Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/YTvZ9TcP-ZlqjwATgIqgzqbRnBI.roa
File: YTvZ9TcP-ZlqjwATgIqgzqbRnBI.roa (raw, json)
Hash identifier: IKIG45QQCQCnbwYo4i9eh25Ax/bji8H+XQzb+b3VDp0=
Subject key identifier: 61:3B:D9:F5:37:0F:F9:99:6A:8F:00:13:80:8A:A0:CE:A6:D1:9C:12
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 01942143794286CC8E4CBDE80952971E3F7B
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/YTvZ9TcP-ZlqjwATgIqgzqbRnBI.roa
Signing time: Wed 01 Jan 2025 09:47:37 +0000
ROA not before: Wed 01 Jan 2025 09:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198541
IP address blocks: 81.162.0.0/20 maxlen: 24
81.162.16.0/21 maxlen: 24
91.219.72.0/22 maxlen: 24
91.233.28.0/22 maxlen: 24
91.236.60.0/22 maxlen: 24
176.110.160.0/19 maxlen: 24
176.110.192.0/20 maxlen: 24
188.0.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 05:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:79:42:86:cc:8e:4c:bd:e8:09:52:97:1e:3f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Jan 1 09:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=613bd9f5370ff9996a8f0013808aa0cea6d19c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:b1:cb:60:44:42:2b:8f:29:16:80:35:c5:
01:a2:95:bd:f2:a7:12:74:0b:f1:39:cd:e8:1d:00:
c3:10:1c:2c:7e:f4:18:f2:27:19:c0:3b:17:a3:10:
01:8a:4d:ce:12:cb:7f:59:c6:2c:1b:1b:41:87:34:
ad:54:ed:44:e7:69:d1:d5:58:38:7a:14:ad:d0:23:
5e:91:6b:25:36:85:b6:ce:0b:bb:a0:f5:35:60:d5:
24:29:68:ba:0e:75:bd:ce:fc:c7:81:ec:72:78:0f:
d0:3c:f4:6d:e7:b4:ec:23:35:05:d2:3c:57:60:ea:
10:ad:0c:5b:0b:a7:17:a7:4e:36:fb:e8:02:3d:4d:
28:cd:d4:b0:e2:3c:9d:89:ab:9f:46:87:b7:7e:41:
ad:77:38:95:88:c6:49:c8:54:0c:97:6f:86:4d:6b:
dc:38:7a:53:c0:1b:9e:e1:3c:fe:e3:54:db:4d:22:
3a:b0:74:14:a6:a5:3f:a3:d7:f0:d4:a5:6f:af:5b:
6d:57:f6:bf:15:bb:66:06:2e:27:18:0d:38:8c:0b:
dc:33:31:40:dd:ee:38:e3:b2:8c:b3:4c:2f:8b:35:
e7:84:3b:8f:6b:9f:43:1b:53:bc:1a:64:cd:12:c7:
37:92:b5:9a:4c:e3:fa:73:d0:47:bd:06:65:8c:30:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3B:D9:F5:37:0F:F9:99:6A:8F:00:13:80:8A:A0:CE:A6:D1:9C:12
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/YTvZ9TcP-ZlqjwATgIqgzqbRnBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.0.0-81.162.23.255
91.219.72.0/22
91.233.28.0/22
91.236.60.0/22
176.110.160.0-176.110.207.255
188.0.192.0/19
Signature Algorithm: sha256WithRSAEncryption
86:82:78:9d:8f:18:fa:ca:94:f2:6f:b8:b8:b9:db:74:b7:76:
4b:cb:2b:2f:9b:98:34:4a:51:a1:39:59:38:d7:92:4a:22:0b:
e9:46:c0:73:ad:82:7a:8e:6d:40:67:eb:fa:91:53:5d:29:00:
a1:a8:87:8c:78:98:65:51:67:83:3e:5c:0b:1d:2e:a9:a4:8e:
bd:39:19:b7:9a:21:8d:8c:8c:59:7c:5f:8b:13:27:38:7d:90:
04:74:19:6c:46:21:7d:ab:4d:32:e5:88:c3:d6:f6:92:e2:87:
93:ca:ad:12:f5:28:0c:5e:30:d6:44:26:dd:8d:9f:06:a0:ec:
12:1a:4d:a8:ec:d9:92:90:c5:ae:49:94:04:09:37:2f:40:36:
7b:40:8c:f2:5f:1b:e4:c9:07:d2:68:9a:b0:7b:64:31:bd:b3:
93:12:95:65:41:cb:0c:04:28:ad:6f:0c:e1:cd:b3:2a:2d:a9:
84:b4:19:35:2a:ed:b8:bd:0d:9c:82:75:e9:4b:3b:24:44:27:
e4:ed:ea:47:9b:0c:0a:98:4c:bd:7a:7f:cb:1c:b0:40:9d:1e:
f3:c1:87:01:27:99:51:a5:e5:9f:79:49:33:4a:b8:96:96:d3:
b1:11:3d:d1:4b:8e:9e:45:c7:40:85:66:04:04:13:37:e3:a1:
be:c8:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:20:47 2025 by rpki-client