Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/l_CSMSQ_YliSei_CYgeEX7V_ekI.roa
File: l_CSMSQ_YliSei_CYgeEX7V_ekI.roa (raw, json)
Hash identifier: o3zE9BCdR6pRgBv89qYkLyw/g2IpIBlMnVAVTsFRThk=
Subject key identifier: 97:F0:92:31:24:3F:62:58:92:7A:2F:C2:62:07:84:5F:B5:7F:7A:42
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 0194BC6DE714B76A04C2E0ACBB891C98741B
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/l_CSMSQ_YliSei_CYgeEX7V_ekI.roa
Signing time: Fri 31 Jan 2025 12:55:06 +0000
ROA not before: Fri 31 Jan 2025 12:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39150
IP address blocks: 91.196.136.0/24 maxlen: 24
91.196.137.0/24 maxlen: 24
91.196.138.0/24 maxlen: 24
91.196.139.0/24 maxlen: 24
93.179.68.0/23 maxlen: 23
93.179.69.0/24 maxlen: 24
93.179.120.0/24 maxlen: 24
95.85.83.0/24 maxlen: 24
95.85.83.0/25 maxlen: 25
95.85.83.128/25 maxlen: 25
95.181.212.0/23 maxlen: 23
95.181.213.0/24 maxlen: 24
109.196.133.0/24 maxlen: 24
195.182.8.0/24 maxlen: 24
2a04:8680::/32 maxlen: 32
2a04:8681::/32 maxlen: 32
2a09:d5c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 19 Feb 2025 16:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:6d:e7:14:b7:6a:04:c2:e0:ac:bb:89:1c:98:74:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 31 12:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97f09231243f6258927a2fc26207845fb57f7a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:75:0e:53:e9:49:62:96:ef:30:c4:07:d5:
f9:88:fe:d0:80:be:72:e9:7a:62:a3:9a:5b:e4:53:
9b:a6:f9:fc:08:dc:0d:19:62:ad:ce:a8:12:11:c7:
14:b2:f2:b1:6f:95:76:9a:f7:fd:63:1b:7c:fa:51:
25:bb:29:eb:b4:c3:bd:0b:f8:17:9a:57:d1:84:ef:
ff:01:77:97:bc:2f:9c:ff:dc:50:47:0c:c0:5d:5b:
4c:cb:77:d0:1f:f6:9e:71:f8:66:ac:30:bd:5e:f5:
e6:86:71:61:25:50:d3:cf:a0:e9:ed:4c:8f:85:ba:
64:6a:1b:06:06:06:ef:bc:e1:04:e7:66:2c:ba:80:
e0:0c:3a:87:5e:d3:fb:57:5e:13:1d:bb:34:1f:3b:
30:70:77:9c:61:ce:97:c5:ee:e7:58:ac:49:0a:e2:
78:0a:13:fd:4a:95:4a:58:a6:26:44:cd:6b:2a:46:
52:b2:c8:9f:6c:6a:2c:76:06:e4:68:51:51:d6:9a:
27:d5:fd:c2:41:92:3a:51:de:7c:eb:78:e0:72:89:
55:7f:0c:54:f0:db:ee:5b:e3:09:bd:e9:21:3d:47:
4f:20:cb:2e:29:be:13:b9:52:40:dc:d5:18:03:c2:
f1:44:c2:ea:ad:83:4b:b0:17:d2:2a:cb:a6:13:fb:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F0:92:31:24:3F:62:58:92:7A:2F:C2:62:07:84:5F:B5:7F:7A:42
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/l_CSMSQ_YliSei_CYgeEX7V_ekI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.136.0/22
