Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/YQ4VlNn2y1YhToK5-JmV9IYPNn0.roa
File: YQ4VlNn2y1YhToK5-JmV9IYPNn0.roa (raw, json)
Hash identifier: vu8zoa8J6N6oSHNlpJQjkHBa0MtiXBfpmN0+aOetFnE=
Subject key identifier: 61:0E:15:94:D9:F6:CB:56:21:4E:82:B9:F8:99:95:F4:86:0F:36:7D
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018FA618EE0146EA7A5BDA23A946B617CEE8
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/YQ4VlNn2y1YhToK5-JmV9IYPNn0.roa
Signing time: Thu 23 May 2024 15:36:42 +0000
ROA not before: Thu 23 May 2024 15:36:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:b440::/29 maxlen: 29
2a06:cac0::/29 maxlen: 29
2a0a:e2c0::/29 maxlen: 29
2a0f:d480::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:f140::/29 maxlen: 29
2a11:f240::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:7740::/29 maxlen: 29
2a12:8ec0::/29 maxlen: 29
2a12:ccc0::/29 maxlen: 29
2a12:e240::/29 maxlen: 29
2a12:f0c0::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 25 May 2024 15:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a6:18:ee:01:46:ea:7a:5b:da:23:a9:46:b6:17:ce:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: May 23 15:36:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=610e1594d9f6cb56214e82b9f89995f4860f367d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:95:77:89:7a:60:fd:b4:77:2b:b5:8f:c9:
ee:65:50:79:75:4b:b1:51:f2:0e:2c:51:56:47:75:
59:18:de:7d:1f:27:95:3d:cc:37:19:d5:b0:36:31:
9c:e3:6a:e8:2e:4b:3f:fb:ef:98:db:73:3f:a3:02:
ee:74:90:ee:2c:ee:00:34:10:7e:3f:e6:ce:94:cb:
87:32:64:e2:8d:1b:70:24:2f:5d:56:98:ca:a2:96:
20:b5:ac:ce:de:d8:70:bd:03:2d:3a:7b:86:61:5c:
a3:e7:b0:59:4a:a6:c9:d0:56:52:3c:76:56:4d:a2:
dd:09:e1:ff:79:d3:2c:d9:92:7a:7e:c9:86:44:55:
f1:d7:b8:8f:a8:81:53:2e:62:aa:4e:6b:4e:6f:5d:
4f:0b:44:5e:2f:9c:b5:23:df:c7:62:ee:e2:79:cc:
d1:96:02:56:80:34:a2:08:0f:73:16:fb:89:49:b7:
b0:97:bc:27:ce:ce:bc:9b:c2:10:f9:84:d2:ba:9d:
ec:a6:23:aa:fc:f3:56:de:00:3d:4d:34:a4:06:35:
30:ac:b3:08:99:04:15:be:48:13:2c:c6:32:da:2e:
11:56:fe:75:c9:47:34:96:9c:1b:31:98:ca:2e:ee:
71:8b:cb:79:32:37:d8:8a:3b:48:9c:5f:01:a0:2a:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0E:15:94:D9:F6:CB:56:21:4E:82:B9:F8:99:95:F4:86:0F:36:7D
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/YQ4VlNn2y1YhToK5-JmV9IYPNn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:b440::/29
2a06:cac0::/29
2a0a:e2c0::/29
2a0f:d480::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:7240::/29
2a11:9600::/29
2a11:f140::/29
2a11:f240::/29
2a12:440::/29
2a12:6640::/29
2a12:6740::/29
2a12:6f40::/29
