Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/YDleGuCFYrh_ulByDH87YPYWjoc.roa
File: YDleGuCFYrh_ulByDH87YPYWjoc.roa (raw, json)
Hash identifier: 0kGza6IjjIvrwbpypRXn+/JMZDRK184oUeSb04Ronho=
Subject key identifier: 60:39:5E:1A:E0:85:62:B8:7F:BA:50:72:0C:7F:3B:60:F6:16:8E:87
Certificate issuer: /CN=c66479bdf7edb90b51aa729634104c0d2802ac9f
Certificate serial: 018572311D7FE6A0025951B0EC2FFFEA008B
Authority key identifier: C6:64:79:BD:F7:ED:B9:0B:51:AA:72:96:34:10:4C:0D:28:02:AC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmR5vfftuQtRqnKWNBBMDSgCrJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/YDleGuCFYrh_ulByDH87YPYWjoc.roa
Signing time: Mon 02 Jan 2023 11:14:59 +0000
ROA not before: Mon 02 Jan 2023 11:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200780
IP address blocks: 194.11.255.0/24 maxlen: 24
194.13.1.0/24 maxlen: 24
185.144.24.0/22 maxlen: 22
45.155.228.0/22 maxlen: 22
45.9.104.0/22 maxlen: 22
194.13.67.0/24 maxlen: 24
93.177.69.0/24 maxlen: 24
93.177.70.0/23 maxlen: 23
45.85.132.0/22 maxlen: 22
185.73.206.0/24 maxlen: 24
185.73.204.0/22 maxlen: 22
185.73.204.0/24 maxlen: 24
185.73.205.0/24 maxlen: 24
91.227.36.0/22 maxlen: 22
194.13.64.0/24 maxlen: 24
2a05:46c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:1d:7f:e6:a0:02:59:51:b0:ec:2f:ff:ea:00:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66479bdf7edb90b51aa729634104c0d2802ac9f
Validity
Not Before: Jan 2 11:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60395e1ae08562b87fba50720c7f3b60f6168e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:48:eb:70:ec:c0:17:63:a9:fa:96:0f:31:
15:c0:c2:81:50:17:2f:30:bd:5e:93:f9:c0:e6:bb:
1c:24:8b:48:d2:1f:f1:6a:d7:c8:d8:b9:21:aa:09:
82:c9:c7:c8:89:52:db:aa:d4:7d:ce:92:12:e3:42:
b5:d8:e6:fc:82:9a:94:9a:2d:d4:12:5f:fb:1e:42:
b6:7a:a7:4a:10:ed:d4:47:28:b7:93:98:e6:4a:59:
01:13:9a:9c:f5:18:56:16:bf:e5:de:8b:fd:74:2d:
c3:ea:e6:9f:3c:b3:48:a6:77:93:ea:10:d0:0d:c0:
29:98:aa:a8:17:1b:eb:ef:39:80:32:96:7f:24:d9:
a7:5a:c2:95:fe:25:08:ab:1f:f7:97:f4:e8:38:34:
c2:fd:78:db:8f:15:b7:b0:21:01:f4:6c:fb:fc:bf:
b3:b4:6f:c3:5b:35:23:1d:82:02:76:3f:62:a3:d3:
59:e5:54:1e:e7:1f:07:b5:ab:be:2f:e9:6e:a9:dd:
ee:17:8e:e3:23:5b:0f:8a:f2:5b:dd:d5:e1:8b:50:
da:99:a8:1e:ef:57:46:d1:66:94:17:72:87:1f:b0:
fa:00:d7:9a:25:21:52:ea:bc:16:e4:36:a5:24:32:
6d:a4:1d:e7:72:dc:d7:e7:43:d8:56:cf:d9:a5:b4:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:39:5E:1A:E0:85:62:B8:7F:BA:50:72:0C:7F:3B:60:F6:16:8E:87
X509v3 Authority Key Identifier:
keyid:C6:64:79:BD:F7:ED:B9:0B:51:AA:72:96:34:10:4C:0D:28:02:AC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmR5vfftuQtRqnKWNBBMDSgCrJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/YDleGuCFYrh_ulByDH87YPYWjoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/xmR5vfftuQtRqnKWNBBMDSgCrJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.104.0/22
45.85.132.0/22
45.155.228.0/22
91.227.36.0/22
93.177.69.0-93.177.71.255
185.73.204.0/22
185.144.24.0/22
194.11.255.0/24
194.13.1.0/24
194.13.64.0/24
194.13.67.0/24
IPv6:
2a05:46c0::/29
Signature Algorithm: sha256WithRSAEncryption
a3:ca:3b:d7:71:b8:34:26:5c:37:c3:ef:f5:0a:17:41:c3:a0:
51:d6:48:cb:4c:c9:11:43:cb:c0:bb:8b:0b:97:b4:92:91:84:
d3:f1:ab:dc:30:51:7b:66:b7:7c:62:4d:75:52:34:d4:e5:db:
c3:f6:f9:89:34:03:c0:86:6a:cd:c4:51:72:06:1a:cc:41:b5:
a5:91:9f:40:81:51:8e:70:b2:6f:92:8b:aa:e5:cd:49:49:64:
89:48:f4:50:4c:ac:4c:63:35:8a:2b:26:35:89:e4:29:86:92:
37:88:87:14:f8:5c:11:6a:a8:1d:46:a9:0d:6c:b0:99:0f:98:
ba:95:ed:0c:dd:9c:b9:47:7f:6c:15:55:e9:c0:37:24:77:5e:
14:b0:ff:ef:9e:84:37:74:d8:78:ca:39:a3:1a:08:2f:5b:08:
e8:22:0b:c4:44:3f:ba:c4:4d:2b:49:1a:91:a5:f6:16:16:87:
65:6f:19:28:03:28:f4:14:90:8e:77:21:8e:c2:a4:d7:d8:7f:
56:4f:d7:74:49:fd:57:2c:52:1c:f3:64:68:a8:d9:ee:51:29:
0c:7c:bf:aa:f1:2f:05:92:c1:8b:48:fc:16:d1:0c:b7:d1:da:
24:a9:0f:d3:36:a8:13:9e:70:89:64:55:47:01:dd:41:10:60:
ce:8e:1c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:43 2023 by rpki-client on console.sobornost.net