Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/YMMlH9eoU3Wzn9Sam4hXwASVtaU.roa
File: YMMlH9eoU3Wzn9Sam4hXwASVtaU.roa (raw, json)
Hash identifier: Tfry8TJnhUGXnivETF6aEF86w68KBbkwm3naVlqDvjc=
Subject key identifier: 60:C3:25:1F:D7:A8:53:75:B3:9F:D4:9A:9B:88:57:C0:04:95:B5:A5
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 018DE9900D121F0533A893958A7F0D6AC649
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/YMMlH9eoU3Wzn9Sam4hXwASVtaU.roa
Signing time: Tue 27 Feb 2024 07:55:48 +0000
ROA not before: Tue 27 Feb 2024 07:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12654
IP address blocks: 84.205.64.0/24 maxlen: 24
84.205.65.0/24 maxlen: 24
84.205.66.0/24 maxlen: 24
84.205.67.0/24 maxlen: 24
84.205.68.0/24 maxlen: 24
84.205.69.0/24 maxlen: 24
84.205.70.0/24 maxlen: 24
84.205.71.0/24 maxlen: 24
84.205.72.0/24 maxlen: 24
84.205.73.0/24 maxlen: 24
84.205.74.0/24 maxlen: 24
84.205.75.0/24 maxlen: 24
84.205.76.0/24 maxlen: 24
84.205.77.0/24 maxlen: 24
84.205.78.0/24 maxlen: 24
84.205.79.0/24 maxlen: 24
84.205.80.0/24 maxlen: 24
84.205.81.0/24 maxlen: 24
84.205.82.0/24 maxlen: 24
84.205.83.0/24 maxlen: 24
84.205.84.0/24 maxlen: 24
84.205.85.0/24 maxlen: 24
84.205.86.0/24 maxlen: 24
84.205.87.0/24 maxlen: 24
84.205.88.0/24 maxlen: 24
84.205.89.0/24 maxlen: 24
84.205.90.0/24 maxlen: 24
84.205.91.0/24 maxlen: 24
84.205.92.0/24 maxlen: 24
84.205.93.0/24 maxlen: 24
84.205.94.0/24 maxlen: 24
84.205.95.0/24 maxlen: 24
93.175.144.0/24 maxlen: 24
93.175.146.0/24 maxlen: 24
93.175.148.0/24 maxlen: 24
93.175.149.0/24 maxlen: 24
93.175.150.0/24 maxlen: 24
93.175.151.0/24 maxlen: 24
93.175.152.0/24 maxlen: 24
93.175.153.0/24 maxlen: 24
93.175.154.0/25 maxlen: 25
93.175.154.128/28 maxlen: 28
2001:7fb:ef00::/48 maxlen: 48
2001:7fb:ef01::/48 maxlen: 48
2001:7fb:ef02::/48 maxlen: 48
2001:7fb:ef03::/48 maxlen: 48
2001:7fb:ef04::/48 maxlen: 48
2001:7fb:fb01:100::/56 maxlen: 56
2001:7fb:fb01:200::/64 maxlen: 64
2001:7fb:fd02::/48 maxlen: 48
2001:7fb:fd05::/48 maxlen: 48
2001:7fb:fe00::/48 maxlen: 48
2001:7fb:fe01::/48 maxlen: 48
2001:7fb:fe03::/48 maxlen: 48
2001:7fb:fe04::/48 maxlen: 48
2001:7fb:fe05::/48 maxlen: 48
2001:7fb:fe06::/48 maxlen: 48
2001:7fb:fe07::/48 maxlen: 48
2001:7fb:fe0a::/48 maxlen: 48
2001:7fb:fe0b::/48 maxlen: 48
2001:7fb:fe0c::/48 maxlen: 48
2001:7fb:fe0d::/48 maxlen: 48
2001:7fb:fe0e::/48 maxlen: 48
2001:7fb:fe0f::/48 maxlen: 48
2001:7fb:fe10::/48 maxlen: 48
2001:7fb:fe12::/48 maxlen: 48
2001:7fb:fe13::/48 maxlen: 48
2001:7fb:fe14::/48 maxlen: 48
2001:7fb:fe15::/48 maxlen: 48
2001:7fb:fe16::/48 maxlen: 48
2001:7fb:fe17::/48 maxlen: 48
2001:7fb:fe18::/48 maxlen: 48
2001:7fb:ff00::/48 maxlen: 48
2001:7fb:ff01::/48 maxlen: 48
2001:7fb:ff02::/48 maxlen: 48
2001:7fb:ff03::/48 maxlen: 48
2001:7fb:ff04::/48 maxlen: 48
2001:7fb:ff05::/48 maxlen: 48
2001:7fb:ff06::/48 maxlen: 48
2001:7fb:ff07::/48 maxlen: 48
2001:7fb:ff0a::/48 maxlen: 48
2001:7fb:ff0b::/48 maxlen: 48
2001:7fb:ff0c::/48 maxlen: 48
2001:7fb:ff0d::/48 maxlen: 48
2001:7fb:ff0e::/48 maxlen: 48
2001:7fb:ff0f::/48 maxlen: 48
2001:7fb:ff10::/48 maxlen: 48
