Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/YCzPbovjTxtLj_QpgSzvYD1XG1Y.roa
File: YCzPbovjTxtLj_QpgSzvYD1XG1Y.roa (raw, json)
Hash identifier: 4WWgr3DM1JtApfVsuUugiYc7m8Prq64zSTnFAARJFzo=
Subject key identifier: 60:2C:CF:6E:8B:E3:4F:1B:4B:8F:F4:29:81:2C:EF:60:3D:57:1B:56
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01881674BD39762B6E14238F743B08D27FDE
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/YCzPbovjTxtLj_QpgSzvYD1XG1Y.roa
Signing time: Sat 13 May 2023 18:52:09 +0000
ROA not before: Sat 13 May 2023 18:52:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49666
IP address blocks: 2.188.0.0/24 maxlen: 24
2.188.1.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.22.0/24 maxlen: 24
2.188.23.0/24 maxlen: 24
2.188.30.0/24 maxlen: 24
2.188.28.0/24 maxlen: 24
2.176.0.0/17 maxlen: 17
78.39.155.0/24 maxlen: 24
78.38.0.0/16 maxlen: 24
217.218.67.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.176.128.0/17 maxlen: 17
2.188.76.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
78.38.245.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
2.189.3.0/24 maxlen: 24
2.189.1.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.179.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.181.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.184.0/24 maxlen: 24
217.219.0.0/16 maxlen: 24
2.188.187.0/24 maxlen: 24
2.177.0.0/16 maxlen: 16
2.189.72.0/24 maxlen: 24
80.191.0.0/16 maxlen: 24
217.218.0.0/16 maxlen: 24
2.189.44.0/24 maxlen: 24
2.189.63.0/24 maxlen: 24
2001:4188:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 May 2023 12:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:16:74:bd:39:76:2b:6e:14:23:8f:74:3b:08:d2:7f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 13 18:52:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=602ccf6e8be34f1b4b8ff429812cef603d571b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:af:04:69:38:f4:e2:df:f4:28:c0:4d:31:
7c:47:b1:5d:91:4d:61:d4:ff:25:cf:ae:27:31:1f:
65:f8:cd:0a:a0:07:5c:17:3a:c2:e4:fd:c6:6b:ab:
09:fd:bf:b7:40:dc:84:cc:4c:c0:09:04:87:32:e5:
0d:ed:5a:09:75:45:02:66:9e:e7:a7:7e:1d:f5:e3:
9c:a1:58:91:d0:87:ba:5a:f1:1d:2a:c1:dc:c6:47:
46:6c:06:e3:f8:5a:99:54:c9:62:59:6b:a5:80:66:
e6:59:c1:71:9c:20:e2:d0:bf:61:4e:c0:aa:ba:02:
9f:c5:6e:fc:dc:c2:e7:36:1c:75:a5:5d:9b:02:8f:
77:ba:28:aa:14:74:70:97:c7:7b:f4:99:d9:22:75:
1d:34:b6:fb:63:d7:22:ad:54:3e:93:02:9c:8f:af:
f6:49:eb:02:25:3e:77:3d:2c:df:00:2d:9a:a8:b1:
4a:16:10:59:d8:c1:c4:50:7a:60:83:eb:f0:f7:df:
ec:1a:9d:73:4d:72:30:77:f2:9b:e7:85:0b:79:58:
e2:d2:2c:d0:73:0d:26:21:72:6a:f5:08:f4:9b:87:
2a:1b:0d:3c:01:ec:bb:28:1d:c1:0d:59:36:31:c0:
