Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/yDoL9xgZC-Lo_T1-qNQn0LncXSw.roa
File: yDoL9xgZC-Lo_T1-qNQn0LncXSw.roa (raw, json)
Hash identifier: aQzC1hEGEcGhQcMI8bxUTVci+WzQU1ERYBRvLN99Xbk=
Subject key identifier: C8:3A:0B:F7:18:19:0B:E2:E8:FD:3D:7E:A8:D4:27:D0:B9:DC:5D:2C
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 0191BF67490B0A0DBF6D785BEE006A06ADB3
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/yDoL9xgZC-Lo_T1-qNQn0LncXSw.roa
Signing time: Wed 04 Sep 2024 23:38:22 +0000
ROA not before: Wed 04 Sep 2024 23:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64289
IP address blocks: 185.225.24.0/24 maxlen: 24
185.225.26.0/24 maxlen: 24
192.189.157.0/24 maxlen: 24
2a14:3f80:8::/45 maxlen: 45
2a14:3f80:10::/45 maxlen: 45
2a14:3f80:18::/45 maxlen: 45
2a14:3f80:20::/45 maxlen: 45
2a14:3f80:28::/45 maxlen: 45
2a14:3f80:60::/45 maxlen: 45
2a14:3f80:80::/45 maxlen: 45
2a14:3f80:88::/45 maxlen: 45
2a14:3f80:100::/45 maxlen: 45
2a14:3f80:108::/45 maxlen: 45
2a14:3f80:800::/38 maxlen: 38
2a14:3f80:c00::/38 maxlen: 38
2a14:3f80:1000::/38 maxlen: 38
2a14:3f80:1400::/38 maxlen: 38
2a14:3f80:1800::/38 maxlen: 38
2a14:3f80:2000::/38 maxlen: 38
2a14:3f80:2400::/38 maxlen: 38
2a14:3f80:2800::/38 maxlen: 38
2a14:3f80:3000::/38 maxlen: 38
2a14:3f80:3400::/38 maxlen: 38
2a14:3f80:3800::/38 maxlen: 38
2a14:3f80:3c00::/38 maxlen: 38
2a14:3f80:4000::/38 maxlen: 38
2a14:3f80:4400::/38 maxlen: 38
2a14:3f80:5000::/38 maxlen: 38
2a14:3f80:6000::/38 maxlen: 38
2a14:3f80:7000::/38 maxlen: 38
2a14:3f80:8800::/38 maxlen: 38
2a14:3f80:af38::/45 maxlen: 45
2a14:3f81:5800::/38 maxlen: 38
2a14:3f82:4000::/38 maxlen: 38
2a14:3f82:6000::/38 maxlen: 38
2a14:3f82:7000::/38 maxlen: 38
2a14:3f82:8800::/38 maxlen: 38
2a14:3f87:2800::/38 maxlen: 38
2a14:3f87:4800::/38 maxlen: 38
2a14:3f87:6800::/38 maxlen: 38
Validation: Failed, certificate revoked on Sun 22 Sep 2024 21:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bf:67:49:0b:0a:0d:bf:6d:78:5b:ee:00:6a:06:ad:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: Sep 4 23:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c83a0bf718190be2e8fd3d7ea8d427d0b9dc5d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:73:bd:69:4a:58:4a:d9:30:71:b0:02:7c:55:
4e:b9:6f:d6:58:d5:83:ef:3b:8e:61:92:28:03:e3:
7b:e5:3b:77:7e:b9:08:4b:01:49:4e:e7:f7:12:a3:
1c:0a:d6:da:a8:3b:0a:93:1b:7d:f9:fd:f1:bb:7e:
