.192.0/22
169.155.224.0/19
176.116.124.0/23
188.92.248.0/21
188.95.144.0/23
209.198.128.0/19
216.128.0.0/19
217.65.136.0/21
217.142.16.0/20
IPv6:
2a0d:3340::/29
Signature Algorithm: sha256WithRSAEncryption
8e:0e:70:72:c5:d6:d4:7b:f6:b1:35:70:57:b0:a1:e8:31:13:
d1:1d:c5:b5:d6:c6:e7:b8:f6:e2:cb:83:55:11:36:4c:97:e6:
2a:c8:4b:49:f5:96:08:a5:3b:37:56:4c:2a:52:00:08:1e:9d:
89:c1:7b:87:68:8b:94:b5:1d:e1:33:91:35:56:24:da:4a:f3:
68:ce:3f:5a:c3:04:bd:49:c1:dc:7e:17:8c:50:bf:e2:ac:a0:
9e:85:e3:1a:61:d1:49:fc:25:21:f5:c5:12:77:b0:bf:56:5a:
e7:63:ef:e5:70:ee:8a:c0:03:03:3d:03:b0:30:02:9f:17:94:
86:d0:92:5c:a3:3c:63:98:75:7f:a0:e7:7c:ff:53:74:e0:ff:
13:5b:26:74:38:d1:aa:d1:29:54:d3:ec:f1:98:19:7f:28:9b:
7c:45:5a:b1:a5:fa:b9:28:5f:33:95:79:0e:0d:e0:a3:52:40:
5f:85:98:c8:72:55:89:7b:b9:04:63:b4:fe:32:d6:47:8a:97:
6a:79:33:dd:66:bb:b4:a6:7b:b4:91:65:94:62:d7:f2:d8:c8:
18:6e:82:b4:c5:e2:d8:38:a1:c9:ae:53:a7:e9:dd:db:27:d0:
d9:cd:53:25:12:8a:af:90:ac:06:9f:c7:b3:8a:81:f7:6f:a7:
ea:59:78:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 02:21:56 2024 by rpki-client on console-fra.rpki-client.org