Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ygZVEOEFTAqngiH92LuCnHgiL0Y.roa
File: ygZVEOEFTAqngiH92LuCnHgiL0Y.roa (raw, json)
Hash identifier: kH13QQLpFnJSxglDRDVZ0GBqEgVfnCrqi+Qw9urxHeE=
Subject key identifier: CA:06:55:10:E1:05:4C:0A:A7:82:21:FD:D8:BB:82:9C:78:22:2F:46
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 0193BAC7E3901DD7439D6AA2C1D85C99F2FC
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ygZVEOEFTAqngiH92LuCnHgiL0Y.roa
Signing time: Thu 12 Dec 2024 12:11:22 +0000
ROA not before: Thu 12 Dec 2024 12:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51747
IP address blocks: 5.133.192.0/19 maxlen: 20
45.142.64.0/22 maxlen: 24
45.146.48.0/22 maxlen: 24
45.150.72.0/22 maxlen: 24
80.248.224.0/20 maxlen: 20
151.248.0.0/21 maxlen: 21
151.252.24.0/21 maxlen: 21
176.74.192.0/21 maxlen: 21
185.12.148.0/22 maxlen: 22
185.12.248.0/22 maxlen: 22
185.159.184.0/22 maxlen: 24
185.159.192.0/22 maxlen: 24
193.19.80.0/23 maxlen: 24
193.247.74.0/23 maxlen: 24
193.247.126.0/23 maxlen: 24
195.88.110.0/23 maxlen: 24
195.95.184.0/24 maxlen: 24
195.189.112.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 09:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:c7:e3:90:1d:d7:43:9d:6a:a2:c1:d8:5c:99:f2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Dec 12 12:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca065510e1054c0aa78221fdd8bb829c78222f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:c4:76:2a:70:86:90:1a:1b:7b:bc:29:a5:
7d:17:40:dd:b1:b6:4d:88:f1:dd:eb:dd:a9:de:97:
be:0f:1b:37:3e:e5:11:bb:50:c1:13:6d:e4:ad:d6:
7e:32:33:bf:9f:1c:a5:3b:6d:b2:03:1f:60:3e:16:
19:b7:e9:e6:c2:59:47:2f:13:5f:f5:b7:70:6e:82:
67:32:c8:e0:96:09:36:42:6a:2a:a0:bb:11:c7:aa:
fb:61:2f:15:0e:5d:05:be:1b:4d:73:4e:86:ce:c4:
45:91:e1:a6:4d:ce:e8:9a:4f:d7:b6:d6:ea:70:ea:
af:9c:30:73:17:a8:8c:5a:04:5e:6c:0e:b5:90:a2:
c1:f0:6c:bf:45:89:d0:07:34:cd:7e:92:3b:41:52:
20:52:78:b2:61:9f:50:9a:ef:40:55:d3:ea:08:0e:
10:c9:8e:ad:66:d0:a9:16:05:de:34:46:3a:01:fe:
eb:91:ce:72:d1:ea:bc:e4:70:43:74:a9:08:11:ef:
66:84:2e:4a:e4:43:4e:78:3e:8e:4f:95:54:dd:3e:
60:df:7a:cc:47:ea:cd:6b:1a:bf:a0:0b:6f:cc:ec:
8f:d8:5a:98:87:8e:cc:cd:3f:d6:86:82:d8:83:3f:
be:0e:be:1c:ae:0c:49:46:5e:7b:20:80:6d:58:3c:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:06:55:10:E1:05:4C:0A:A7:82:21:FD:D8:BB:82:9C:78:22:2F:46
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ygZVEOEFTAqngiH92LuCnHgiL0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.192.0/19
45.142.64.0/22
45.146.48.0/22
45.150.72.0/22
80.248.224.0/20
151.248.0.0/21
151.252.24.0/21
176.74.192.0/21
185.12.148.0/22
185.12.248.0/22
185.159.184.0/22
185.159.192.0/22
193.19.80.0/23
193.247.74.0/23
193.247.126.0/23
195.88.110.0/23
195.95.184.0/24
195.189.112.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:f8:80:c0:43:be:e3:f9:11:68:9e:50:10:35:b1:3a:59:d7:
9b:5f:8f:10:c7:76:9a:74:9e:53:fc:cd:93:68:26:98:3f:4f:
1f:46:94:4b:57:2f:ba:2e:f0:2e:e8:61:de:d0:c3:6f:53:c8:
33:db:17:04:74:58:ca:da:89:54:76:93:27:c7:cf:ad:13:05:
6c:8d:8d:3e:31:28:f0:63:ee:cb:9f:fe:df:b3:99:58:1e:81:
ab:d1:f1:f6:f0:8b:a4:ee:1f:00:e6:1d:ff:1c:ab:cd:6f:d9:
ee:e0:01:74:45:9b:bd:66:9d:9a:ff:92:42:bb:50:9b:2f:ad:
87:60:90:1a:e6:03:d4:b6:34:1b:b0:2a:47:2a:e9:6d:45:f6:
98:b3:1e:c0:50:0e:36:dd:51:30:ce:69:a5:3d:04:f8:72:05:
5a:7f:48:42:7c:8f:f8:c3:d0:7b:f6:a8:ee:97:1c:4f:4e:9f:
b0:48:a1:63:21:7c:63:37:1e:86:42:4d:a6:53:6f:08:19:fc:
73:3e:53:28:84:fd:97:9f:78:3c:55:df:da:e0:db:d9:34:92:
28:34:1f:e7:00:e4:bc:2e:bb:66:53:22:ea:70:44:b2:0b:75:
29:c0:77:02:56:b9:46:ca:43:a3:0e:e8:86:21:90:71:49:0c:
a8:d2:d2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:00 2025 by rpki-client