2001:7fb:ff12::/48 maxlen: 48
2001:7fb:ff13::/48 maxlen: 48
2001:7fb:ff14::/48 maxlen: 48
2001:7fb:ff15::/48 maxlen: 48
2001:7fb:ff16::/48 maxlen: 48
2001:7fb:ff17::/48 maxlen: 48
2001:7fb:ff18::/48 maxlen: 48
2001:7fb:ff19::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 Feb 2024 08:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:90:0d:12:1f:05:33:a8:93:95:8a:7f:0d:6a:c6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Feb 27 07:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60c3251fd7a85375b39fd49a9b8857c00495b5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:d1:2d:53:e0:e3:ea:16:59:99:fd:46:9a:
4f:29:72:d4:af:be:b4:f8:42:a9:9c:fe:2a:a9:a4:
48:7a:b4:a9:b4:5d:fa:61:7f:7e:86:87:74:de:bd:
de:66:02:f8:cc:99:ba:88:37:c3:6d:2a:3e:98:89:
aa:da:45:f4:f7:d2:a0:1c:fd:6a:b9:dd:df:2f:ca:
19:76:34:d8:4f:82:12:b9:71:82:cc:ae:84:2c:38:
fd:eb:37:72:cd:4b:29:31:56:8f:49:9b:8a:22:42:
0b:98:c2:14:a9:93:eb:f4:0a:d0:fb:94:06:98:4e:
32:01:81:f6:e0:0d:50:3e:86:ad:a7:18:8a:50:9d:
7a:c9:3c:ad:9f:5d:6b:98:e7:dc:dc:93:90:47:70:
e5:fa:3e:2e:24:29:30:f5:1b:99:ac:f4:af:10:cd:
c3:ce:d1:12:66:10:f8:cb:b9:2b:6a:8b:ee:59:88:
25:d6:fe:35:13:3b:d7:78:f1:a5:af:ef:8e:dd:3f:
ab:36:1c:e4:f7:3a:1d:00:96:6a:99:63:be:0c:df:
9d:06:f2:4a:83:75:f8:8b:d1:42:12:08:3e:cf:1f:
bd:25:0a:33:d6:b0:7c:65:c4:14:df:f1:9f:dd:67:
aa:30:2e:0c:9c:ac:34:8c:11:9f:b6:84:44:00:6d:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C3:25:1F:D7:A8:53:75:B3:9F:D4:9A:9B:88:57:C0:04:95:B5:A5
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/YMMlH9eoU3Wzn9Sam4hXwASVtaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.64.0/19
93.175.144.0/24
93.175.146.0/24
93.175.148.0-93.175.154.143
IPv6:
2001:7fb:ef00::-2001:7fb:ef04:ffff:ffff:ffff:ffff:ffff
2001:7fb:fb01:100::-2001:7fb:fb01:200:ffff:ffff:ffff:ffff
2001:7fb:fd02::/48
2001:7fb:fd05::/48
2001:7fb:fe00::/47
2001:7fb:fe03::-2001:7fb:fe07:ffff:ffff:ffff:ffff:ffff
2001:7fb:fe0a::-2001:7fb:fe10:ffff:ffff:ffff:ffff:ffff
2001:7fb:fe12::-2001:7fb:fe18:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff00::/45
2001:7fb:ff0a::-2001:7fb:ff10:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff12::-2001:7fb:ff19:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3b:6f:03:9e:4f:0b:97:6c:b5:06:5c:56:9b:55:b6:9d:6e:75:
d2:7a:4b:e9:5c:b4:25:b2:b7:98:c7:27:99:cf:c3:98:e0:dc:
9e:3d:51:b7:eb:6b:70:73:06:4c:75:9d:fd:44:2f:75:4b:a8:
16:0e:96:b9:f0:88:df:9d:18:06:2b:e2:9b:26:ca:35:25:ee:
fb:d2:4a:ef:f3:2c:0d:ab:a3:ba:e2:fd:7d:fd:cf:db:86:64:
d6:d6:ae:fe:4c:ec:68:73:6f:24:d4:b6:d0:7f:eb:3a:da:a8:
fe:89:f0:7c:95:20:d1:c4:73:a9:10:c5:1d:b2:b3:85:ba:57:
41:6e:f5:72:11:98:d8:60:6d:44:b8:90:a9:98:fa:56:1f:70:
2d:79:99:f1:d9:af:4f:0b:05:b5:01:2e:b2:28:6b:5b:b5:7d:
b8:f7:49:d9:d2:24:ea:63:e2:f3:88:7b:53:30:7c:01:bb:01:
11:35:97:a9:85:1b:fe:c0:84:bd:15:74:ac:ea:7b:81:b7:c9:
2c:c1:d2:c6:95:70:c5:bb:0b:cd:eb:3e:74:f4:6b:bb:a6:bc:
f9:53:17:f2:e3:8a:1c:d9:b5:23:b8:e5:e8:c5:b3:81:cd:25:
9e:73:1c:14:5d:00:54:b3:ae:96:6f:ee:4d:69:07:96:11:34:
83:3c:21:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:59 2024 by rpki-client on console-ams.rpki-client.org