Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/YH9-NTLzvMEE6uB0YwkZMbE1I_o.roa
File: YH9-NTLzvMEE6uB0YwkZMbE1I_o.roa (raw, json)
Hash identifier: wPXVZICLVVRbF6OZxglY6EDm7fa95OIDAQuc5L3J2ys=
Subject key identifier: 60:7F:7E:35:32:F3:BC:C1:04:EA:E0:74:63:09:19:31:B1:35:23:FA
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 018572311C2703F3CF13834D96445228DDA1
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/YH9-NTLzvMEE6uB0YwkZMbE1I_o.roa
Signing time: Mon 02 Jan 2023 11:14:59 +0000
ROA not before: Mon 02 Jan 2023 11:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 213.148.64.0/24 maxlen: 24
213.148.71.0/24 maxlen: 24
213.148.68.0/24 maxlen: 24
213.148.69.0/24 maxlen: 24
213.148.70.0/24 maxlen: 24
213.148.65.0/24 maxlen: 24
213.148.66.0/24 maxlen: 24
213.148.67.0/24 maxlen: 24
213.148.75.0/24 maxlen: 24
213.148.76.0/24 maxlen: 24
213.148.77.0/24 maxlen: 24
213.148.72.0/24 maxlen: 24
213.148.73.0/24 maxlen: 24
213.148.74.0/24 maxlen: 24
213.148.78.0/24 maxlen: 24
213.148.85.0/24 maxlen: 24
213.148.82.0/24 maxlen: 24
213.148.83.0/24 maxlen: 24
213.148.84.0/24 maxlen: 24
213.148.79.0/24 maxlen: 24
213.148.80.0/24 maxlen: 24
213.148.81.0/24 maxlen: 24
213.148.89.0/24 maxlen: 24
213.148.90.0/24 maxlen: 24
213.148.91.0/24 maxlen: 24
213.148.86.0/24 maxlen: 24
213.148.87.0/24 maxlen: 24
213.148.88.0/24 maxlen: 24
213.148.92.0/24 maxlen: 24
213.148.93.0/24 maxlen: 24
213.148.94.0/24 maxlen: 24
213.148.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:1c:27:03:f3:cf:13:83:4d:96:44:52:28:dd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Jan 2 11:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=607f7e3532f3bcc104eae07463091931b13523fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e7:df:60:88:e2:af:a2:e6:2e:68:e2:a6:ea:
c8:50:6f:d6:02:43:4e:de:16:91:f9:82:b5:31:3c:
59:0e:6e:e6:35:66:f5:a1:72:ea:18:f2:db:d7:e9:
42:b1:a5:b7:8f:84:d3:32:e9:4d:bb:74:b2:38:4f:
24:07:74:ed:6d:a9:ce:25:03:87:6c:51:8c:37:f0:
e9:0e:73:6c:31:4a:bf:90:45:ca:09:3d:67:1c:b0:
1e:4b:d6:d9:eb:90:4f:52:ce:8c:b6:8b:17:11:75:
54:fe:89:a1:ec:65:88:37:69:ca:d2:f9:46:99:dc:
3c:ff:64:52:1a:ee:68:bf:c4:0c:53:92:d2:9b:ef:
4e:1d:b1:d1:64:93:fd:9c:2b:c6:04:0a:5f:8a:7c:
80:26:6f:b5:96:18:28:85:b9:ed:e6:27:85:f8:40:
09:64:a6:12:8d:f2:d4:f7:49:16:a8:ef:72:e9:84:
d8:5a:e8:65:ee:fb:b1:03:a5:20:1d:35:26:9c:67:
21:73:cc:23:08:fe:e8:50:3e:66:12:27:89:c7:0f:
4a:e0:1a:45:ec:c6:b5:fd:34:b5:7d:02:47:11:69:
b4:eb:1c:4d:c0:72:d3:2d:ad:81:c2:61:3a:18:a6:
5a:70:19:55:e5:e1:ed:88:77:60:eb:d7:d8:7a:54:
fd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7F:7E:35:32:F3:BC:C1:04:EA:E0:74:63:09:19:31:B1:35:23:FA
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/YH9-NTLzvMEE6uB0YwkZMbE1I_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.148.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:c0:5f:27:21:7c:0a:b7:65:24:ce:27:91:c7:49:44:fb:18:
c5:0a:b4:f5:d9:e1:70:80:3d:53:24:f4:1b:b6:e6:21:b9:27:
55:f5:b7:e3:ab:79:a1:1b:59:2b:f2:4f:3e:c4:66:93:84:90:
f7:b6:36:87:3e:19:6e:10:fb:22:59:f4:85:45:1b:ca:c9:3e:
5f:d4:8d:fe:4b:2a:4f:f9:5f:4e:a8:d4:cc:ca:64:95:65:2b:
68:e6:b8:b8:d2:3c:ea:0f:c4:7e:3d:7a:e7:0a:ea:aa:07:84:
4d:74:09:82:7b:74:15:55:96:e5:62:79:20:e8:8f:4d:09:88:
78:83:2d:35:6a:d7:9e:a8:a5:72:4d:45:5e:81:14:a0:9f:70:
b8:62:f2:f3:ca:b9:ed:18:de:b4:1a:d3:06:76:ec:21:af:c6:
bf:12:ac:e1:77:b9:3a:ed:29:a1:0f:c3:bd:c7:c8:8f:69:32:
1a:30:53:8c:8d:09:3e:6a:88:b5:e7:d0:65:a8:7b:c6:b1:bd:
dc:75:ad:e2:9d:60:05:70:3e:6b:00:f7:b7:2c:23:65:08:cc:
25:23:bb:05:5f:c8:61:36:28:a9:7d:34:6e:4c:9d:09:83:68:
ac:27:de:ee:92:55:5f:19:45:ce:ae:dd:12:41:4e:21:a3:c4:
2d:be:4e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:31:00 2024 by rpki-client on console.sobornost.net