Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/YbPeAgts-IHicmDDjYyX9SnmT50.roa
File: YbPeAgts-IHicmDDjYyX9SnmT50.roa (raw, json)
Hash identifier: KC8wu2wUXsLq+2xp3nlr0vAH2RmfvDNE/2JqYHMPpcw=
Subject key identifier: 61:B3:DE:02:0B:6C:F8:81:E2:72:60:C3:8D:8C:97:F5:29:E6:4F:9D
Certificate issuer: /CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Certificate serial: 01856FC285D4BB9E2FDE68BA392FF2CE6EB4
Authority key identifier: 64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/YbPeAgts-IHicmDDjYyX9SnmT50.roa
Signing time: Sun 01 Jan 2023 23:54:57 +0000
ROA not before: Sun 01 Jan 2023 23:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 62.3.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Dec 2023 20:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:85:d4:bb:9e:2f:de:68:ba:39:2f:f2:ce:6e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Validity
Not Before: Jan 1 23:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61b3de020b6cf881e27260c38d8c97f529e64f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f3:52:88:bd:5b:13:9a:23:57:b8:d9:c9:90:
10:ba:73:ec:4e:23:6f:dd:92:22:46:a8:70:14:68:
c6:97:e9:d0:ef:79:49:58:24:37:22:3e:42:28:36:
b2:c7:6e:6d:20:78:ac:88:45:be:ae:15:38:b9:c9:
d7:3b:14:de:db:e7:f1:8c:6f:d6:15:14:2b:1b:08:
91:42:48:37:68:12:16:ba:88:ec:4d:89:2c:d2:8c:
87:94:dd:32:81:97:75:54:15:e4:6e:80:5d:30:d2:
ee:bf:a8:c7:4d:aa:6c:77:37:a0:ca:17:66:61:ea:
42:cf:c1:c1:b7:1f:23:99:89:ac:a9:5a:fc:6b:fb:
40:e4:b6:c3:02:bb:72:52:28:13:67:f3:c4:81:e1:
51:1e:07:6b:e4:55:02:b0:72:23:0e:9d:ed:84:00:
9c:3c:90:f5:d2:2c:57:87:95:96:98:32:53:ab:04:
09:4f:39:4b:fa:8a:f0:5f:68:5d:7a:97:04:41:b8:
14:f7:60:43:16:1b:9b:43:1d:35:48:a3:90:20:5e:
fe:9d:6d:17:77:68:fa:e7:df:fd:54:c2:e1:fa:63:
c6:af:71:41:ed:14:54:de:95:55:ff:62:d3:54:7a:
1a:88:c4:83:4e:45:6f:f0:82:e6:79:8e:af:7c:ae:
3d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B3:DE:02:0B:6C:F8:81:E2:72:60:C3:8D:8C:97:F5:29:E6:4F:9D
X509v3 Authority Key Identifier:
keyid:64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/YbPeAgts-IHicmDDjYyX9SnmT50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.61.0/24
Signature Algorithm: sha256WithRSAEncryption
26:09:1e:4a:d6:70:bf:a5:6a:f7:6a:88:64:87:99:64:ab:df:
91:e9:2f:06:7e:5d:38:11:de:8e:9d:3d:eb:b7:87:c5:6e:92:
37:d1:76:49:9f:bf:56:50:64:49:6e:14:14:2b:39:dc:e9:a7:
bd:8b:9c:5c:e8:7f:97:86:42:bc:28:20:06:19:d2:a1:c4:36:
39:fb:34:02:59:69:b0:ba:cd:05:4b:bb:99:47:ab:77:41:0a:
32:82:c6:2e:39:0e:79:c4:1f:19:c4:23:61:81:48:3c:67:fd:
5b:e9:82:a7:1a:9d:5e:6f:f1:bf:52:5d:b2:05:07:0e:0f:52:
c0:dd:a4:21:9d:ba:75:55:b6:eb:42:1e:57:f1:c5:c5:69:a6:
ef:83:ae:9d:f5:60:bf:8d:71:d8:a8:7a:41:26:a4:49:d1:06:
18:0d:f0:44:b6:76:35:30:fd:f7:ac:4e:12:f5:4f:57:9e:e1:
a9:f2:99:15:cf:ac:4d:f2:e3:8f:3b:c6:3f:5b:36:23:8d:a9:
55:13:96:07:92:2e:0e:f3:78:91:e9:c2:f9:40:7e:ab:04:92:
1d:fb:da:2e:29:7f:aa:47:2d:b2:5d:72:13:72:70:7c:95:64:
1e:27:5b:9b:29:a4:17:80:1b:b6:4e:44:1c:e8:dc:5f:8c:b4:
51:55:1b:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvwoXUu54v3mi6OS/yzm60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZWUwNDg5MTU4ZmU5NWUxOTkxZmQ1Y2U3MjVlYTA2N2Ux
MWExZmIwHhcNMjMwMTAxMjM1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWIzZGUwMjBiNmNmODgxZTI3MjYwYzM4ZDhjOTdmNTI5ZTY0ZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfNSiL1bE5ojV7jZyZAQunPsTiNv
3ZIiRqhwFGjGl+nQ73lJWCQ3Ij5CKDayx25tIHisiEW+rhU4ucnXOxTe2+fxjG/W
FRQrGwiRQkg3aBIWuojsTYks0oyHlN0ygZd1VBXkboBdMNLuv6jHTapsdzegyhdm
YepCz8HBtx8jmYmsqVr8a/tA5LbDArtyUigTZ/PEgeFRHgdr5FUCsHIjDp3thACc
PJD10ixXh5WWmDJTqwQJTzlL+orwX2hdepcEQbgU92BDFhubQx01SKOQIF7+nW0X
d2j659/9VMLh+mPGr3FB7RRU3pVV/2LTVHoaiMSDTkVv8ILmeY6vfK49vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGGz3gILbPiB4nJgw42Ml/Up5k+dMB8GA1UdIwQY
MBaAFGTuBIkVj+leGZH9XOcl6gZ+EaH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk80RWlSV1A2VjRaa2YxYzV5WHFCbjRSb2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xOGFlMDItZTcyZC00NDMwLTg1ZDgt
NDczYzViYTU1MzYyLzEvWWJQZUFndHMtSUhpY21ERGpZeVg5U25tVDUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8xOGFlMDItZTcyZC00NDMwLTg1ZDgtNDczYzViYTU1MzYy
LzEvWk80RWlSV1A2VjRaa2YxYzV5WHFCbjRSb2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgM9MA0G
CSqGSIb3DQEBCwUAA4IBAQAmCR5K1nC/pWr3aohkh5lkq9+R6S8Gfl04Ed6OnT3r
t4fFbpI30XZJn79WUGRJbhQUKznc6ae9i5xc6H+XhkK8KCAGGdKhxDY5+zQCWWmw
us0FS7uZR6t3QQoygsYuOQ55xB8ZxCNhgUg8Z/1b6YKnGp1eb/G/Ul2yBQcOD1LA
3aQhnbp1VbbrQh5X8cXFaabvg66d9WC/jXHYqHpBJqRJ0QYYDfBEtnY1MP33rE4S
9U9XnuGp8pkVz6xN8uOPO8Y/WzYjjalVE5YHki4O83iR6cL5QH6rBJId+9ouKX+q
Ry2yXXITcnB8lWQeJ1ubKaQXgBu2TkQc6NxfjLRRVRtf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:23 2024 by rpki-client on console-ams.rpki-client.org