Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/YBYd6-FRJigTjdWMtaRwYFYT_EA.roa
File: YBYd6-FRJigTjdWMtaRwYFYT_EA.roa (raw, json)
Hash identifier: Ob2K6SzklXGfb7InQySllysSr/BOydx+KAks1PbS0G8=
Subject key identifier: 60:16:1D:EB:E1:51:26:28:13:8D:D5:8C:B5:A4:70:60:56:13:FC:40
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 01856C0A275B94B0D1118DE115154C5ACF3D
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/YBYd6-FRJigTjdWMtaRwYFYT_EA.roa
Signing time: Sun 01 Jan 2023 06:34:42 +0000
ROA not before: Sun 01 Jan 2023 06:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198440
IP address blocks: 185.102.148.0/22 maxlen: 22
37.48.224.0/24 maxlen: 24
37.48.229.0/24 maxlen: 24
37.48.230.0/24 maxlen: 24
62.64.128.0/21 maxlen: 24
62.64.136.0/22 maxlen: 24
188.74.64.0/19 maxlen: 24
217.168.248.0/21 maxlen: 21
2a05:87c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 31 Jan 2023 08:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:27:5b:94:b0:d1:11:8d:e1:15:15:4c:5a:cf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Jan 1 06:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60161debe1512628138dd58cb5a470605613fc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:88:60:5f:1c:cc:e2:f4:54:7f:4e:1a:a3:aa:
d3:58:5c:ef:4d:e3:98:ae:b7:bb:bc:ec:f7:e9:18:
ca:c9:5f:73:b5:fb:b2:20:07:f7:47:20:6e:77:5b:
04:36:e1:00:39:9f:d6:cd:c4:36:17:6e:91:7e:4b:
1b:3c:e4:c1:ea:9a:7e:16:20:6e:3c:1d:cd:b2:1c:
a5:5d:6f:72:46:81:54:e8:e3:b1:f6:a8:df:60:fa:
3d:7a:8e:27:4f:f5:8a:c4:d6:c3:58:78:70:c6:c4:
3c:4f:ed:b5:14:97:d8:04:ad:91:b7:14:78:6a:db:
b2:3d:43:2e:9d:d8:5c:1a:26:63:9a:b5:31:81:6a:
4e:01:41:ce:86:64:16:61:1e:40:e8:b6:f7:dc:28:
75:04:b3:52:0a:a3:0d:0c:0d:d4:ce:ad:f3:45:ca:
dd:ad:1b:18:ba:16:d9:b1:cb:6c:7f:34:e1:a7:f6:
04:22:76:61:5b:e7:02:30:d6:f7:03:29:73:58:99:
d9:73:ff:e5:5a:e3:d5:0a:c7:b7:79:fd:ef:c1:85:
9d:8e:ad:1a:78:8e:6f:a2:de:6b:6d:70:6f:c4:ed:
94:d1:08:64:a9:d1:16:90:a3:e4:e5:45:ee:59:08:
a9:e8:e1:f0:30:77:3d:a5:b2:18:7d:2b:a1:fa:6e:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:16:1D:EB:E1:51:26:28:13:8D:D5:8C:B5:A4:70:60:56:13:FC:40
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/YBYd6-FRJigTjdWMtaRwYFYT_EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.224.0/24
37.48.229.0-37.48.230.255
62.64.128.0-62.64.139.255
185.102.148.0/22
188.74.64.0/19
217.168.248.0/21
IPv6:
2a05:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:2d:d7:83:ea:9a:6a:c4:0e:78:bd:c6:26:c1:9f:38:4b:f4:
