Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/SYIK_mh0gImRBUiXsVLhRec5pLk.roa
File: SYIK_mh0gImRBUiXsVLhRec5pLk.roa (raw, json)
Hash identifier: t2hPSz6f5z4xFOIDy3JfAgffdThZrNC1pTQo0MDWgKc=
Subject key identifier: 49:82:0A:FE:68:74:80:89:91:05:48:97:B1:52:E1:45:E7:39:A4:B9
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 0193BA47B9A631BFACE5EB9DF3C288C62F4D
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/SYIK_mh0gImRBUiXsVLhRec5pLk.roa
Signing time: Thu 12 Dec 2024 09:51:22 +0000
ROA not before: Thu 12 Dec 2024 09:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211381
IP address blocks: 45.88.76.0/24 maxlen: 24
45.88.105.0/24 maxlen: 24
45.91.200.0/24 maxlen: 24
45.91.201.0/24 maxlen: 24
45.91.202.0/24 maxlen: 24
45.132.107.0/24 maxlen: 24
77.83.175.0/24 maxlen: 24
91.211.248.0/24 maxlen: 24
91.211.249.0/24 maxlen: 24
91.211.250.0/24 maxlen: 24
92.119.114.0/24 maxlen: 24
95.215.204.0/24 maxlen: 24
95.215.207.0/24 maxlen: 24
185.203.240.0/24 maxlen: 24
185.203.241.0/24 maxlen: 24
185.209.20.0/24 maxlen: 24
185.209.21.0/24 maxlen: 24
185.219.81.0/24 maxlen: 24
185.219.83.0/24 maxlen: 24
185.224.132.0/24 maxlen: 24
185.231.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 10:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:47:b9:a6:31:bf:ac:e5:eb:9d:f3:c2:88:c6:2f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Dec 12 09:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49820afe6874808991054897b152e145e739a4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:58:37:2f:91:dd:d8:a9:ba:f8:3b:41:ba:37:
ea:a4:af:f7:98:fd:c6:88:e2:98:4a:a3:ee:9b:1e:
d3:bc:70:84:58:a2:45:4e:5a:79:24:13:59:e1:fc:
7d:54:bb:26:a5:7c:b5:09:44:32:07:19:b1:e8:08:
66:7a:09:87:b2:79:d3:42:f6:cb:38:58:3e:c1:ea:
13:fe:d0:a8:e5:71:f1:0a:06:82:ef:b3:2e:10:34:
1a:b6:6f:db:ee:f3:ff:52:4a:e1:e1:63:aa:95:0e:
25:7d:38:6d:41:91:99:de:be:f5:1b:16:83:5f:37:
ce:ea:c6:c8:15:ec:e8:a6:af:9c:9e:b0:cd:0d:a3:
82:3f:9d:b9:80:d4:fd:f4:d3:4f:30:ac:8b:56:f2:
c5:61:5c:0f:0b:71:13:57:a0:39:8f:9a:0a:5e:24:
9f:27:11:32:6e:6a:1c:93:d7:48:1c:c8:35:81:0d:
2a:7f:94:43:ea:37:10:4c:0d:0c:73:90:d2:57:ba:
49:9e:e4:85:0d:e8:fa:d1:9b:bd:33:18:14:b6:1c:
0f:26:46:b0:5b:52:e7:62:e4:4f:eb:fc:28:21:8a:
a8:2c:24:a8:35:be:6f:70:1b:e0:f2:d1:76:12:24:
df:4b:56:95:39:c9:d8:d5:e6:8f:1d:8f:90:ef:3c:
72:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:82:0A:FE:68:74:80:89:91:05:48:97:B1:52:E1:45:E7:39:A4:B9
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/SYIK_mh0gImRBUiXsVLhRec5pLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.76.0/24
45.88.105.0/24
45.91.200.0-45.91.202.255
45.132.107.0/24
77.83.175.0/24
91.211.248.0-91.211.250.255
92.119.114.0/24
95.215.204.0/24
95.215.207.0/24
185.203.240.0/23
185.209.20.0/23
