Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/YUi7EANz5GKTZbv4GzR4252QXyI.roa
File: YUi7EANz5GKTZbv4GzR4252QXyI.roa (raw, json)
Hash identifier: URnQpjwFyRm8+ORO+I8RJCWvgcjYPniAsL6X5KXTtwc=
Subject key identifier: 61:48:BB:10:03:73:E4:62:93:65:BB:F8:1B:34:78:DB:9D:90:5F:22
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 018B434C293843F099EFA33B12BF29B39078
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/YUi7EANz5GKTZbv4GzR4252QXyI.roa
Signing time: Wed 18 Oct 2023 14:59:06 +0000
ROA not before: Wed 18 Oct 2023 14:59:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 123.100.227.0/24 maxlen: 24
64.225.244.0/23 maxlen: 23
148.222.40.0/22 maxlen: 22
104.225.253.0/24 maxlen: 24
216.183.120.0/24 maxlen: 24
167.234.38.0/24 maxlen: 24
63.251.117.0/24 maxlen: 24
216.203.15.0/24 maxlen: 24
198.49.103.0/24 maxlen: 24
46.17.217.0/24 maxlen: 24
91.198.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:4c:29:38:43:f0:99:ef:a3:3b:12:bf:29:b3:90:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Oct 18 14:59:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6148bb100373e4629365bbf81b3478db9d905f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2f:c0:43:b3:02:72:23:46:a5:f6:33:7d:04:
e0:81:ae:7e:22:4b:9c:36:5a:14:7d:16:6f:6d:82:
4a:52:e7:bc:a8:4c:af:9e:7e:61:4b:60:f8:71:35:
56:5e:14:b8:8e:7b:95:98:53:b4:8a:04:36:0c:91:
f9:d3:38:b0:d5:f0:1c:fd:3d:9b:93:19:70:f7:55:
e9:8b:1e:82:87:e6:5a:e0:9a:86:71:4d:29:bf:12:
de:ae:88:7b:5e:9c:bf:3a:36:ee:dc:c8:05:c2:a1:
91:c8:54:14:d5:2b:c2:6f:ab:53:ac:1b:ba:7b:93:
7a:41:8b:9a:4b:dc:69:c7:7d:a5:27:a3:fe:98:c2:
ef:1a:a8:4e:f8:43:74:d0:9a:fb:2a:b3:e2:02:f2:
33:a2:f3:1e:5e:68:6e:21:ea:21:6f:00:0e:9c:ec:
d7:29:d9:10:2d:de:3e:8b:f6:bd:06:f9:f0:19:06:
0c:77:64:14:83:f5:63:09:5d:46:8b:08:37:fb:f6:
f6:16:af:24:1d:d5:f6:c7:4e:cb:56:7d:8d:46:16:
6c:eb:64:d4:7e:23:c3:2c:5d:74:30:af:ee:b4:ce:
77:92:2f:8c:ba:1a:bc:40:2c:da:1d:4c:2a:b3:f0:
7b:f4:7e:63:2b:f4:07:94:8e:7b:b4:89:af:ee:19:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:48:BB:10:03:73:E4:62:93:65:BB:F8:1B:34:78:DB:9D:90:5F:22
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/YUi7EANz5GKTZbv4GzR4252QXyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.217.0/24
63.251.117.0/24
64.225.244.0/23
91.198.19.0/24
104.225.253.0/24
123.100.227.0/24
148.222.40.0/22
167.234.38.0/24
198.49.103.0/24
216.183.120.0/24
216.203.15.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:21:08:fb:f0:24:18:07:c7:5c:72:92:75:0a:ae:74:dd:61:
14:5a:c0:71:21:c5:0e:91:30:1e:f1:10:7c:0b:16:3d:58:8b:
87:09:73:53:d6:42:be:5d:2d:29:dd:12:e1:d6:2a:fd:c6:56:
9e:1b:1b:e6:79:2c:d4:9d:1e:06:b1:1f:59:e1:86:34:43:d0:
67:66:20:31:25:48:e1:a8:3a:c9:12:88:30:87:70:5c:71:ae:
f2:40:8a:d3:e5:de:6b:58:7c:e0:43:e3:5d:da:56:43:1a:98:
d4:e1:c1:73:f9:4f:1d:59:1e:ed:6d:1b:b9:1e:43:7d:b9:0c:
cd:69:d6:c1:5c:e3:03:d7:8c:55:21:dd:e4:5a:f5:55:c0:77:
0b:ca:5a:47:c9:4b:15:97:0a:15:b6:59:09:09:44:13:89:b2:
7c:fe:e3:8a:b4:ef:35:89:c6:8e:af:08:91:62:3f:9f:3c:36:
b0:f0:d1:5d:54:ae:cd:98:93:57:69:28:e6:e3:24:0e:5f:a5:
d2:80:b4:d9:0b:00:62:b9:4b:5b:d8:73:db:34:7d:66:06:2f:
36:0e:f2:e0:e6:3e:b2:de:8c:57:0a:ff:4c:cc:6e:73:14:ba:
7e:a8:c5:ae:59:f1:21:ed:03:6d:35:ec:b9:a4:6f:5a:e0:01:
c2:c4:43:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:49 2023 by rpki-client on console.sobornost.net