c5:2e:85:76:02:b7:79:2a:12:38:f4:c9:18:7e:95:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:CF:6E:8B:E3:4F:1B:4B:8F:F4:29:81:2C:EF:60:3D:57:1B:56
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/YCzPbovjTxtLj_QpgSzvYD1XG1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/15
2.185.0.0/16
2.188.0.0/15
78.38.0.0/15
80.191.0.0/16
195.146.63.0/24
217.218.0.0/15
IPv6:
2001:4188:2::/48
Signature Algorithm: sha256WithRSAEncryption
75:1a:7c:e5:77:1c:ad:3a:be:d4:34:43:06:cc:d0:a9:fd:f8:
58:20:95:30:24:9a:f7:ee:9d:dc:0e:a2:6d:39:24:74:ae:e5:
60:83:ac:26:2d:5d:50:2f:17:cd:6e:92:f9:54:a5:af:0d:83:
1e:ec:c8:db:b0:17:33:81:7c:1c:2a:b1:70:92:b7:42:fd:1e:
4e:e2:54:f5:52:6d:f8:04:3e:57:de:1b:46:69:04:7b:18:87:
c8:db:82:30:37:9b:7d:df:a8:47:a4:dc:93:b3:39:f0:fa:5e:
02:01:a3:20:c2:05:21:c9:7b:bd:bf:dd:4f:7e:fe:4c:f5:93:
ad:a3:68:98:d3:2b:09:60:cd:df:4a:ec:65:8e:74:1a:55:af:
4e:bf:e4:73:98:91:d2:f0:15:e8:80:21:1d:53:af:ef:47:9d:
40:91:bc:4d:40:16:80:83:a8:44:5e:7c:4e:2f:34:e2:cb:dc:
d8:b7:4f:09:79:06:67:17:5a:b5:42:0b:9a:78:83:ec:4a:d5:
9c:1f:f9:79:23:3f:24:17:88:33:27:9d:a2:44:ec:58:be:4a:
64:f0:46:10:a9:aa:fa:c1:f5:63:3e:d1:00:41:5d:30:27:2a:
72:d3:85:78:a2:b8:01:ba:57:36:b0:c3:f5:dd:a2:71:7d:1b:
b6:81:95:c6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYgWdL05dituFCOPdDsI0n/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjMwNTEzMTg1MjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDJjY2Y2ZThiZTM0ZjFiNGI4ZmY0Mjk4MTJjZWY2MDNkNTcxYjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZGvBGk49OLf9CjATTF8R7FdkU1h
1P8lz64nMR9l+M0KoAdcFzrC5P3Ga6sJ/b+3QNyEzEzACQSHMuUN7VoJdUUCZp7n
p34d9eOcoViR0Ie6WvEdKsHcxkdGbAbj+FqZVMliWWulgGbmWcFxnCDi0L9hTsCq
ugKfxW783MLnNhx1pV2bAo93uiiqFHRwl8d79JnZInUdNLb7Y9cirVQ+kwKcj6/2
SesCJT53PSzfAC2aqLFKFhBZ2MHEUHpgg+vw99/sGp1zTXIwd/Kb54ULeVji0izQ
cw0mIXJq9Qj0m4cqGw08Aey7KB3BDVk2McDFLoV2Ard5KhI49MkYfpVoHwIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFGAsz26L408bS4/0KYEs72A9VxtWMB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEvWUN6UGJvdmpUeHRMal9RcGdTenZZRDFYRzFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAqBAIAATAkAwMBArADAwAC
uQMDAQK8AwMBTiYDAwBQvwMEAMOSPwMDAdnaMA8EAgACMAkDBwAgAUGIAAIwDQYJ
KoZIhvcNAQELBQADggEBAHUafOV3HK06vtQ0QwbM0Kn9+FgglTAkmvfundwOom05
JHSu5WCDrCYtXVAvF81ukvlUpa8Ngx7syNuwFzOBfBwqsXCSt0L9Hk7iVPVSbfgE
PlfeG0ZpBHsYh8jbgjA3m33fqEek3JOzOfD6XgIBoyDCBSHJe72/3U9+/kz1k62j
aJjTKwlgzd9K7GWOdBpVr06/5HOYkdLwFeiAIR1Tr+9HnUCRvE1AFoCDqERefE4v
NOLL3Ni3Twl5BmcXWrVCC5p4g+xK1Zwf+XkjPyQXiDMnnaJE7Fi+SmTwRhCpqvrB
9WM+0QBBXTAnKnLThXiiuAG6Vzaww/XdonF9G7aBlcY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org