Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/YOLC7-LwwVyu8et05qDDi4Pw76o.roa
File: YOLC7-LwwVyu8et05qDDi4Pw76o.roa (raw, json)
Hash identifier: KQu9eZiLtguIoE9dHtVYC/NMF+t+213ZDIpgn1xFjtY=
Subject key identifier: 60:E2:C2:EF:E2:F0:C1:5C:AE:F1:EB:74:E6:A0:C3:8B:83:F0:EF:AA
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019227E4A62925963A5B48CA5496D02EC043
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/YOLC7-LwwVyu8et05qDDi4Pw76o.roa
Signing time: Wed 25 Sep 2024 06:35:49 +0000
ROA not before: Wed 25 Sep 2024 06:35:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41745
IP address blocks: 185.65.202.0/24 maxlen: 24
185.120.59.0/24 maxlen: 24
185.255.178.0/24 maxlen: 24
185.255.179.0/24 maxlen: 24
212.22.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:27:e4:a6:29:25:96:3a:5b:48:ca:54:96:d0:2e:c0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Sep 25 06:35:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60e2c2efe2f0c15caef1eb74e6a0c38b83f0efaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:ef:14:a3:55:d2:9c:c5:58:d1:b6:63:74:
bc:83:a6:f7:53:bb:7e:c8:e5:a1:17:c9:56:6a:f7:
2c:84:b9:09:7a:61:51:42:e1:a0:ee:3d:63:00:5a:
4f:7d:97:b2:5f:91:21:a7:f3:31:d6:a0:92:1c:52:
26:cc:74:6e:5b:67:b7:ce:d6:b9:6b:52:d0:af:4c:
c2:9f:cb:4e:d4:ee:9f:ff:31:4a:78:df:5f:05:26:
44:aa:35:d1:b3:a3:44:7b:9d:b1:e7:fc:12:a1:0e:
ec:fc:d5:1b:be:45:47:64:30:a9:2d:80:8c:a0:cc:
e3:7c:d3:5d:3f:96:ac:f3:78:4a:f7:7e:9e:0e:d8:
72:db:76:df:43:d0:df:17:b9:e7:a3:b9:91:c9:f4:
8a:82:f9:38:53:ad:95:16:20:27:af:53:01:d3:75:
d7:86:28:b5:80:0c:22:ab:0e:25:79:c7:b1:7e:80:
30:2a:fb:40:25:ec:19:54:20:4e:cc:ad:83:92:6c:
32:94:b6:32:b6:1e:9a:3a:ca:04:9b:cb:6a:ce:f3:
04:1b:8d:4b:1b:1c:59:a0:86:d3:d8:2e:7a:59:27:
31:4c:ab:c1:af:42:09:5f:21:b0:6b:76:6c:77:cb:
41:ac:da:ea:f7:87:3a:d5:75:ae:3b:3b:df:23:15:
98:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E2:C2:EF:E2:F0:C1:5C:AE:F1:EB:74:E6:A0:C3:8B:83:F0:EF:AA
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/YOLC7-LwwVyu8et05qDDi4Pw76o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.202.0/24
185.120.59.0/24
185.255.178.0/23
212.22.74.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:67:68:02:74:68:d0:1d:8d:2d:e6:57:e0:87:40:fb:e6:69:
4a:c1:cd:53:e7:a4:b9:ef:0b:85:9e:b8:bd:fc:c2:03:04:b0:
27:a8:3d:c4:d5:0a:2e:ce:1e:72:94:39:e6:1a:42:93:ea:3c:
af:b3:2b:03:4d:01:3e:4f:eb:22:02:e8:92:a0:7f:77:46:5b:
87:34:02:7d:1e:8b:ad:3a:01:5e:0d:42:38:40:c9:bd:65:7d:
56:ae:d5:45:f3:c6:24:46:5f:c8:8f:f2:6d:24:82:9a:52:3f:
69:cb:ce:f8:bb:dd:28:88:8e:40:62:3e:2b:c7:ef:9f:78:31:
61:11:98:66:42:96:0f:55:4d:72:21:83:3b:6a:76:63:08:42:
3a:86:22:b6:81:4c:d6:88:bb:ce:44:46:4f:51:f3:6e:4f:61:
f3:79:4f:1d:11:ff:e5:43:24:6f:bb:50:59:98:0b:4e:3d:22:
b5:84:f2:5e:94:d9:d6:ce:7d:60:87:bc:03:31:60:51:65:f9:
7b:e7:93:4f:f5:53:c2:fb:20:b8:e3:00:18:32:8a:88:3b:2b:
d1:96:bb:86:32:f6:d3:d4:79:6e:91:30:be:b2:d6:72:95:d6:
e3:2d:f6:b7:a2:09:77:d9:1c:e5:87:48:9a:b8:a0:9e:9e:3c:
5b:54:0a:7b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZIn5KYpJZY6W0jKVJbQLsBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjQwOTI1MDYzNTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGUyYzJlZmUyZjBjMTVjYWVmMWViNzRlNmEwYzM4YjgzZjBlZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3fvFKNV0pzFWNG2Y3S8g6b3U7t+
yOWhF8lWavcshLkJemFRQuGg7j1jAFpPfZeyX5Ehp/Mx1qCSHFImzHRuW2e3zta5
a1LQr0zCn8tO1O6f/zFKeN9fBSZEqjXRs6NEe52x5/wSoQ7s/NUbvkVHZDCpLYCM
oMzjfNNdP5as83hK936eDthy23bfQ9DfF7nno7mRyfSKgvk4U62VFiAnr1MB03XX
hii1gAwiqw4lecexfoAwKvtAJewZVCBOzK2DkmwylLYyth6aOsoEm8tqzvMEG41L
GxxZoIbT2C56WScxTKvBr0IJXyGwa3Zsd8tBrNrq94c61XWuOzvfIxWYfwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGDiwu/i8MFcrvHrdOagw4uD8O+qMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvWU9MQzctTHd3Vnl1OGV0MDVxRERpNFB3NzZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuUHKAwQA
uXg7AwQBuf+yAwQA1BZKMA0GCSqGSIb3DQEBCwUAA4IBAQDDZ2gCdGjQHY0t5lfg
h0D75mlKwc1T56S57wuFnri9/MIDBLAnqD3E1Qouzh5ylDnmGkKT6jyvsysDTQE+
T+siAuiSoH93RluHNAJ9HoutOgFeDUI4QMm9ZX1WrtVF88YkRl/Ij/JtJIKaUj9p
y874u90oiI5AYj4rx++feDFhEZhmQpYPVU1yIYM7anZjCEI6hiK2gUzWiLvOREZP
UfNuT2HzeU8dEf/lQyRvu1BZmAtOPSK1hPJelNnWzn1gh7wDMWBRZfl755NP9VPC
+yC44wAYMoqIOyvRlruGMvbT1HlukTC+stZyldbjLfa3ogl32Rzlh0iauKCenjxb
VAp7
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:20 2025 by rpki-client