Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yRFs3AIPSChyL5v0sWrAv_mQI3k.roa
File: yRFs3AIPSChyL5v0sWrAv_mQI3k.roa (raw, json)
Hash identifier: A1uQjIVxEC+OZrJY6PEbLASKDobD1RiTc5zjwdPafeE=
Subject key identifier: C9:11:6C:DC:02:0F:48:28:72:2F:9B:F4:B1:6A:C0:BF:F9:90:23:79
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194FEA87DFBDFA00D6D484CDFDD3CAA0FF5
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yRFs3AIPSChyL5v0sWrAv_mQI3k.roa
Signing time: Thu 13 Feb 2025 09:34:02 +0000
ROA not before: Thu 13 Feb 2025 09:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 91.194.55.0/24 maxlen: 24
93.190.12.0/24 maxlen: 24
93.190.13.0/24 maxlen: 24
109.236.48.0/24 maxlen: 24
109.236.49.0/24 maxlen: 24
109.236.50.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
160.20.108.0/24 maxlen: 24
160.20.109.0/24 maxlen: 24
185.85.188.0/24 maxlen: 24
185.86.4.0/24 maxlen: 24
185.86.6.0/24 maxlen: 24
185.86.7.0/24 maxlen: 24
185.86.12.0/24 maxlen: 24
185.86.14.0/24 maxlen: 24
185.86.15.0/24 maxlen: 24
185.86.152.0/24 maxlen: 24
185.86.155.0/24 maxlen: 24
185.87.120.0/24 maxlen: 24
185.88.172.0/24 maxlen: 24
185.88.173.0/24 maxlen: 24
185.88.174.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
185.98.62.0/24 maxlen: 24
185.98.63.0/24 maxlen: 24
185.141.33.0/24 maxlen: 24
185.141.34.0/24 maxlen: 24
185.141.35.0/24 maxlen: 24
185.184.24.0/24 maxlen: 24
185.184.25.0/24 maxlen: 24
185.184.26.0/24 maxlen: 24
185.184.27.0/24 maxlen: 24
185.185.232.0/24 maxlen: 24
185.185.233.0/24 maxlen: 24
185.185.234.0/24 maxlen: 24
185.243.180.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
185.243.183.0/24 maxlen: 24
185.249.200.0/24 maxlen: 24
185.249.201.0/24 maxlen: 24
185.249.202.0/24 maxlen: 24
185.249.203.0/24 maxlen: 24
185.250.210.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
185.254.236.0/24 maxlen: 24
185.254.237.0/24 maxlen: 24
185.254.238.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
193.223.106.0/24 maxlen: 24
193.223.107.0/24 maxlen: 24
194.62.54.0/24 maxlen: 24
194.62.55.0/24 maxlen: 24
2a05:bf00::/29 maxlen: 29
2a07:e700::/29 maxlen: 29
2a0b:2780::/29 maxlen: 29
2a0d:49c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 18 Feb 2025 16:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:a8:7d:fb:df:a0:0d:6d:48:4c:df:dd:3c:aa:0f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 13 09:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9116cdc020f4828722f9bf4b16ac0bff9902379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:d0:37:4d:41:b1:93:00:a5:58:f9:2b:a4:
d6:a3:a0:7a:89:6c:df:8e:8f:41:f2:5a:53:d2:7e:
ec:5b:07:27:87:ac:0b:fa:63:2e:c0:6e:b9:95:4a:
8f:84:fa:e7:b7:d1:33:ba:c3:36:64:eb:8f:31:68:
ba:9e:ad:3f:98:3c:4e:d2:93:a3:f1:2b:a2:48:8e:
31:64:ac:11:99:30:ef:e7:a6:89:98:a3:46:70:7e:
0e:c1:5f:2a:56:11:70:a6:e5:35:a5:04:3d:ab:a6:
df:aa:cd:1f:a3:31:55:e5:83:81:25:27:ee:2c:a4:
a7:1e:ec:e5:aa:5b:0e:1b:d3:ab:f6:5c:21:14:28:
8d:cd:14:32:24:b3:7a:f5:6e:ab:01:39:02:52:ad:
ff:e7:97:64:44:a9:f1:69:34:45:41:26:1e:4d:d0:
6c:2d:1d:90:bb:82:b6:04:b7:a1:af:3a:19:66:90:
af:b4:98:65:84:81:e6:d7:c6:01:b0:4c:82:d2:9f:
db:31:0b:92:6d:8c:18:63:6e:04:04:ca:ca:4c:28:
e6:3d:3f:00:0e:1d:9b:34:67:72:1c:76:18:0f:43:
27:c4:11:5a:d8:95:3f:00:ce:dc:4b:6b:ef:b4:85:
db:98:ba:ae:58:95:3a:b5:ef:65:4f:91:d7:0b:2b:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:11:6C:DC:02:0F:48:28:72:2F:9B:F4:B1:6A:C0:BF:F9:90:23:79
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yRFs3AIPSChyL5v0sWrAv_mQI3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.55.0/24
93.190.12.0/23
109.236.48.0/22
160.20.108.0/23
185.85.188.0/24
185.86.4.0/24
185.86.6.0/23
185.86.12.0/24
185.86.14.0/23
185.86.152.0/24
185.86.155.0/24
185.87.120.0/24
185.88.172.0/22
185.98.61.0-185.98.63.255
185.141.33.0-185.141.35.255
185.184.24.0/22
185.185.232.0-185.185.234.255
185.243.180.0/22
185.249.200.0/22
185.250.210.0/24
185.254.28.0/23
185.254.236.0/22
193.35.152.0/24
193.160.140.0/22
193.223.104.0/22
194.62.54.0/23
IPv6:
2a05:bf00::/29
2a07:e700::/29
2a0b:2780::/29
2a0d:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:58:57:08:03:70:91:ea:bb:53:43:72:1d:9a:6f:64:dd:4a:
24:3c:b1:93:74:cd:53:ea:f0:10:bd:7d:d1:1e:f7:51:58:1b:
a8:86:33:46:e1:3f:f2:33:96:5c:fb:d1:40:05:cd:9a:5d:38:
46:52:5c:06:5d:87:e9:0b:9c:8b:58:f4:33:f4:a6:33:ad:04:
1f:26:ce:b0:d0:0d:ef:4e:b9:95:27:05:2b:9c:17:fa:dd:60:
ec:5c:c7:2a:e4:d1:5b:35:f7:27:41:fa:12:66:0f:75:2b:60:
5f:6c:87:f3:c7:02:3c:50:c3:2e:c6:d9:d6:c8:a5:cc:e2:39:
33:4a:f0:84:e8:0c:0f:95:b4:1e:fa:33:79:89:1c:a1:b8:ff:
53:c1:53:fe:84:f5:41:3c:43:61:b6:0a:4c:46:b3:0e:32:a0:
15:2b:47:c7:8a:37:73:be:1f:ae:5a:16:e8:18:9d:3c:8d:c7:
56:7d:04:f0:2b:e3:57:b0:f7:41:c9:ab:7f:76:4c:a3:9b:35:
12:5e:47:68:24:79:96:35:97:69:1c:de:66:a2:82:4c:ee:16:
ae:f0:c2:76:0c:98:97:ea:08:8a:de:36:8a:4d:09:5d:40:70:
a5:d6:5a:88:00:24:00:c8:24:a0:b0:c4:34:a1:9b:89:69:62:
e3:00:0f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:30:35 2025 by rpki-client