Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/YyCDKAf73N6TvXjG_Hth8nHbqUE.roa
File: YyCDKAf73N6TvXjG_Hth8nHbqUE.roa (raw, json)
Hash identifier: IPkRD4oajpi9Dhr5PF2W/aTqRDy2+7NCMEZyljfi0R8=
Subject key identifier: 63:20:83:28:07:FB:DC:DE:93:BD:78:C6:FC:7B:61:F2:71:DB:A9:41
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 018DE660514B9C7F2143AD2D12086DC1C534
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/YyCDKAf73N6TvXjG_Hth8nHbqUE.roa
Signing time: Mon 26 Feb 2024 17:04:48 +0000
ROA not before: Mon 26 Feb 2024 17:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39704
IP address blocks: 5.22.248.0/21 maxlen: 24
46.182.216.0/21 maxlen: 24
91.192.36.0/22 maxlen: 24
94.124.88.0/21 maxlen: 24
185.94.168.0/24 maxlen: 24
185.103.16.0/22 maxlen: 24
194.50.163.0/24 maxlen: 24
213.132.192.0/19 maxlen: 24
2a00:1bd0::/32 maxlen: 32
2a00:1bd0:1378::/48 maxlen: 48
2a00:1bd0:1398::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Mar 2024 10:54:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:60:51:4b:9c:7f:21:43:ad:2d:12:08:6d:c1:c5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Feb 26 17:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6320832807fbdcde93bd78c6fc7b61f271dba941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:f6:2b:46:05:18:f9:b3:e5:42:09:c3:9e:
af:5d:f9:84:0d:ee:dd:c3:8c:2f:d5:90:42:df:3f:
6b:d2:3a:97:50:4f:78:12:d3:03:57:f8:7c:3c:38:
0a:6f:8f:8e:6f:27:6f:81:f9:43:fb:94:53:7d:ab:
10:ad:e3:4b:f9:c8:3c:b5:de:39:15:18:3d:2b:a1:
b1:b9:d3:e7:2f:fe:b5:cc:92:50:b4:c7:73:9d:e6:
06:a7:67:85:27:be:1a:53:a6:9d:65:80:fc:d3:99:
79:c4:e3:8f:52:f8:c4:52:21:89:f2:4a:bb:31:36:
a4:34:76:76:77:d2:db:6f:fa:77:98:82:b0:1c:11:
32:4a:4d:5d:58:78:e7:f1:0e:48:de:47:17:1f:47:
14:c4:7b:a8:c1:e1:3b:22:2b:80:a9:02:2d:f1:16:
07:94:70:73:34:6f:15:82:fd:52:39:19:a7:24:21:
fa:07:cb:f5:47:55:9f:a2:8c:82:ac:c0:53:8d:fc:
15:de:24:ac:41:c4:da:7a:89:4c:3c:5f:72:3a:9d:
4c:42:3e:26:f2:0d:f4:5a:4f:3e:a0:38:ba:e0:99:
d3:61:41:38:7b:e9:73:8d:bc:c5:31:03:89:66:26:
dc:92:4a:6a:58:e8:3d:ec:79:67:f9:02:0d:6c:bf:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:20:83:28:07:FB:DC:DE:93:BD:78:C6:FC:7B:61:F2:71:DB:A9:41
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/YyCDKAf73N6TvXjG_Hth8nHbqUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.248.0/21
46.182.216.0/21
91.192.36.0/22
94.124.88.0/21
185.94.168.0/24
185.103.16.0/22
194.50.163.0/24
213.132.192.0/19
IPv6:
2a00:1bd0::/32
Signature Algorithm: sha256WithRSAEncryption
b1:88:30:bf:83:8f:0f:d5:86:24:5a:39:ae:70:f3:88:5f:7c:
76:97:0e:e7:10:02:4d:02:8c:d3:d5:8d:72:ae:bd:47:21:34:
e0:b5:cc:d4:a6:42:71:a4:3e:04:92:04:84:82:73:dd:82:51:
57:1c:b8:92:16:97:12:77:d2:8d:70:39:d5:c4:56:52:e3:06:
f9:c3:8d:ce:44:63:c8:ef:f3:c4:fa:40:77:98:82:ed:06:12:
ce:92:67:83:db:5a:99:da:7b:34:46:a5:69:92:5f:54:9a:7f:
36:a1:e6:8a:09:d5:4a:25:b6:74:84:80:25:16:51:41:dc:bb:
f2:e4:67:2f:e2:17:7c:62:c3:6e:2d:e8:9a:b1:b7:de:1e:89:
56:b2:b9:55:80:74:40:11:31:d8:06:1d:25:1b:cf:c0:3c:b3:
6a:ee:34:ea:c5:ba:6b:20:c8:fe:50:d4:40:58:cb:4e:9b:f7:
11:30:ef:f7:48:58:7d:9d:b8:7c:a1:fb:5f:bb:2c:ac:f0:6d:
8f:3c:57:cc:1c:b9:f5:1d:1d:07:6e:3a:bf:27:23:f3:e7:f2:
10:af:59:e0:69:7d:b1:20:52:58:3d:3a:77:b6:59:7a:ef:ee:
20:17:53:fa:32:4a:54:d2:74:8f:91:06:32:36:0a:30:a3:a7:
cc:df:1a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:31 2025 by rpki-client