Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yvM9WTEYAo6daGR8CLBH-nlGxUQ.roa
File: yvM9WTEYAo6daGR8CLBH-nlGxUQ.roa (raw, json)
Hash identifier: oQyECutvUuLmrDepTk7bb3YRTXZxWbZSVf32UeXrGl0=
Subject key identifier: CA:F3:3D:59:31:18:02:8E:9D:68:64:7C:08:B0:47:FA:79:46:C5:44
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0193CB016C7971621BE92835F1E34EE12D36
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yvM9WTEYAo6daGR8CLBH-nlGxUQ.roa
Signing time: Sun 15 Dec 2024 15:48:08 +0000
ROA not before: Sun 15 Dec 2024 15:48:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 91.194.55.0/24 maxlen: 24
93.190.12.0/24 maxlen: 24
93.190.13.0/24 maxlen: 24
109.236.48.0/24 maxlen: 24
109.236.49.0/24 maxlen: 24
109.236.50.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
160.20.108.0/24 maxlen: 24
160.20.109.0/24 maxlen: 24
185.85.188.0/24 maxlen: 24
185.86.4.0/24 maxlen: 24
185.86.6.0/24 maxlen: 24
185.86.7.0/24 maxlen: 24
185.86.12.0/24 maxlen: 24
185.86.14.0/24 maxlen: 24
185.86.15.0/24 maxlen: 24
185.86.152.0/24 maxlen: 24
185.86.155.0/24 maxlen: 24
185.87.120.0/24 maxlen: 24
185.88.172.0/24 maxlen: 24
185.88.173.0/24 maxlen: 24
185.88.174.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
185.98.62.0/24 maxlen: 24
185.98.63.0/24 maxlen: 24
185.141.33.0/24 maxlen: 24
185.141.34.0/24 maxlen: 24
185.141.35.0/24 maxlen: 24
185.184.24.0/24 maxlen: 24
185.184.25.0/24 maxlen: 24
185.184.26.0/24 maxlen: 24
185.184.27.0/24 maxlen: 24
185.185.232.0/24 maxlen: 24
185.185.233.0/24 maxlen: 24
185.185.234.0/24 maxlen: 24
185.243.180.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
185.243.183.0/24 maxlen: 24
185.249.200.0/24 maxlen: 24
185.249.201.0/24 maxlen: 24
185.249.202.0/24 maxlen: 24
185.249.203.0/24 maxlen: 24
185.250.210.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
185.254.236.0/24 maxlen: 24
185.254.237.0/24 maxlen: 24
185.254.238.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
193.223.106.0/24 maxlen: 24
193.223.107.0/24 maxlen: 24
194.62.52.0/24 maxlen: 24
194.62.53.0/24 maxlen: 24
194.62.54.0/24 maxlen: 24
194.62.55.0/24 maxlen: 24
2a05:bf00::/29 maxlen: 29
2a07:e700::/29 maxlen: 29
2a0b:2780::/29 maxlen: 29
2a0d:49c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cb:01:6c:79:71:62:1b:e9:28:35:f1:e3:4e:e1:2d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Dec 15 15:48:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=caf33d593118028e9d68647c08b047fa7946c544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:82:60:1b:55:84:ea:e6:5f:ea:20:93:32:
bf:a8:7f:c6:2d:7f:2f:ff:e3:6d:49:d9:8d:65:18:
87:84:44:fe:6f:07:e5:01:76:75:b3:9f:5c:8f:df:
a2:0d:10:6c:5b:96:15:5e:01:bd:4e:2d:4c:5c:7e:
78:cb:10:c2:be:d4:78:7b:60:32:a1:c9:ac:14:9c:
6f:4b:99:07:ac:47:3d:b3:78:24:ff:87:99:96:ba:
13:43:7f:f9:8a:47:86:0d:97:ca:30:41:c3:26:8b:
66:9c:92:32:99:d8:29:f3:f9:8b:65:63:bb:da:98:
1c:d9:e7:89:4f:e3:0b:8f:f4:1f:28:c3:74:01:2d:
1b:7c:79:02:32:9a:a4:5c:e1:51:d8:a0:c8:c4:3c:
8c:35:28:11:12:49:95:c1:82:f0:0c:0d:c8:08:90:
8e:0a:b2:35:77:59:5e:14:44:19:46:8b:cd:c9:39:
d5:0e:4b:60:e5:f5:1f:ac:80:44:bf:44:d3:0b:71:
72:84:13:91:e8:12:2c:db:1d:c4:81:30:0f:3f:d6:
cc:84:18:f1:01:0a:44:09:69:32:03:4c:a3:75:33:
5c:fb:9e:a5:b4:9c:99:49:32:ab:9f:e4:6d:3e:3a:
d9:c9:67:df:ad:a3:41:55:cf:f6:b4:27:e9:8a:0a:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F3:3D:59:31:18:02:8E:9D:68:64:7C:08:B0:47:FA:79:46:C5:44
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yvM9WTEYAo6daGR8CLBH-nlGxUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.55.0/24
93.190.12.0/23
109.236.48.0/22
160.20.108.0/23
185.85.188.0/24
185.86.4.0/24
185.86.6.0/23
185.86.12.0/24
185.86.14.0/23
185.86.152.0/24
185.86.155.0/24
185.87.120.0/24
185.88.172.0/22
185.98.61.0-185.98.63.255
185.141.33.0-185.141.35.255
185.184.24.0/22
185.185.232.0-185.185.234.255
185.243.180.0/22
185.249.200.0/22
185.250.210.0/24
185.254.28.0/23
185.254.236.0/22
193.35.152.0/24
193.35.155.0/24
193.160.140.0/22
193.223.104.0/22
194.62.52.0/22
IPv6:
2a05:bf00::/29
2a07:e700::/29
2a0b:2780::/29
2a0d:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
50:f7:85:e0:42:06:e1:03:78:43:d2:68:d1:ca:f8:43:cb:99:
16:6f:7b:a1:f2:10:e8:ac:72:8b:e3:3d:78:32:03:57:35:96:
50:80:9c:05:6e:9b:3d:a9:4c:b6:6e:fe:47:02:93:c9:6b:1b:
6e:d5:62:36:e9:aa:da:cf:d1:ff:e1:64:7b:fe:87:8f:4a:01:
d4:e9:99:67:db:c3:f8:4d:39:4a:26:d8:a7:71:28:83:a6:4e:
c3:33:1c:23:4e:a1:7a:da:d4:5c:85:14:73:39:79:ad:74:c0:
48:f6:1f:bc:a0:03:01:21:20:b6:37:f5:dc:aa:85:ce:82:fe:
ea:5e:dd:20:31:08:0d:ce:e8:79:ee:7f:e6:08:95:37:15:d7:
a7:53:7a:58:a4:2e:7e:99:6f:07:b5:6e:b7:11:e5:5e:05:15:
b9:78:c1:00:13:de:03:6f:dd:75:78:9b:ad:27:f7:c5:c1:69:
c8:2d:b0:78:6a:7a:27:6f:94:2d:4f:4e:c2:ba:10:ce:6c:b5:
b5:84:fc:e1:36:ce:61:cb:4a:03:f1:d6:73:63:23:e5:75:c6:
45:43:b9:97:15:98:ad:84:88:84:be:26:de:2c:d2:14:25:aa:
54:fa:7a:fe:8e:e3:58:72:98:72:1f:fc:58:d0:9f:a6:13:69:
f0:a6:ec:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:31:37 2025 by rpki-client