93.179.68.0/23
93.179.120.0/24
95.85.83.0/24
95.181.212.0/23
109.196.133.0/24
195.182.8.0/24
IPv6:
2a04:8680::/31
2a09:d5c0::/32
Signature Algorithm: sha256WithRSAEncryption
2c:a4:6b:ab:85:55:d5:1a:30:31:b1:c4:b6:f7:b5:58:d8:ce:
60:d9:1b:ae:f7:92:89:db:95:c1:af:8b:d2:78:7c:d6:0a:1a:
91:a7:37:62:4e:df:d7:b7:16:ca:99:d3:80:a7:13:9e:27:94:
23:5f:30:37:4d:fd:be:8c:10:ee:0f:cd:9f:c5:91:b9:a4:46:
af:c5:0a:90:7f:d6:d1:cd:9c:3d:10:7e:36:47:d8:7e:44:b4:
d0:c3:b1:fe:15:8a:45:f8:52:8f:4c:7d:d6:ee:79:37:c1:b1:
6c:c7:a9:0f:4a:75:ca:01:4a:2b:8a:ba:4e:28:16:b6:02:06:
e0:9c:d1:c9:75:76:70:a5:7b:09:f9:4c:bf:f2:25:26:89:79:
41:b2:a5:25:f7:56:67:94:bd:9b:b5:5f:09:5e:4e:c2:b0:a5:
b5:15:d5:9d:13:0c:8d:eb:88:8d:9a:3b:fd:7d:70:87:83:7b:
4a:d4:69:c6:a1:9d:c0:08:bb:16:3c:93:3d:90:25:54:02:9c:
0c:19:fb:f5:88:fd:f9:4e:ae:9f:fb:fa:c5:72:ff:dc:9a:89:
6c:84:81:4a:4e:ba:50:1b:64:82:ce:85:8a:22:72:47:0f:5e:
07:08:47:0f:85:d1:df:fb:0e:e4:ab:1f:4c:20:02:34:3c:8b:
f6:dd:59:4d
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZS8becUt2oEwuCsu4kcmHQbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjUwMTMxMTI1NTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2YwOTIzMTI0M2Y2MjU4OTI3YTJmYzI2MjA3ODQ1ZmI1N2Y3YTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGx1DlPpSWKW7zDEB9X5iP7QgL5y
6Xpio5pb5FObpvn8CNwNGWKtzqgSEccUsvKxb5V2mvf9Yxt8+lEluynrtMO9C/gX
mlfRhO//AXeXvC+c/9xQRwzAXVtMy3fQH/aecfhmrDC9XvXmhnFhJVDTz6Dp7UyP
hbpkahsGBgbvvOEE52YsuoDgDDqHXtP7V14THbs0HzswcHecYc6Xxe7nWKxJCuJ4
ChP9SpVKWKYmRM1rKkZSssifbGosdgbkaFFR1pon1f3CQZI6Ud5863jgcolVfwxU
8NvuW+MJvekhPUdPIMsuKb4TuVJA3NUYA8LxRMLqrYNLsBfSKsumE/slhwIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFJfwkjEkP2JYknovwmIHhF+1f3pCMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEvbF9DU01TUV9ZbGlTZWlfQ1lnZUVYN1ZfZWtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQCW8SIAwQB
XbNEAwQAXbN4AwQAX1VTAwQBX7XUAwQAbcSFAwQAw7YIMBQEAgACMA4DBQEqBIaA
AwUAKgnVwDANBgkqhkiG9w0BAQsFAAOCAQEALKRrq4VV1RowMbHEtve1WNjOYNkb
rveSiduVwa+L0nh81goakac3Yk7f17cWypnTgKcTnieUI18wN039vowQ7g/Nn8WR
uaRGr8UKkH/W0c2cPRB+NkfYfkS00MOx/hWKRfhSj0x91u55N8GxbMepD0p1ygFK
K4q6TigWtgIG4JzRyXV2cKV7CflMv/IlJol5QbKlJfdWZ5S9m7VfCV5OwrCltRXV
nRMMjeuIjZo7/X1wh4N7StRpxqGdwAi7FjyTPZAlVAKcDBn79Yj9+U6un/v6xXL/
3JqJbISBSk66UBtkgs6FiiJyRw9eBwhHD4XR3/sO5KsfTCACNDyL9t1ZTQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:24:56 2025 by rpki-client