f4:77:01:9b:d2:50:b3:61:b4:2e:36:50:f5:74:53:16:7d:85:
e8:69:0d:83:70:d1:51:8c:7c:a4:90:34:5b:27:03:0c:61:58:
13:71:19:44:b8:73:be:06:df:b9:73:04:4c:e1:0c:97:e6:fe:
5b:38:09:8d:71:b3:3d:38:76:72:98:60:be:b4:d4:ee:51:52:
dc:be:c9:bc:53:fe:16:b9:97:55:b1:76:c6:52:ce:80:28:93:
10:4b:27:3d:fc:7f:dd:80:b9:79:a7:fb:e9:51:3a:34:f3:43:
d7:38:e3:fd:b3:a5:74:78:a7:a4:7b:47:5a:c4:de:ea:67:0b:
a8:26:6d:fe:2c:9b:e5:7c:af:c7:2d:24:16:99:c9:2a:2f:82:
02:a9:06:48:a8:65:ee:84:ed:72:7b:36:0d:d4:d6:3a:e1:0d:
c1:d7:7f:63:13:62:f7:d3:15:5a:9f:08:47:aa:6e:69:f8:31:
fa:de:5e:9e:a7:66:83:e6:56:90:e9:73:a9:80:71:b5:25:3a:
af:bd:6d:2b:6a:e5:bc:91:1a:12:29:15:9b:c6:98:dc:12:74:
1b:20:3d:e2:2d:d9:19:e8:41:c2:47:c7:84:df:6b:d8:9b:d3:
5e:a4:29:22
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgISAYVsCidblLDREY3hFRVMWs89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMTg2YTU2ZWE4NGMxM2M2Mjc2OGE5ZDE3YmFlMTMzY2Vk
ZjEwNDUwHhcNMjMwMTAxMDYzNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDE2MWRlYmUxNTEyNjI4MTM4ZGQ1OGNiNWE0NzA2MDU2MTNmYzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIhgXxzM4vRUf04ao6rTWFzvTeOY
rre7vOz36RjKyV9ztfuyIAf3RyBud1sENuEAOZ/WzcQ2F26RfksbPOTB6pp+FiBu
PB3NshylXW9yRoFU6OOx9qjfYPo9eo4nT/WKxNbDWHhwxsQ8T+21FJfYBK2RtxR4
atuyPUMundhcGiZjmrUxgWpOAUHOhmQWYR5A6Lb33Ch1BLNSCqMNDA3Uzq3zRcrd
rRsYuhbZsctsfzThp/YEInZhW+cCMNb3AylzWJnZc//lWuPVCse3ef3vwYWdjq0a
eI5vot5rbXBvxO2U0QhkqdEWkKPk5UXuWQip6OHwMHc9pbIYfSuh+m6izwIDAQAB
o4ICRjCCAkIwHQYDVR0OBBYEFGAWHevhUSYoE43VjLWkcGBWE/xAMB8GA1UdIwQY
MBaAFIwYalbqhME8YnaKnRe64TPO3xBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2Qt
MjA5MmFmNjQ3MDcwLzEvWUJZZDYtRlJKaWdUamRXTXRhUndZRllUX0VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2QtMjA5MmFmNjQ3MDcw
LzEvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0AwQAJTDgMAwD
BAAlMOUDBAAlMOYwDAMEBz5AgAMEAj5AiAMEArlmlAMEBbxKQAMEA9mo+DANBAIA
AjAHAwUDKgWHwDANBgkqhkiG9w0BAQsFAAOCAQEAfi3Xg+qaasQOeL3GJsGfOEv0
9HcBm9JQs2G0LjZQ9XRTFn2F6GkNg3DRUYx8pJA0WycDDGFYE3EZRLhzvgbfuXME
TOEMl+b+WzgJjXGzPTh2cphgvrTU7lFS3L7JvFP+FrmXVbF2xlLOgCiTEEsnPfx/
3YC5eaf76VE6NPND1zjj/bOldHinpHtHWsTe6mcLqCZt/iyb5Xyvxy0kFpnJKi+C
AqkGSKhl7oTtcns2DdTWOuENwdd/YxNi99MVWp8IR6puafgx+t5enqdmg+ZWkOlz
qYBxtSU6r71tK2rlvJEaEikVm8aY3BJ0GyA94i3ZGehBwkfHhN9r2JvTXqQpIg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:55 2024 by rpki-client on console-fra.rpki-client.org