Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/YMUVG9DiaxfuZPu7MpEZcUDAIgA.roa
File: YMUVG9DiaxfuZPu7MpEZcUDAIgA.roa (raw, json)
Hash identifier: HXALVdTA32FlsckzMz59EdGeEHMo80aIMJgu66z+ZFE=
Subject key identifier: 60:C5:15:1B:D0:E2:6B:17:EE:64:FB:BB:32:91:19:71:40:C0:22:00
Certificate issuer: /CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Certificate serial: 0190666820DD0115B14764977B8EF563B202
Authority key identifier: A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/YMUVG9DiaxfuZPu7MpEZcUDAIgA.roa
Signing time: Sat 29 Jun 2024 23:50:18 +0000
ROA not before: Sat 29 Jun 2024 23:50:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30880
IP address blocks: 185.98.192.0/22 maxlen: 22
185.98.195.0/24 maxlen: 24
193.27.200.0/23 maxlen: 23
193.27.200.0/24 maxlen: 24
193.27.201.0/24 maxlen: 24
193.42.215.0/24 maxlen: 24
212.63.192.0/19 maxlen: 19
2a01:298::/32 maxlen: 32
2a01:298:fd::/48 maxlen: 48
2a01:299::/32 maxlen: 32
2a01:29f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:66:68:20:dd:01:15:b1:47:64:97:7b:8e:f5:63:b2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Validity
Not Before: Jun 29 23:50:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60c5151bd0e26b17ee64fbbb3291197140c02200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:66:6c:e3:82:37:18:64:61:fc:b0:0d:e7:
31:34:3c:ad:84:28:f8:62:79:94:4b:02:5c:c7:b2:
a3:51:eb:34:1b:1d:42:42:38:be:4c:ab:8c:a3:4b:
ee:e9:fa:22:d9:33:55:28:1f:c0:5e:45:77:2f:e4:
ba:06:cf:f2:86:89:1a:a1:64:d2:d7:7b:a3:b7:74:
fd:fa:d9:ce:fe:57:da:9e:f1:30:d4:b2:72:64:81:
b1:01:c4:ef:3e:33:39:f2:c4:5a:7b:66:f0:04:4e:
4a:e1:e2:c7:6c:37:2b:19:28:b7:1b:64:78:12:a2:
65:c1:f7:16:bb:4a:fb:bb:ca:75:1b:16:67:0e:77:
74:e3:c7:ee:01:f8:4d:c4:7f:c9:36:75:16:a9:35:
0d:62:00:b9:77:ff:19:89:ab:ba:37:6e:9d:86:8d:
91:b0:83:c3:19:0c:f0:e1:e4:58:84:14:fd:d9:6f:
cb:a4:45:02:23:ca:d4:7e:a7:67:89:a3:d4:ab:f6:
f7:c0:f3:d8:91:b5:9e:5e:ae:ee:79:0d:7e:69:0a:
83:e2:c1:2f:e5:9c:7d:0d:c5:fa:83:ad:0d:fd:c4:
26:07:5a:86:8d:24:e1:8e:94:6f:2c:ab:a8:9c:fd:
cf:c2:34:c1:e0:f9:10:42:5e:53:57:a0:a9:78:27:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C5:15:1B:D0:E2:6B:17:EE:64:FB:BB:32:91:19:71:40:C0:22:00
X509v3 Authority Key Identifier:
keyid:A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/YMUVG9DiaxfuZPu7MpEZcUDAIgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.192.0/22
193.27.200.0/23
193.42.215.0/24
212.63.192.0/19
IPv6:
2a01:298::/31
2a01:29f::/48
Signature Algorithm: sha256WithRSAEncryption
13:40:4c:37:78:2b:3b:7d:a3:de:93:5a:25:6e:6e:1c:31:c5:
1e:70:3f:ac:b3:14:73:78:2e:d8:4c:04:db:32:60:13:91:63:
9e:3d:ab:df:ae:b6:4e:72:58:26:68:fb:5a:2a:57:51:f7:55:
e2:02:f9:69:be:8e:f9:2e:1e:10:20:ad:38:0b:c1:17:46:7b:
4c:cc:8d:50:6e:b7:32:aa:23:a4:5d:2a:c4:cc:c7:58:45:5e:
59:81:82:a9:d1:a3:10:45:4b:f7:5f:0a:64:5b:2d:4e:79:b0:
39:ed:35:89:0f:bd:5d:7e:87:12:ce:c4:2f:a6:e2:04:8f:c3:
10:07:70:8a:28:7b:b8:0f:d7:64:b8:d3:a2:d8:c5:cb:b1:f0:
1d:b7:d7:fb:1f:33:80:b4:b3:8b:c8:63:0d:59:8c:73:92:55:
a9:ad:15:5c:02:74:c5:0e:3b:a0:62:95:5a:ff:3b:36:b0:ef:
55:ef:ec:ca:52:00:7e:5f:4d:cf:fd:1b:49:a2:ae:51:1c:36:
d4:75:0c:e6:6f:b1:3c:3c:75:ae:5a:4c:90:83:b0:e3:f7:81:
32:3d:3d:89:aa:17:53:1d:ef:fd:ee:e6:93:01:e9:53:d6:a6:
54:aa:b7:53:2e:e4:df:2f:ca:4e:b1:4b:3d:dc:82:98:eb:88:
41:6c:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:51 2025 by rpki-client