Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YlgBLpkMhy0_zbsiW0xWqZrbbeU.roa
File: YlgBLpkMhy0_zbsiW0xWqZrbbeU.roa (raw, json)
Hash identifier: tgeONM2EnRVRvoH7AZkqurSfPDCKskoUQVn5Jml2ksg=
Subject key identifier: 62:58:01:2E:99:0C:87:2D:3F:CD:BB:22:5B:4C:56:A9:9A:DB:6D:E5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FE099A4E2BA7D23CA494F1EE6889E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YlgBLpkMhy0_zbsiW0xWqZrbbeU.roa
Signing time: Thu 02 Jan 2025 05:49:33 +0000
ROA not before: Thu 02 Jan 2025 05:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62314
IP address blocks: 92.38.32.0/24 maxlen: 24
92.38.95.0/24 maxlen: 24
93.170.190.0/24 maxlen: 24
93.171.178.0/23 maxlen: 24
146.120.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 17:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:e0:99:a4:e2:ba:7d:23:ca:49:4f:1e:e6:88:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6258012e990c872d3fcdbb225b4c56a99adb6de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:36:a9:80:0e:74:bd:13:46:65:0f:62:7e:
48:f7:20:56:5a:ce:4b:14:16:d3:cd:97:6f:a3:ba:
13:0b:45:c0:b1:c0:7d:91:18:86:ab:8e:ee:af:df:
b3:d0:30:8c:57:79:90:64:e8:2b:15:8b:51:ae:3c:
eb:d6:68:3c:99:01:15:c4:1a:0b:3c:f4:71:58:e9:
3a:b8:f7:db:c1:1c:7c:42:0e:d6:a8:26:e4:97:c5:
49:9a:64:cc:19:13:42:0d:91:99:bf:45:db:66:85:
85:bb:12:fc:2a:c8:ad:23:d4:51:96:8b:6a:0d:80:
6a:ab:76:7a:5e:16:a0:c3:34:44:27:1f:4d:05:38:
86:dc:a2:49:f8:77:f0:20:5f:af:17:8c:4f:68:f7:
01:f0:21:4d:79:8b:c8:4d:a7:18:4b:c2:33:03:bf:
b5:4d:ae:36:a8:58:b8:5a:60:c1:a0:07:c7:e7:89:
c9:53:94:6d:0f:48:cf:b7:f9:36:61:5c:9f:52:85:
01:c7:c5:b1:20:5d:ca:85:de:db:70:57:37:33:4a:
9c:44:5f:2e:19:e8:bd:26:9e:69:fb:9f:6a:ff:82:
c6:4d:c4:42:66:3c:65:22:09:96:fd:5f:da:7c:28:
13:b3:7e:12:9e:3d:c2:a9:a2:e8:c9:d7:89:9f:03:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:58:01:2E:99:0C:87:2D:3F:CD:BB:22:5B:4C:56:A9:9A:DB:6D:E5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YlgBLpkMhy0_zbsiW0xWqZrbbeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.32.0/24
92.38.95.0/24
93.170.190.0/24
93.171.178.0/23
146.120.91.0/24
Signature Algorithm: sha256WithRSAEncryption
33:7c:1e:b5:91:9a:b5:ea:d6:37:49:31:20:63:aa:04:91:b8:
0d:c7:00:a0:bc:d7:1a:cf:86:e0:3d:d8:cc:bc:f5:ac:a8:49:
61:86:f4:30:7a:55:1c:a6:1b:09:c8:c7:ef:b7:47:14:0b:d3:
8f:fa:9e:15:d1:62:ad:55:93:15:69:e4:df:db:e3:08:b1:19:
1b:96:33:ca:bc:9e:dd:96:ad:d1:55:c4:20:f5:c8:5b:7a:e3:
fb:35:f4:6c:53:d9:f5:2c:db:c2:18:2c:02:4b:8a:06:db:1e:
a3:80:5e:29:3a:58:8b:78:ee:c3:33:cf:a2:cb:2e:a7:50:63:
1a:ae:33:2e:cb:d6:0e:97:5d:bc:1e:70:9c:e2:31:a5:82:7e:
be:f3:c5:7c:e0:6e:13:85:32:ba:f8:7c:6c:e1:7d:cb:77:0c:
0e:ab:19:be:08:d8:a8:a8:fb:19:1d:1b:eb:c4:0f:0d:c7:92:
21:62:b8:bc:75:9b:59:57:31:43:36:4b:dd:2c:a0:e0:a6:f5:
1c:04:c1:be:5b:04:62:0f:14:d6:b1:fc:de:e1:84:25:c0:e2:
62:cd:4c:3e:c2:ab:50:a5:d2:e0:0f:fb:b2:37:93:23:19:bb:
bc:b0:51:aa:39:3c:d9:f5:05:b7:a4:75:4b:f4:40:cb:1b:93:
82:41:ef:02
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQlj+CZpOK6fSPKSU8e5oieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjU4MDEyZTk5MGM4NzJkM2ZjZGJiMjI1YjRjNTZhOTlhZGI2ZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tg2qYAOdL0TRmUPYn5I9yBWWs5L
FBbTzZdvo7oTC0XAscB9kRiGq47ur9+z0DCMV3mQZOgrFYtRrjzr1mg8mQEVxBoL
PPRxWOk6uPfbwRx8Qg7WqCbkl8VJmmTMGRNCDZGZv0XbZoWFuxL8KsitI9RRlotq
DYBqq3Z6XhagwzREJx9NBTiG3KJJ+HfwIF+vF4xPaPcB8CFNeYvITacYS8IzA7+1
Ta42qFi4WmDBoAfH54nJU5RtD0jPt/k2YVyfUoUBx8WxIF3Khd7bcFc3M0qcRF8u
Gei9Jp5p+59q/4LGTcRCZjxlIgmW/V/afCgTs34Snj3CqaLoydeJnwNT0QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGJYAS6ZDIctP827IltMVqma223lMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvWWxnQkxwa01oeTBfemJzaVcweFdxWnJiYmVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAXCYgAwQA
XCZfAwQAXaq+AwQBXauyAwQAknhbMA0GCSqGSIb3DQEBCwUAA4IBAQAzfB61kZq1
6tY3STEgY6oEkbgNxwCgvNcaz4bgPdjMvPWsqElhhvQwelUcphsJyMfvt0cUC9OP
+p4V0WKtVZMVaeTf2+MIsRkbljPKvJ7dlq3RVcQg9chbeuP7NfRsU9n1LNvCGCwC
S4oG2x6jgF4pOliLeO7DM8+iyy6nUGMarjMuy9YOl128HnCc4jGlgn6+88V84G4T
hTK6+Hxs4X3LdwwOqxm+CNioqPsZHRvrxA8Nx5IhYri8dZtZVzFDNkvdLKDgpvUc
BMG+WwRiDxTWsfze4YQlwOJizUw+wqtQpdLgD/uyN5MjGbu8sFGqOTzZ9QW3pHVL
9EDLG5OCQe8C
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:59 2025 by rpki-client