8d:23:42:d0:fb:f7:2a:a0:43:29:3c:5b:fb:53:eb:
14:d8:1f:bd:6b:a9:75:a0:d5:3f:7d:fd:e2:72:54:
c4:55:96:62:8c:7a:85:4b:67:c9:e2:05:af:3f:83:
7d:39:c6:2f:ca:b7:f6:9f:84:aa:54:65:0d:43:4b:
d9:3a:c2:bd:d1:0e:18:f9:8d:af:cf:7d:1f:ce:46:
5d:66:bf:db:7e:39:34:2c:fd:52:b7:56:3f:d8:df:
58:22:38:77:f7:4d:60:77:55:a7:60:3c:3d:33:15:
a9:67:e0:6f:4e:a3:27:a5:23:ae:60:fc:db:33:f4:
18:76:5c:97:77:0d:65:5a:b0:e9:e5:1a:07:95:81:
99:98:37:d0:86:79:6f:bb:03:c0:bf:88:04:15:3e:
f7:51:b4:de:9b:f2:a5:8c:c7:5d:94:ab:6a:d5:f5:
ed:d2:43:9b:a1:6c:b4:bf:cc:e1:22:1e:6f:73:9e:
56:1a:3a:2b:dc:62:18:35:8c:4e:94:ee:51:49:e1:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3A:0B:F7:18:19:0B:E2:E8:FD:3D:7E:A8:D4:27:D0:B9:DC:5D:2C
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/yDoL9xgZC-Lo_T1-qNQn0LncXSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.24.0/24
185.225.26.0/24
192.189.157.0/24
IPv6:
2a14:3f80:8::-2a14:3f80:2f:ffff:ffff:ffff:ffff:ffff
2a14:3f80:60::/45
2a14:3f80:80::/44
2a14:3f80:100::/44
2a14:3f80:800::-2a14:3f80:1bff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:2000::-2a14:3f80:2bff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:3000::-2a14:3f80:47ff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:5000::/38
2a14:3f80:6000::/38
2a14:3f80:7000::/38
2a14:3f80:8800::/38
2a14:3f80:af38::/45
2a14:3f81:5800::/38
2a14:3f82:4000::/38
2a14:3f82:6000::/38
2a14:3f82:7000::/38
2a14:3f82:8800::/38
2a14:3f87:2800::/38
2a14:3f87:4800::/38
2a14:3f87:6800::/38
Signature Algorithm: sha256WithRSAEncryption
29:b2:db:04:60:ea:60:c7:08:ef:7e:f1:8d:47:13:2b:a6:15:
46:8e:d0:2d:54:d9:ab:ca:47:40:dc:1b:ec:85:e7:f6:9b:ea:
b0:14:da:c7:fb:ba:33:f3:df:04:da:7c:2f:7d:ec:f3:da:5e:
d7:ac:c0:cd:ef:1c:bf:7e:c3:eb:7f:08:6d:0f:d5:d7:9f:e9:
80:6b:aa:39:4e:19:29:9a:58:eb:81:47:f2:2c:45:60:89:f6:
dd:cc:70:6e:48:3c:05:d7:b9:a1:a2:d6:a1:4d:e5:13:77:d4:
67:f0:96:77:d8:29:21:19:a7:98:26:aa:4d:28:c1:f2:de:03:
26:3e:30:20:96:92:7a:67:a1:99:32:ef:9a:70:f3:a8:19:c7:
a6:18:03:e5:8a:ca:dc:d2:1b:10:1b:3c:a1:ed:fc:04:d4:1e:
cf:54:84:5b:57:b1:ba:0d:64:d7:b8:48:0c:85:9d:3f:ee:50:
10:8d:ea:e1:81:75:e8:ab:d0:d5:2d:30:dd:b0:e2:cf:8c:2d:
4b:90:95:d9:05:1f:2a:99:a0:32:42:62:b5:f2:f1:91:65:aa:
f7:86:ac:2f:73:f7:92:2c:6d:6d:73:0d:2d:49:3a:35:33:eb:
6b:1b:d3:3f:3c:7a:8c:ce:76:5c:a7:8b:cf:8a:0b:94:ec:50:
6e:99:8e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 00:52:45 2024 by rpki-client on console-ams.rpki-client.org