2a12:7740::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:e240::/29
2a12:f0c0::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
Signature Algorithm: sha256WithRSAEncryption
90:16:9b:70:88:e7:0a:a1:82:5f:a5:41:13:36:3a:b0:f5:d3:
e2:f0:b0:a2:f9:ef:b6:cd:80:21:2a:96:dc:71:dc:9e:5a:1e:
dc:bb:83:fe:ab:88:83:7d:0d:d8:70:37:78:0b:39:7d:b3:cd:
1a:43:2b:34:4a:83:a9:a2:f7:23:d9:e4:01:87:8b:84:7e:64:
45:01:62:b0:49:21:27:2a:22:8c:da:7e:a0:15:f2:32:d8:83:
04:cf:96:69:66:3f:42:e9:3b:b4:14:dc:8f:4f:18:b9:64:2d:
07:74:3e:ca:9e:ea:75:99:fa:e4:7a:11:0a:0d:c0:6b:d7:2f:
36:f5:7b:cd:9e:a5:3d:d7:c5:36:1c:4a:08:d2:02:8e:0c:bf:
ac:db:38:c4:a6:1e:aa:35:74:16:da:17:04:1b:f5:2a:b1:80:
fb:e6:15:5e:be:c4:0e:11:34:d3:61:a4:66:00:87:62:1e:b5:
e0:ba:45:66:25:e6:b0:d0:5c:69:78:26:99:3a:fd:15:82:7d:
40:88:01:17:74:3b:f3:e9:9b:a5:64:d1:1e:2e:03:12:8b:06:
a5:db:09:12:77:50:67:58:51:9f:c3:72:a4:22:7c:a9:a2:bc:
57:0a:8f:66:96:f5:17:07:9d:7b:1a:9f:f8:d6:2c:8a:b8:6c:
74:c2:2f:5f
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISAY+mGO4BRup6W9ojqUa2F87oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjQwNTIzMTUzNjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTBlMTU5NGQ5ZjZjYjU2MjE0ZTgyYjlmODk5OTVmNDg2MGYzNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1WVd4l6YP20dyu1j8nuZVB5dUux
UfIOLFFWR3VZGN59HyeVPcw3GdWwNjGc42roLks/+++Y23M/owLudJDuLO4ANBB+
P+bOlMuHMmTijRtwJC9dVpjKopYgtazO3thwvQMtOnuGYVyj57BZSqbJ0FZSPHZW
TaLdCeH/edMs2ZJ6fsmGRFXx17iPqIFTLmKqTmtOb11PC0ReL5y1I9/HYu7ieczR
lgJWgDSiCA9zFvuJSbewl7wnzs68m8IQ+YTSup3spiOq/PNW3gA9TTSkBjUwrLMI
mQQVvkgTLMYy2i4RVv51yUc0lpwbMZjKLu5xi8t5MjfYijtInF8BoCpXFwIDAQAB
o4ICxDCCAsAwHQYDVR0OBBYEFGEOFZTZ9stWIU6CufiZlfSGDzZ9MB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvWVE0VmxObjJ5MVloVG9LNS1KbVY5SVlQTm4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHZBggrBgEFBQcBBwEB/wSByTCBxjASBAIAATAMAwQCuagc
AwQCucmIMIGvBAIAAjCBqAMFAyoGtEADBQMqBsrAAwUDKgriwAMFAyoP1IADBQMq
ES9AAwUDKhE7QAMFAyoRckADBQMqEZYAAwUDKhHxQAMFAyoR8kADBQMqEgRAAwUD
KhJmQAMFAyoSZ0ADBQMqEm9AAwUDKhJ3QAMFAyoSjsADBQMqEszAAwUDKhLiQAMF
AyoS8MADBQMqFADAAwUDKhQBQAMFAyoUAcADBQMqFAgAAwUDKhQPQDANBgkqhkiG
9w0BAQsFAAOCAQEAkBabcIjnCqGCX6VBEzY6sPXT4vCwovnvts2AISqW3HHcnloe
3LuD/quIg30N2HA3eAs5fbPNGkMrNEqDqaL3I9nkAYeLhH5kRQFisEkhJyoijNp+
oBXyMtiDBM+WaWY/Quk7tBTcj08YuWQtB3Q+yp7qdZn65HoRCg3Aa9cvNvV7zZ6l
PdfFNhxKCNICjgy/rNs4xKYeqjV0FtoXBBv1KrGA++YVXr7EDhE002GkZgCHYh61
4LpFZiXmsNBcaXgmmTr9FYJ9QIgBF3Q78+mbpWTRHi4DEosGpdsJEndQZ1hRn8Ny
pCJ8qaK8VwqPZpb1Fwedexqf+NYsirhsdMIvXw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:38 2024 by rpki-client on console-fra.rpki-client.org