Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/YzATu99MrPFe6fIPjg7Wp-JCu0E.roa
File: YzATu99MrPFe6fIPjg7Wp-JCu0E.roa (raw, json)
Hash identifier: lTPYGd5HkqAOLDEWU5jmt7UoJo4YIqbWRh8xhMGDJPs=
Subject key identifier: 63:30:13:BB:DF:4C:AC:F1:5E:E9:F2:0F:8E:0E:D6:A7:E2:42:BB:41
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 018CC79332BB4272119312DB895CDE3FD159
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/YzATu99MrPFe6fIPjg7Wp-JCu0E.roa
Signing time: Tue 02 Jan 2024 00:29:21 +0000
ROA not before: Tue 02 Jan 2024 00:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8473
IP address blocks: 109.228.128.0/18 maxlen: 18
213.80.96.0/19 maxlen: 19
5.150.192.0/18 maxlen: 18
85.24.128.0/17 maxlen: 17
82.196.96.0/19 maxlen: 19
178.174.128.0/17 maxlen: 17
212.85.64.0/19 maxlen: 19
79.136.0.0/17 maxlen: 17
217.31.160.0/19 maxlen: 19
94.254.0.0/17 maxlen: 17
213.164.192.0/19 maxlen: 19
213.136.32.0/19 maxlen: 19
185.57.4.0/22 maxlen: 22
185.90.176.0/22 maxlen: 22
62.63.192.0/18 maxlen: 18
176.10.128.0/17 maxlen: 17
81.170.128.0/17 maxlen: 17
98.128.0.0/16 maxlen: 16
212.116.64.0/19 maxlen: 19
46.59.0.0/17 maxlen: 17
195.178.160.0/19 maxlen: 19
217.27.160.0/19 maxlen: 19
37.123.128.0/18 maxlen: 18
2001:9b2::/34 maxlen: 34
2a02:508::/29 maxlen: 29
2001:9b0::/32 maxlen: 32
2001:9b0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 12 Mar 2024 09:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:32:bb:42:72:11:93:12:db:89:5c:de:3f:d1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Jan 2 00:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=633013bbdf4cacf15ee9f20f8e0ed6a7e242bb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:3c:0b:db:e1:f0:23:e1:8a:98:54:c1:ac:
64:4b:73:1d:72:ad:61:22:29:4f:e1:9c:d6:38:fb:
cf:83:79:4a:59:57:3c:de:93:f2:05:99:5e:b3:9a:
f9:ad:c0:98:13:8b:e7:58:e9:ac:7b:4d:73:c3:b2:
e5:ae:47:91:a6:b6:75:e4:2d:bc:fa:2e:bb:f4:07:
38:53:19:b5:b9:c4:cf:55:c2:bb:26:37:54:76:ed:
1f:4c:7f:65:06:49:85:26:b0:0b:c1:34:f7:c0:f4:
91:fd:17:df:a9:85:52:16:88:2c:4e:1a:7b:c1:77:
62:22:d1:de:ab:a0:30:95:1a:83:10:35:b1:59:85:
0e:2e:1d:19:c2:44:7a:49:93:77:96:a4:dc:3a:4d:
ae:e5:5c:13:98:fb:0b:b4:ef:2c:b1:58:64:17:25:
22:55:3e:aa:e2:9a:ce:6e:2d:0a:86:c8:0e:d2:c6:
f2:e2:42:ee:dd:b8:05:e3:0c:88:fc:3e:94:23:79:
8b:94:54:82:75:c3:b3:13:5f:54:bc:6d:a6:61:bb:
82:0b:d5:32:15:e1:62:80:34:2d:82:d4:02:29:68:
ee:df:28:cc:89:ba:d6:be:37:0c:e9:df:c8:dc:fe:
5a:ef:e2:06:35:27:71:13:c4:74:35:2d:0d:a8:13:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:30:13:BB:DF:4C:AC:F1:5E:E9:F2:0F:8E:0E:D6:A7:E2:42:BB:41
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/YzATu99MrPFe6fIPjg7Wp-JCu0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.192.0/18
37.123.128.0/18
46.59.0.0/17
62.63.192.0/18
79.136.0.0/17
81.170.128.0/17
82.196.96.0/19
85.24.128.0/17
94.254.0.0/17
98.128.0.0/16
109.228.128.0/18
176.10.128.0/17
178.174.128.0/17
185.57.4.0/22
185.90.176.0/22
195.178.160.0/19
212.85.64.0/19
212.116.64.0/19
213.80.96.0/19
213.136.32.0/19
213.164.192.0/19
217.27.160.0/19
217.31.160.0/19
IPv6:
2001:9b0::/29
2a02:508::/29
Signature Algorithm: sha256WithRSAEncryption
40:1c:8c:16:a3:41:54:a4:f2:0b:e0:c2:70:0f:3c:79:eb:c6:
92:13:9c:3c:86:5a:e9:72:bc:db:17:c9:d3:7f:2b:de:48:7a:
1d:b6:a4:1e:d6:d8:dd:31:8c:e8:c8:02:d0:a0:a4:ae:64:d9:
15:01:46:8d:1c:64:81:fb:38:3b:fb:2e:e3:1b:30:26:c3:40:
95:3d:b7:26:86:68:37:3d:92:ff:1e:aa:53:84:9a:78:6b:3b:
1a:df:cc:51:0d:ec:ec:3a:b9:4b:04:46:49:75:4c:4a:6f:5e:
03:3e:38:f7:06:00:66:4a:87:91:72:bd:e9:dc:fd:0b:31:fb:
ca:ab:5e:ac:44:9c:82:b7:d6:80:86:c7:1c:7f:0c:44:f7:c9:
f7:45:66:e5:f0:c9:37:bb:14:ae:62:73:0f:6d:35:9a:24:b1:
28:fd:73:72:74:0b:21:9a:29:bc:89:9f:b3:9e:36:19:b5:73:
43:5f:d9:b9:eb:d9:ff:40:84:c0:e9:91:43:b5:df:35:cf:56:
a3:f4:bb:d1:c3:e5:c7:87:8f:0b:1b:10:63:78:b8:03:a6:48:
2a:a2:fa:2a:8c:7e:4e:25:bf:7f:03:76:a3:24:a3:9c:f6:4d:
8e:56:9b:0d:66:38:8d:77:4f:f3:e7:2e:11:fd:3e:e4:5d:85:
4b:ef:cd:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:26 2024 by rpki-client on console-fra.rpki-client.org