Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/YzomjmNkllQ2GQan-TSvQ86eczo.roa
File: YzomjmNkllQ2GQan-TSvQ86eczo.roa (raw, json)
Hash identifier: O9cOmka47/0biq+h0TGB831MNRrAaZCdyIm0LaOYVoY=
Subject key identifier: 63:3A:26:8E:63:64:96:54:36:19:06:A7:F9:34:AF:43:CE:9E:73:3A
Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial: 018BCA3E8732BF16265EB12A437B16C04AFC
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/YzomjmNkllQ2GQan-TSvQ86eczo.roa
Signing time: Mon 13 Nov 2023 19:52:57 +0000
ROA not before: Mon 13 Nov 2023 19:52:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39683
IP address blocks: 185.252.22.0/23 maxlen: 23
5.61.96.0/21 maxlen: 24
195.189.224.0/24 maxlen: 24
195.189.224.0/23 maxlen: 23
195.189.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ca:3e:87:32:bf:16:26:5e:b1:2a:43:7b:16:c0:4a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Validity
Not Before: Nov 13 19:52:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=633a268e63649654361906a7f934af43ce9e733a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:36:2c:28:0c:03:17:30:bb:71:05:ac:c2:
4d:91:db:8a:a1:e3:95:70:20:56:a4:99:e7:6a:09:
0d:27:c6:36:83:f1:a6:04:4f:49:b1:9b:7f:79:90:
3b:58:59:21:2c:5d:2a:10:3d:ec:b8:13:83:be:06:
3b:47:b2:d2:c0:42:d3:bc:10:2a:f1:fe:c0:eb:85:
a6:99:ab:ec:8b:be:bd:13:c3:aa:c8:6e:45:62:3e:
81:4f:9c:f6:6e:78:ee:2c:b2:d2:71:ac:e3:7d:75:
17:36:4a:71:fa:8a:91:e4:c1:9d:d5:d7:b4:ec:74:
07:df:6d:75:70:b4:df:45:b9:4c:79:ea:f9:6b:49:
23:45:38:eb:8f:0f:9d:f0:de:eb:91:04:0d:cb:81:
d3:46:56:2c:37:05:99:25:29:d4:70:8e:71:3e:00:
17:3a:90:fb:1d:37:76:4e:bd:0b:b6:6a:04:41:ba:
28:66:71:f0:a3:b3:e6:18:84:df:9e:4d:85:8a:a0:
cb:19:57:85:0d:74:e5:82:ab:21:69:69:26:39:a6:
dd:be:ee:d2:86:03:87:3c:7d:a7:39:a0:c4:fe:d6:
6f:59:39:e1:e3:c2:44:6b:a8:14:e6:0a:dc:0e:db:
09:42:3a:7d:10:2a:d9:9e:b9:be:11:da:71:13:40:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3A:26:8E:63:64:96:54:36:19:06:A7:F9:34:AF:43:CE:9E:73:3A
X509v3 Authority Key Identifier:
keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/YzomjmNkllQ2GQan-TSvQ86eczo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.96.0/21
185.252.22.0/23
195.189.224.0/23
Signature Algorithm: sha256WithRSAEncryption
81:db:41:f8:ef:97:b5:33:7a:01:bc:85:e8:33:3a:2f:ab:2b:
c0:a1:be:4b:21:d8:55:0a:74:d2:e9:a6:09:0b:d1:60:c9:ad:
15:f2:f8:f7:78:85:01:64:0a:89:09:30:13:51:72:02:1e:22:
36:52:26:dd:4b:9e:43:30:bc:75:5d:9b:ff:f7:9e:56:57:c2:
86:ac:54:68:0f:76:e1:36:00:a9:3a:18:22:58:a2:18:e0:d4:
71:99:2a:19:6a:b5:4f:c7:16:32:a3:67:0c:f7:c3:ee:2b:05:
c7:35:84:d7:17:92:2d:4e:f7:c3:c3:07:b7:a8:ba:fc:42:a2:
9f:93:6d:5e:30:45:d9:fe:75:0e:17:f4:3b:c7:cb:8a:7c:17:
39:83:2c:39:18:1f:51:e2:b2:fd:bb:40:ad:4a:e2:52:91:ca:
57:d9:b3:b6:1c:be:6c:2b:5c:8d:e3:d8:1f:07:ab:35:33:d6:
ff:0f:e9:43:3f:27:db:de:d0:08:a3:47:4b:88:8c:37:57:3a:
e1:d1:1b:5a:8b:68:54:2a:07:07:1b:48:fe:60:e9:70:46:6f:
65:2d:d7:58:9f:57:3f:f0:d4:4d:d8:93:a5:ea:81:15:74:9f:
6e:95:56:3d:66:a6:75:48:57:e9:ab:1c:dd:da:08:b5:18:a7:
17:9e:18:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:14 2024 by rpki-client on console-ams.rpki-client.org