Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/YexyO4CJus84dvnPvS6rvuFjdvk.roa
File: YexyO4CJus84dvnPvS6rvuFjdvk.roa (raw, json)
Hash identifier: 82EkniLRnGrCV+0GqmY8nA3FrntMn71IcTZYz21A474=
Subject key identifier: 61:EC:72:3B:80:89:BA:CF:38:76:F9:CF:BD:2E:AB:BE:E1:63:76:F9
Certificate issuer: /CN=303789258e609f3e558d77b3bfd08acf3515fa92
Certificate serial: 018570303F4964EC42D1B02AACF78C4053DA
Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/YexyO4CJus84dvnPvS6rvuFjdvk.roa
Signing time: Mon 02 Jan 2023 01:54:48 +0000
ROA not before: Mon 02 Jan 2023 01:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59431
IP address blocks: 185.86.36.0/24 maxlen: 24
185.86.36.0/22 maxlen: 24
185.86.38.0/24 maxlen: 24
185.86.37.0/24 maxlen: 24
185.86.39.0/24 maxlen: 24
164.138.17.0/24 maxlen: 24
164.138.16.0/24 maxlen: 24
164.138.16.0/21 maxlen: 24
164.138.21.0/24 maxlen: 24
164.138.20.0/24 maxlen: 24
164.138.22.0/24 maxlen: 24
164.138.23.0/24 maxlen: 24
164.138.19.0/24 maxlen: 24
164.138.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:3f:49:64:ec:42:d1:b0:2a:ac:f7:8c:40:53:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92
Validity
Not Before: Jan 2 01:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61ec723b8089bacf3876f9cfbd2eabbee16376f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7e:19:13:11:5b:3f:ed:4c:0b:8c:1d:af:3b:
b8:7f:40:6d:f3:1b:52:ff:46:82:27:2b:39:28:ce:
28:bc:8a:b6:66:61:63:87:dc:8b:64:d9:9e:91:60:
54:c1:93:3d:63:da:b1:5c:61:b3:21:1f:4d:f1:24:
2f:c3:09:fc:89:39:8e:6b:5c:93:e7:20:d5:ff:4f:
3c:3f:c3:b7:33:ab:4b:1d:9b:b5:ed:61:92:e8:1e:
48:26:66:ce:26:16:a1:5c:b3:7d:93:39:bf:28:26:
0f:76:13:9e:a2:c4:1c:82:d3:2c:b1:aa:dd:2a:be:
f1:e6:68:00:6f:a2:82:3f:6b:95:49:8a:9a:d8:b8:
80:63:1b:8e:e4:76:fb:8a:55:84:a4:21:22:4d:fc:
4a:49:25:4f:37:03:55:0a:6e:a3:39:e5:e8:98:a6:
3c:99:bb:51:99:43:d8:6b:11:f6:19:93:4e:30:4d:
4c:ea:e8:89:e8:82:b7:b5:80:9a:16:e8:f4:8b:1e:
dd:6b:a1:62:d5:aa:59:e2:c1:25:d5:aa:31:45:8e:
41:bc:1e:c2:d4:19:c5:3e:f6:57:18:43:9e:40:57:
4c:45:d2:b4:7e:00:c6:c8:46:94:83:9c:ef:9b:af:
3e:0d:31:67:57:22:d1:38:0b:d2:11:9c:a7:56:0d:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EC:72:3B:80:89:BA:CF:38:76:F9:CF:BD:2E:AB:BE:E1:63:76:F9
X509v3 Authority Key Identifier:
keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/YexyO4CJus84dvnPvS6rvuFjdvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.16.0/21
185.86.36.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:8e:7d:7a:fb:2e:19:81:8f:6e:a6:00:20:97:2d:36:34:38:
9f:ac:40:5a:07:12:04:55:17:67:28:fa:1b:d4:f0:db:a7:66:
66:77:e4:9e:c0:17:d9:33:51:e2:ac:cd:b8:33:08:96:46:7f:
7c:b4:80:cf:00:23:92:92:3b:7d:73:81:2a:11:94:87:dc:a2:
e5:d2:79:05:bd:7e:a3:c3:91:fc:8e:85:bd:6e:5f:62:07:10:
21:61:b7:bf:51:7e:f6:14:eb:6a:9c:40:92:9f:b6:69:ec:54:
2f:cd:b0:ac:9c:83:81:7a:d0:1f:32:de:8e:72:d4:ed:ce:7d:
37:39:71:e6:f4:73:d3:25:fb:6b:ac:9a:97:eb:db:71:e4:c3:
c1:ae:84:0c:a5:22:18:4d:2f:5d:e0:df:63:1e:6f:52:b4:bf:
3d:fb:30:2b:11:b7:f8:25:b5:1d:47:4a:a7:b5:02:dd:1e:54:
5d:9a:8c:14:8b:00:18:7e:42:11:94:d7:4e:24:4f:ea:cd:e8:
43:8b:0d:01:7e:5d:7e:8d:e8:f6:b6:aa:0e:4c:df:f6:ad:62:
19:95:77:79:61:b4:cd:24:4c:7f:31:02:af:8d:77:a6:19:4f:
aa:a7:ac:3b:a7:ab:1f:08:76:64:7e:f0:d3:ad:9c:f8:1c:0c:
ab:f9:7d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:00 2024 by rpki-client on console-fra.rpki-client.org