Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/ycGOONFfroN2GSEKnDIJGFdp-6Y.roa
File: ycGOONFfroN2GSEKnDIJGFdp-6Y.roa (raw, json)
Hash identifier: rhjPRPq8yFmijYSPW7uMIx4CzO0aLNxKTvqBPat1HQ8=
Subject key identifier: C9:C1:8E:38:D1:5F:AE:83:76:19:21:0A:9C:32:09:18:57:69:FB:A6
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 018C47D4FCBD014180D29403DE09BCCA86F1
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/ycGOONFfroN2GSEKnDIJGFdp-6Y.roa
Signing time: Fri 08 Dec 2023 05:09:49 +0000
ROA not before: Fri 08 Dec 2023 05:09:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58026
IP address blocks: 65.111.0.0/19 maxlen: 19
104.167.16.0/20 maxlen: 20
104.207.32.0/19 maxlen: 19
45.78.80.0/20 maxlen: 20
45.3.32.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:47:d4:fc:bd:01:41:80:d2:94:03:de:09:bc:ca:86:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Dec 8 05:09:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9c18e38d15fae837619210a9c3209185769fba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:91:ff:ef:42:e2:ff:aa:d8:d4:37:d9:45:
0d:1c:c6:c0:ad:fc:b9:d2:ba:ca:e3:dc:ab:4f:56:
22:03:82:bb:3b:85:f1:a2:26:0e:e9:a9:a9:fa:e6:
a6:d3:dc:d0:37:2e:c7:b7:be:33:f0:f8:3c:f9:2c:
62:3f:08:34:72:a3:28:de:65:9f:7f:f0:56:c0:d4:
19:0b:1e:b1:4a:13:85:67:9f:70:12:18:32:78:a8:
c3:77:02:52:38:0e:39:2c:33:bb:46:bd:23:71:96:
3c:ea:0c:4c:a1:15:ec:8f:6e:b0:80:32:84:ac:ed:
3c:c7:b6:94:b4:e7:fe:2e:47:ce:9c:68:04:6d:50:
1d:f4:95:9f:fd:61:c1:10:f9:3a:c8:c2:24:74:37:
3f:ff:44:cd:a5:96:ef:63:99:e8:f6:f8:b0:63:d9:
b9:ae:26:5f:b2:db:50:cd:b4:14:44:cc:d3:f7:18:
e3:46:07:cc:8c:b0:a6:4a:05:8a:b1:e7:27:4f:8f:
23:68:7d:a9:7b:c5:48:d0:63:d1:4f:eb:b9:97:0c:
a1:76:5e:6b:4f:e2:b2:98:3e:07:77:d3:38:3f:45:
34:ed:0e:f5:5d:6f:d5:80:b3:75:3c:2a:13:20:5b:
8e:8c:9e:69:14:29:69:c0:23:98:3b:ec:32:34:89:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C1:8E:38:D1:5F:AE:83:76:19:21:0A:9C:32:09:18:57:69:FB:A6
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/ycGOONFfroN2GSEKnDIJGFdp-6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0/19
45.78.80.0/20
65.111.0.0/19
104.167.16.0/20
104.207.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:8e:59:6e:01:70:92:29:dc:9a:4e:0a:01:d2:e4:5e:b6:eb:
12:eb:22:02:80:26:5d:69:e1:a5:b1:ab:3a:08:35:39:63:e6:
11:15:d0:c2:d4:44:2f:47:5d:97:28:39:7b:4c:09:ce:92:bb:
dc:98:0d:e0:b7:32:60:64:20:35:ef:fd:ed:62:d3:5e:b0:63:
cc:80:6e:86:75:41:05:9c:8c:dd:f7:00:9c:71:17:db:45:ee:
8a:b3:9e:3a:8a:31:19:88:49:15:a5:75:1f:92:71:84:80:97:
48:65:45:99:93:84:d6:2d:c2:37:60:5b:62:87:a8:45:a3:ec:
16:7d:25:3a:c0:dd:cd:c6:ec:7f:81:72:9c:29:da:f4:5f:bb:
dc:5a:31:fc:a7:f5:6c:69:b2:2c:92:86:15:ed:90:a5:ac:57:
87:04:df:3d:26:7c:4f:92:c1:bf:9e:21:71:b1:15:a0:b8:0c:
8d:cd:d8:b4:c4:55:94:94:3b:a2:79:96:a1:39:2b:eb:32:fe:
19:88:82:f9:e0:a1:57:d7:40:48:9f:08:b7:de:06:7b:32:84:
b0:82:9f:e7:f0:1b:00:a7:22:4f:27:08:47:ca:29:58:a5:04:
0b:f9:d5:dc:ce:09:ee:3d:11:7f:e0:0b:f6:4e:69:88:be:e8:
f9:00:8a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:52 2023 by rpki-client on console.sobornost.net