Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/YawMqnB5LhsyAY6wO6VNSfyeEfk.roa
File: YawMqnB5LhsyAY6wO6VNSfyeEfk.roa (raw, json)
Hash identifier: EtwHuZ4CIzW5wHhi23xfaFSE+goPdfVwiLqBdOeStu8=
Subject key identifier: 61:AC:0C:AA:70:79:2E:1B:32:01:8E:B0:3B:A5:4D:49:FC:9E:11:F9
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0193BA7EA69738F3A341A420BF2CED257F21
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/YawMqnB5LhsyAY6wO6VNSfyeEfk.roa
Signing time: Thu 12 Dec 2024 10:51:22 +0000
ROA not before: Thu 12 Dec 2024 10:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 213.18.208.0/22 maxlen: 24
213.18.220.0/22 maxlen: 24
217.177.8.0/22 maxlen: 24
217.177.40.0/22 maxlen: 24
217.177.44.0/22 maxlen: 24
217.177.48.0/22 maxlen: 24
217.177.52.0/22 maxlen: 24
217.177.80.0/22 maxlen: 24
217.177.84.0/22 maxlen: 24
217.180.22.0/23 maxlen: 24
217.180.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:7e:a6:97:38:f3:a3:41:a4:20:bf:2c:ed:25:7f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Dec 12 10:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61ac0caa70792e1b32018eb03ba54d49fc9e11f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:e4:cd:73:7b:4c:89:ba:bd:49:a4:21:1c:
d9:e2:de:80:69:f8:6f:9a:db:ea:07:44:35:0d:cd:
dd:68:36:57:e9:a1:28:a2:e6:7a:6b:89:5c:33:52:
33:16:ca:fc:74:7f:dc:33:08:a8:d1:06:60:6b:1d:
81:23:9f:a5:78:ef:e8:5d:5b:49:fc:d1:12:3c:0c:
eb:ad:08:cb:46:77:ea:79:6e:1f:c2:f9:98:b7:e5:
2f:bd:e5:45:60:94:94:d9:74:ac:de:e2:17:3e:30:
d7:a4:16:17:c4:b1:eb:4a:71:f9:54:f9:a9:a9:30:
76:e4:a7:7f:ff:98:ad:d3:c3:2d:f1:55:1a:e7:4a:
e4:f0:b7:25:c7:73:bd:9a:ca:cc:2e:cd:cc:67:bb:
d9:88:62:50:8f:50:fe:22:00:f9:1e:6b:57:b4:5f:
19:56:11:97:da:59:d1:24:45:17:74:52:1e:26:a8:
8b:93:5b:de:03:0f:56:61:57:4d:d0:60:44:72:3b:
86:ed:23:fe:23:20:f7:dd:4a:64:6f:28:fc:f3:c5:
d7:25:84:54:96:40:c4:56:66:8a:35:86:ed:8b:f3:
39:69:c0:5f:ad:cf:f1:11:f0:93:14:d1:3c:63:9c:
aa:11:83:8f:a3:82:ee:d0:33:a5:80:1b:fa:8a:2e:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AC:0C:AA:70:79:2E:1B:32:01:8E:B0:3B:A5:4D:49:FC:9E:11:F9
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/YawMqnB5LhsyAY6wO6VNSfyeEfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.208.0/22
213.18.220.0/22
217.177.8.0/22
217.177.40.0-217.177.55.255
217.177.80.0/21
217.180.22.0/23
217.180.40.0/22
Signature Algorithm: sha256WithRSAEncryption
48:c7:bf:c5:32:a3:1d:69:a9:f4:d8:79:0b:ce:a3:35:2e:bf:
9d:bb:67:2a:09:bb:ec:ba:84:e2:bb:04:d1:2b:fd:39:ba:64:
68:dd:a6:62:ed:ec:0d:07:97:e4:9c:d3:c4:85:d9:ff:b9:1c:
a1:06:da:02:1f:86:bd:d9:d5:7f:d1:29:df:68:fb:57:ff:ff:
2e:70:fc:fd:7c:bb:a9:66:fd:bb:38:ed:3c:bf:2e:71:a9:71:
60:94:7e:9a:20:14:95:9d:de:48:37:77:bf:57:5d:b2:15:16:
f2:76:6b:ae:8a:a0:8b:3f:a0:3c:62:84:3d:1a:6e:2d:ae:74:
15:d0:53:02:4d:21:fb:ec:ec:09:97:66:5e:d8:49:aa:1e:41:
47:e9:82:ee:57:5f:0b:c3:85:f4:a1:b6:62:77:cd:c7:16:c7:
34:f1:af:d6:db:aa:a6:8e:68:03:9f:93:99:9c:2e:9b:91:21:
b4:f0:ee:03:66:1d:71:1c:de:d8:a7:11:31:b7:0d:7b:9f:14:
be:d1:2e:d2:fd:03:b1:b4:50:7d:89:9b:d2:83:98:e2:b6:2a:
03:14:5d:8a:ce:19:8a:2f:75:96:29:af:63:c7:e6:05:0c:55:
5f:a2:6a:36:cd:aa:62:a7:08:1e:83:3e:10:31:5f:61:c3:e5:
f4:d0:cd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:28 2025 by rpki-client