185.219.81.0/24
185.219.83.0/24
185.224.132.0/24
185.231.69.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8a:e5:8a:a1:a8:dc:55:0d:57:0a:bf:1e:4b:41:0d:08:12:
10:31:02:b6:7e:52:25:db:66:e1:60:90:d8:e9:67:9e:6c:a6:
6b:2f:6c:82:b4:97:f9:32:4d:14:6d:29:3d:58:cb:a0:15:7b:
58:59:6c:f9:9f:41:f8:06:32:63:a6:a5:a2:de:f7:8a:4b:19:
20:8e:e3:e4:f3:15:ed:9d:cd:ca:55:53:a0:63:a8:77:3b:a7:
87:ff:8d:11:15:23:bc:b4:8a:2e:b6:50:69:59:6b:c5:66:a6:
71:2d:b1:3e:b3:b1:05:d8:39:72:c7:8c:34:e6:de:96:cd:1b:
4a:28:ee:2f:6a:4c:70:2e:2e:4c:84:98:ff:42:67:4b:f9:d5:
36:9a:f7:ae:89:0e:2c:d2:82:ec:eb:62:29:f6:de:cd:e9:7d:
b7:9e:9a:9a:9d:37:17:f9:c7:81:6c:63:81:ec:22:a8:95:0e:
d7:3b:90:6a:c6:0e:ef:a1:28:d7:8a:b6:e4:9f:9e:53:21:e5:
b5:83:55:bd:56:a4:64:c7:29:15:3c:92:4f:0f:e8:17:f0:2d:
08:66:95:54:54:52:ea:98:ab:f2:df:eb:4a:1a:34:e5:23:b8:
28:b1:29:fd:e8:24:05:87:70:43:9b:d1:de:c7:d8:21:0e:51:
52:c1:07:7b
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZO6R7mmMb+s5eud88KIxi9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZDM2OWU2NmNkYmUzMGQ3YjNhZmY2MDgxZjIwYzE3YTk4
ZmRjNWIwHhcNMjQxMjEyMDk1MTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTgyMGFmZTY4NzQ4MDg5OTEwNTQ4OTdiMTUyZTE0NWU3MzlhNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91g3L5Hd2Km6+DtBujfqpK/3mP3G
iOKYSqPumx7TvHCEWKJFTlp5JBNZ4fx9VLsmpXy1CUQyBxmx6AhmegmHsnnTQvbL
OFg+weoT/tCo5XHxCgaC77MuEDQatm/b7vP/Ukrh4WOqlQ4lfThtQZGZ3r71GxaD
XzfO6sbIFezopq+cnrDNDaOCP525gNT99NNPMKyLVvLFYVwPC3ETV6A5j5oKXiSf
JxEybmock9dIHMg1gQ0qf5RD6jcQTA0Mc5DSV7pJnuSFDej60Zu9MxgUthwPJkaw
W1LnYuRP6/woIYqoLCSoNb5vcBvg8tF2EiTfS1aVOcnY1eaPHY+Q7zxyrwIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFEmCCv5odICJkQVIl7FS4UXnOaS5MB8GA1UdIwQY
MBaAFMHTaeZs2+MNezr/YIHyDBepj9xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2ROcDVtemI0dzE3T3Y5Z2dmSU1GNm1QM0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yMjQzNTEtM2E0Ny00MDE0LWIzOTUt
YTYzNDc5NjEwOTY4LzEvU1lJS19taDBnSW1SQlVpWHNWTGhSZWM1cExrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yMjQzNTEtM2E0Ny00MDE0LWIzOTUtYTYzNDc5NjEwOTY4
LzEvd2ROcDVtemI0dzE3T3Y5Z2dmSU1GNm1QM0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAC1YTAME
AC1YaTAMAwQDLVvIAwQALVvKAwQALYRrAwQATVOvMAwDBANb0/gDBABb0/oDBABc
d3IDBABf18wDBABf188DBAG5y/ADBAG50RQDBAC521EDBAC521MDBAC54IQDBAC5
50UwDQYJKoZIhvcNAQELBQADggEBADiK5YqhqNxVDVcKvx5LQQ0IEhAxArZ+UiXb
ZuFgkNjpZ55spmsvbIK0l/kyTRRtKT1Yy6AVe1hZbPmfQfgGMmOmpaLe94pLGSCO
4+TzFe2dzcpVU6BjqHc7p4f/jREVI7y0ii62UGlZa8VmpnEtsT6zsQXYOXLHjDTm
3pbNG0oo7i9qTHAuLkyEmP9CZ0v51Taa966JDizSguzrYin23s3pfbeempqdNxf5
x4FsY4HsIqiVDtc7kGrGDu+hKNeKtuSfnlMh5bWDVb1WpGTHKRU8kk8P6BfwLQhm
lVRUUuqYq/Lf60oaNOUjuCixKf3oJAWHcEOb0d7H2CEOUVLBB3s=
-----END CERTIFICATE-----
Generated at Tue Jun 10 21:47:29 2025 by rpki-client