Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/yoal-UR7Mkw_iKrpMCCDMx8mK2E.roa
File: yoal-UR7Mkw_iKrpMCCDMx8mK2E.roa (raw, json)
Hash identifier: 8kKRfZa6UqV1mpOhk4oiwuTGflNJF/p6PCRjIIOHOEU=
Subject key identifier: CA:86:A5:F9:44:7B:32:4C:3F:88:AA:E9:30:20:83:33:1F:26:2B:61
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018CC3B7063E2F794913E03F1D54FEC934E7
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/yoal-UR7Mkw_iKrpMCCDMx8mK2E.roa
Signing time: Mon 01 Jan 2024 06:30:00 +0000
ROA not before: Mon 01 Jan 2024 06:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/21 maxlen: 21
5.201.128.0/18 maxlen: 18
5.201.138.0/24 maxlen: 24
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/23 maxlen: 23
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
92.114.16.0/20 maxlen: 24
92.114.21.0/24 maxlen: 24
5.201.168.0/22 maxlen: 22
92.114.22.0/23 maxlen: 23
92.114.20.0/23 maxlen: 23
92.114.20.0/24 maxlen: 24
92.114.24.0/21 maxlen: 21
89.43.0.0/21 maxlen: 21
89.43.4.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.8.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/24 maxlen: 24
89.37.8.0/24 maxlen: 24
89.37.8.0/22 maxlen: 22
92.114.28.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
5.201.174.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/24 maxlen: 24
185.103.84.0/22 maxlen: 22
185.103.85.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.24.0/22 maxlen: 22
185.135.228.0/22 maxlen: 22
37.156.31.0/24 maxlen: 24
37.156.30.0/23 maxlen: 23
185.182.221.0/24 maxlen: 24
185.182.220.0/22 maxlen: 22
185.182.222.0/23 maxlen: 23
185.182.220.0/24 maxlen: 24
185.176.32.0/22 maxlen: 22
188.213.64.0/20 maxlen: 21
185.136.100.0/22 maxlen: 22
89.37.15.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
94.101.128.0/21 maxlen: 21
94.101.128.0/20 maxlen: 24
185.162.40.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
2a00:5ca0::/32 maxlen: 32
2a00:5ca4::/31 maxlen: 31
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/29 maxlen: 29
2a00:5ca2::/31 maxlen: 31
Validation: Failed, certificate revoked on Fri 19 Jan 2024 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:06:3e:2f:79:49:13:e0:3f:1d:54:fe:c9:34:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 1 06:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca86a5f9447b324c3f88aae9302083331f262b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fe:58:35:9a:7b:ea:c3:0d:6c:bd:4c:e4:41:
dc:f4:47:69:a1:47:cc:30:9d:1e:ff:41:29:ff:cc:
da:af:d8:7c:1a:b8:ea:a3:b1:6e:b2:22:8a:47:01:
26:86:3e:74:1f:97:de:45:1c:7c:8f:a9:92:d2:42:
4e:c8:93:d2:a1:ce:12:0b:e7:7f:12:dc:04:43:cb:
3d:55:42:37:65:7b:b3:8a:63:92:7c:1f:4c:27:0d:
0b:8a:15:31:6d:4f:21:05:dd:a4:73:66:96:49:47:
5b:c9:2d:2e:91:6c:ec:35:8d:09:76:3f:30:6e:42:
f5:2a:9c:f3:66:ec:b0:68:02:12:9d:e4:92:47:33:
8d:f1:d8:83:a7:c0:d0:27:63:be:ae:ed:16:0c:1f:
3b:55:40:21:ae:c1:57:6a:13:4e:cd:9b:63:ee:d7:
7e:33:ca:de:3d:2e:52:87:92:b6:8f:c1:1a:c9:47:
b5:a6:36:ba:7f:0e:c9:cb:0c:80:73:6c:21:04:f7:
d4:fa:b8:57:4a:71:62:59:d5:8e:13:6a:90:8a:06:
9c:78:f0:1a:f8:fc:0d:0b:7d:09:16:a5:37:a6:c8:
f5:4a:6f:77:44:8a:bf:49:98:ad:e8:f0:cd:43:8a:
34:5e:b1:46:36:4e:78:0c:3a:a6:5f:31:a0:f2:2e:
41:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:86:A5:F9:44:7B:32:4C:3F:88:AA:E9:30:20:83:33:1F:26:2B:61
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/yoal-UR7Mkw_iKrpMCCDMx8mK2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0-37.156.27.255
37.156.30.0/23
89.37.0.0/20
89.43.0.0-89.43.13.255
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
78:24:bd:21:bc:9d:6d:ca:40:3a:1f:11:e8:69:3c:0f:89:7b:
f1:4b:6e:8e:5c:19:f7:e5:13:af:12:0d:4a:8e:c9:9a:da:6e:
93:4c:cd:55:52:04:20:6a:e1:7f:4d:fa:d6:9e:27:37:f2:a7:
71:48:ed:fa:77:d3:87:b5:36:1d:86:ac:db:71:ad:66:56:39:
42:eb:9a:8c:d5:7d:73:9d:33:79:be:fb:75:a9:09:f3:00:cd:
c6:54:e9:6e:3a:17:ff:12:83:4d:b5:0e:74:e0:a2:ee:c8:f2:
91:c1:0d:3c:cb:8a:97:71:b6:71:10:b7:75:d1:74:53:01:1d:
63:e2:a8:5f:e3:1d:25:34:12:9d:84:26:32:c1:78:01:27:6b:
8b:39:19:3b:50:e0:90:6b:04:db:53:e8:df:3b:7e:d3:a4:c2:
12:3d:00:8a:54:45:f7:d2:5f:0b:6b:d7:03:3a:d4:fe:4f:be:
16:ac:ea:2c:5a:8b:3d:ff:22:1d:9b:f0:79:d7:67:d8:a7:83:
62:c9:5d:3f:60:04:a3:ce:dd:5f:b3:5c:90:97:ca:cf:38:1c:
48:64:18:8a:78:bd:9e:ef:2d:95:c5:15:9e:8a:71:06:c5:78:
b5:ce:9c:9c:1d:9b:f9:78:55:52:4b:8a:73:50:61:a7:98:06:
89:89:4c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:12 2024 by rpki-client on console-fra.rpki-client.org