Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YRSEHlnm-Y7vu1FWmSSeQlYlbUA.roa
File: YRSEHlnm-Y7vu1FWmSSeQlYlbUA.roa (raw, json)
Hash identifier: iPLwLqaCFWzOFKeBxTcJ6kwyBnqmvxoc1LH+aPRSsKs=
Subject key identifier: 61:14:84:1E:59:E6:F9:8E:EF:BB:51:56:99:24:9E:42:56:25:6D:40
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195048163852B4DDB76461CD90D553F7847
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YRSEHlnm-Y7vu1FWmSSeQlYlbUA.roa
Signing time: Fri 14 Feb 2025 12:49:03 +0000
ROA not before: Fri 14 Feb 2025 12:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214998
IP address blocks: 93.88.204.0/22 maxlen: 24
194.50.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 09:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:81:63:85:2b:4d:db:76:46:1c:d9:0d:55:3f:78:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 14 12:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6114841e59e6f98eefbb515699249e4256256d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:0a:9e:1b:99:54:82:42:38:48:09:95:ad:
75:93:c1:27:9c:82:e1:11:8b:63:6e:1b:8a:85:44:
70:4c:fa:6f:38:ea:5b:b8:47:d6:42:f4:6f:dc:19:
4c:44:bf:f5:c8:63:70:c5:1e:c9:ed:2c:47:97:64:
f3:4c:47:65:55:79:b6:71:a7:ce:f3:41:27:e1:0b:
67:1d:e6:2d:c9:d0:9f:de:1c:18:0b:ad:2f:a9:a6:
ca:d2:dc:69:27:6c:87:fa:0e:89:3c:76:9f:b7:2f:
09:a8:6b:cb:b7:d5:16:9d:96:af:06:76:ef:b8:51:
03:61:be:d1:eb:77:14:d1:f7:19:25:2c:72:46:9a:
be:81:21:c0:cd:3b:c9:36:91:f4:36:3e:05:bb:a5:
14:1e:f8:b5:cd:1d:74:d9:dd:de:06:d2:4a:41:29:
7b:3f:22:3f:f3:d1:2a:34:65:bd:87:97:ba:69:8a:
ad:0b:3e:4c:42:7e:75:ef:c3:ba:6c:06:58:bf:2f:
9b:ca:15:ea:30:33:07:4f:fa:b2:58:5b:5d:86:6c:
b2:46:76:a9:78:4f:71:4d:b6:9b:83:ea:b3:0d:a1:
01:83:03:b8:0d:34:9b:13:fa:82:28:b0:98:fb:53:
42:7b:f9:a7:72:e1:e0:0d:1f:77:45:92:d0:04:fc:
d1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:14:84:1E:59:E6:F9:8E:EF:BB:51:56:99:24:9E:42:56:25:6D:40
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YRSEHlnm-Y7vu1FWmSSeQlYlbUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.204.0/22
194.50.94.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0f:83:ea:54:cd:ee:94:63:7b:e2:c3:86:ff:8d:eb:e2:da:
eb:2a:19:cf:be:ec:8b:b5:7a:a0:58:3b:6d:9c:1f:99:11:8a:
43:d7:40:bf:36:73:af:1c:25:76:e1:1c:36:5c:58:36:03:ef:
47:b6:12:10:06:29:4a:de:88:d1:89:4a:5f:4b:b7:15:4d:b2:
21:0a:0d:6b:21:3b:09:36:8e:c3:5f:48:47:06:3f:b2:9e:dc:
c4:c5:a1:b0:c4:44:e6:a3:7b:c7:1a:36:17:0b:a2:34:1f:55:
82:23:c4:b3:1d:f7:1f:66:1a:16:e0:a0:ab:96:ed:b7:66:99:
4b:b9:d9:59:57:6d:0c:05:e2:c4:32:d4:01:59:55:a4:11:b9:
11:3b:01:a4:e2:79:0d:66:8d:a9:20:60:7e:e8:00:af:bf:99:
79:dc:29:f6:95:f1:15:f9:88:de:6f:a3:3b:d3:d8:c2:03:b9:
84:07:34:1a:41:74:af:04:5a:f3:73:b0:54:eb:14:f7:d3:65:
80:7f:2a:d4:08:f9:15:8c:5e:f5:87:20:6e:8d:9b:7e:e8:ca:
6d:46:81:c6:82:2c:76:25:86:24:96:9a:c2:5e:dc:fb:a4:af:
b0:88:c7:8d:4e:7f:17:6a:6b:47:60:a9:9d:f5:09:e9:33:0c:
b0:e2:94:79
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZUEgWOFK03bdkYc2Q1VP3hHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMjE0MTI0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTE0ODQxZTU5ZTZmOThlZWZiYjUxNTY5OTI0OWU0MjU2MjU2ZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLUKnhuZVIJCOEgJla11k8EnnILh
EYtjbhuKhURwTPpvOOpbuEfWQvRv3BlMRL/1yGNwxR7J7SxHl2TzTEdlVXm2cafO
80En4QtnHeYtydCf3hwYC60vqabK0txpJ2yH+g6JPHafty8JqGvLt9UWnZavBnbv
uFEDYb7R63cU0fcZJSxyRpq+gSHAzTvJNpH0Nj4Fu6UUHvi1zR102d3eBtJKQSl7
PyI/89EqNGW9h5e6aYqtCz5MQn5178O6bAZYvy+byhXqMDMHT/qyWFtdhmyyRnap
eE9xTbabg+qzDaEBgwO4DTSbE/qCKLCY+1NCe/mncuHgDR93RZLQBPzRBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGEUhB5Z5vmO77tRVpkknkJWJW1AMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvWVJTRUhsbm0tWTd2dTFGV21TU2VRbFlsYlVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXVjMAwQA
wjJeMA0GCSqGSIb3DQEBCwUAA4IBAQAKD4PqVM3ulGN74sOG/43r4trrKhnPvuyL
tXqgWDttnB+ZEYpD10C/NnOvHCV24Rw2XFg2A+9HthIQBilK3ojRiUpfS7cVTbIh
Cg1rITsJNo7DX0hHBj+yntzExaGwxETmo3vHGjYXC6I0H1WCI8SzHfcfZhoW4KCr
lu23ZplLudlZV20MBeLEMtQBWVWkEbkROwGk4nkNZo2pIGB+6ACvv5l53Cn2lfEV
+Yjeb6M709jCA7mEBzQaQXSvBFrzc7BU6xT302WAfyrUCPkVjF71hyBujZt+6Mpt
RoHGgix2JYYklprCXtz7pK+wiMeNTn8XamtHYKmd9QnpMwyw4pR5
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:46:12 2025 by rpki-client