Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yWFcuHxzz_RPF08ZgIbgtSy7d2g.roa
File: yWFcuHxzz_RPF08ZgIbgtSy7d2g.roa (raw, json)
Hash identifier: gDUqT60s9tFr2Gh7EW4OIH8/KqLfZ+OyZi9jQyneCWE=
Subject key identifier: C9:61:5C:B8:7C:73:CF:F4:4F:17:4F:19:80:86:E0:B5:2C:BB:77:68
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E0DBDB9347109A57997FFFAFA9688B7BF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yWFcuHxzz_RPF08ZgIbgtSy7d2g.roa
Signing time: Tue 05 Mar 2024 08:32:01 +0000
ROA not before: Tue 05 Mar 2024 08:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 37.139.130.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
85.217.144.0/23 maxlen: 24
193.149.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 13:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0d:bd:b9:34:71:09:a5:79:97:ff:fa:fa:96:88:b7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 5 08:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9615cb87c73cff44f174f198086e0b52cbb7768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9b:f1:b2:6c:e2:32:6f:19:75:da:b4:0f:59:
52:3a:6a:76:8b:70:03:1b:1e:97:42:3a:68:e2:ad:
dd:df:94:1f:2d:13:66:68:8d:1e:8b:5e:aa:b9:40:
12:f6:b2:23:a9:bc:db:a4:a4:9b:f5:51:9b:fa:29:
43:8b:15:ed:7e:e8:7f:29:0f:53:a4:73:58:20:7b:
a6:54:66:54:7d:ba:eb:1e:60:7f:e8:39:6d:49:82:
37:61:91:ed:1c:3d:ba:ac:0f:94:70:9e:1b:b6:1e:
cf:b1:40:31:15:95:c1:a2:f8:5c:f7:b4:65:b2:28:
6c:eb:b0:fe:32:d3:90:a6:9e:40:55:33:33:18:02:
0c:08:29:05:6a:6f:d2:b5:90:00:ed:6b:37:83:52:
4d:25:c5:0a:88:db:ac:78:d8:b1:f9:57:99:64:89:
a0:6d:ab:4f:63:89:7d:32:8b:95:49:db:49:46:49:
a1:85:17:c9:4b:ba:dc:24:ae:af:31:49:4d:83:a8:
d9:f6:a7:0b:3c:25:53:43:1d:e0:05:f7:6e:7f:eb:
52:14:1d:a8:f4:dc:fd:d1:23:0a:92:1f:d0:46:42:
0f:a3:6c:4b:cd:43:ae:06:6b:ab:1c:e4:4c:1c:2a:
16:0e:dc:9d:30:30:1a:8c:a7:5c:6b:75:91:4c:7d:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:61:5C:B8:7C:73:CF:F4:4F:17:4F:19:80:86:E0:B5:2C:BB:77:68
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yWFcuHxzz_RPF08ZgIbgtSy7d2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
79.110.61.0/24
85.217.144.0/23
193.149.28.0/22
Signature Algorithm: sha256WithRSAEncryption
19:b4:d6:6d:dd:ae:9e:68:08:56:0d:2b:a1:26:a5:34:60:5b:
cf:ba:3f:6f:e3:e9:66:2c:ee:2a:bd:cf:c3:36:93:dd:5d:19:
ff:da:ba:9a:44:ca:db:20:57:4b:c4:45:d9:a6:88:46:4e:dd:
8a:26:6a:a5:12:2a:bc:a9:7f:47:de:b7:79:1f:8d:a4:c5:9c:
9a:85:25:0f:ec:92:cd:70:a5:01:08:5a:99:c6:de:56:ac:a2:
c6:e2:fd:76:2e:72:34:43:13:f2:01:e1:7e:db:4b:ae:cb:cc:
c9:7f:bb:d5:1d:19:92:6d:ba:ba:86:37:21:3d:65:d3:3b:ec:
5d:0f:90:e9:28:c3:46:c4:4d:95:63:c7:72:40:09:4c:8a:97:
62:30:72:3e:cb:b7:61:84:4a:29:3e:a8:d6:e8:18:c8:26:58:
92:c4:3a:6d:78:ba:e3:ab:02:22:94:58:bd:bc:be:0c:ed:61:
21:ec:d2:f5:bb:71:a2:d6:dd:01:e0:b0:93:f2:75:8d:d3:50:
12:e8:01:7f:50:9d:eb:30:f4:12:95:7b:f6:f4:05:87:a6:ec:
83:fa:7c:d9:07:20:0b:4a:1e:df:98:75:6b:33:60:b5:f3:62:
99:63:12:19:ff:66:e9:b1:74:f9:94:f1:7d:82:3b:69:6a:15:
69:b9:29:30
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY4Nvbk0cQmleZf/+vqWiLe/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMzA1MDgzMjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTYxNWNiODdjNzNjZmY0NGYxNzRmMTk4MDg2ZTBiNTJjYmI3NzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZvxsmziMm8Zddq0D1lSOmp2i3AD
Gx6XQjpo4q3d35QfLRNmaI0ei16quUAS9rIjqbzbpKSb9VGb+ilDixXtfuh/KQ9T
pHNYIHumVGZUfbrrHmB/6DltSYI3YZHtHD26rA+UcJ4bth7PsUAxFZXBovhc97Rl
sihs67D+MtOQpp5AVTMzGAIMCCkFam/StZAA7Ws3g1JNJcUKiNuseNix+VeZZImg
batPY4l9MouVSdtJRkmhhRfJS7rcJK6vMUlNg6jZ9qcLPCVTQx3gBfduf+tSFB2o
9Nz90SMKkh/QRkIPo2xLzUOuBmurHORMHCoWDtydMDAajKdca3WRTH02zQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMlhXLh8c8/0TxdPGYCG4LUsu3doMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEveVdGY3VIeHp6X1JQRjA4WmdJYmd0U3k3ZDJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJYuCAwQA
T249AwQBVdmQAwQCwZUcMA0GCSqGSIb3DQEBCwUAA4IBAQAZtNZt3a6eaAhWDSuh
JqU0YFvPuj9v4+lmLO4qvc/DNpPdXRn/2rqaRMrbIFdLxEXZpohGTt2KJmqlEiq8
qX9H3rd5H42kxZyahSUP7JLNcKUBCFqZxt5WrKLG4v12LnI0QxPyAeF+20uuy8zJ
f7vVHRmSbbq6hjchPWXTO+xdD5DpKMNGxE2VY8dyQAlMipdiMHI+y7dhhEopPqjW
6BjIJliSxDpteLrjqwIilFi9vL4M7WEh7NL1u3Gi1t0B4LCT8nWN01AS6AF/UJ3r
MPQSlXv29AWHpuyD+nzZByALSh7fmHVrM2C182KZYxIZ/2bpsXT5lPF9gjtpahVp
uSkw
-----END CERTIFICATE-----
Generated at Tue Mar 12 17:31:49 2024 by rpki-client on console-ams.rpki-client.org