Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/yl8tZvdPyDxaakMrPNgbULn2ZCo.roa
File: yl8tZvdPyDxaakMrPNgbULn2ZCo.roa (raw, json)
Hash identifier: ss3dqXXGbAoLbgn1Gd0hhMgG8f7xeiNDuhiY+RX6zuw=
Subject key identifier: CA:5F:2D:66:F7:4F:C8:3C:5A:6A:43:2B:3C:D8:1B:50:B9:F6:64:2A
Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c
Certificate serial: 0192E54A4055C57CB96AD454ECE31FBCF91A
Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/yl8tZvdPyDxaakMrPNgbULn2ZCo.roa
Signing time: Fri 01 Nov 2024 01:15:01 +0000
ROA not before: Fri 01 Nov 2024 01:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39120
IP address blocks: 5.56.8.0/22 maxlen: 22
5.56.12.0/22 maxlen: 22
5.83.120.0/22 maxlen: 22
5.83.124.0/22 maxlen: 22
31.7.144.0/20 maxlen: 20
45.80.172.0/23 maxlen: 23
45.90.232.0/22 maxlen: 22
78.138.32.0/22 maxlen: 24
78.138.32.0/24 maxlen: 24
78.138.33.0/24 maxlen: 24
83.229.8.0/22 maxlen: 22
89.21.192.0/23 maxlen: 23
89.21.194.0/23 maxlen: 23
89.21.196.0/23 maxlen: 23
89.21.198.0/23 maxlen: 23
89.21.200.0/21 maxlen: 21
89.21.208.0/20 maxlen: 20
91.214.72.0/22 maxlen: 22
93.88.96.0/20 maxlen: 20
94.101.48.0/22 maxlen: 22
94.101.52.0/22 maxlen: 22
94.101.56.0/22 maxlen: 22
94.101.60.0/22 maxlen: 22
185.9.208.0/22 maxlen: 22
185.29.248.0/22 maxlen: 22
185.104.124.0/22 maxlen: 22
185.105.92.0/22 maxlen: 22
185.105.104.0/22 maxlen: 22
185.105.128.0/22 maxlen: 22
185.105.212.0/22 maxlen: 22
185.195.8.0/22 maxlen: 22
185.217.228.0/22 maxlen: 22
195.60.190.0/23 maxlen: 23
213.167.232.0/21 maxlen: 21
217.28.68.0/22 maxlen: 22
2a01:9a80::/32 maxlen: 32
2a01:9a81::/32 maxlen: 32
2a01:9a82::/32 maxlen: 32
2a01:9a83::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e5:4a:40:55:c5:7c:b9:6a:d4:54:ec:e3:1f:bc:f9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c
Validity
Not Before: Nov 1 01:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca5f2d66f74fc83c5a6a432b3cd81b50b9f6642a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:3e:dd:b6:2a:58:ef:1d:55:52:f7:a1:91:
f1:22:c6:6e:03:56:92:80:3f:08:51:dc:89:39:50:
63:c1:f4:c4:85:00:3b:67:80:17:77:bb:36:75:b9:
6f:70:5f:b7:84:9c:9a:61:8a:f2:af:c6:25:da:4b:
1b:09:5a:0b:1d:29:16:32:d4:2f:df:ba:ab:e8:8a:
c8:05:3b:ca:35:ed:2f:2c:3c:79:b6:1e:dc:e2:b1:
0d:f3:d6:bf:3e:c5:f4:98:28:d4:d1:05:99:1c:ab:
86:f8:8b:81:dc:30:fa:5a:4b:18:d4:cb:12:dd:57:
e6:bb:9e:4c:53:ce:63:f0:7c:e6:13:eb:b2:1b:c9:
db:ae:7b:65:70:ad:29:2f:ea:ba:d9:c3:78:23:cf:
3e:4f:71:c2:1b:a0:0f:de:37:0b:50:48:35:56:1b:
df:74:e5:fb:56:7d:f6:50:54:e6:90:68:09:7f:65:
12:c5:2a:af:5c:e9:18:38:a1:3e:5f:0a:e1:e3:81:
01:3d:5c:2a:20:69:43:12:c9:1f:9e:68:fb:a2:5f:
f1:10:5e:b1:89:fd:2d:54:b2:60:29:ef:61:63:5d:
4a:15:c9:e6:4a:4b:d2:7e:2b:2d:de:36:4d:05:8c:
fd:85:50:1b:aa:80:38:37:e2:c5:c2:57:49:24:36:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5F:2D:66:F7:4F:C8:3C:5A:6A:43:2B:3C:D8:1B:50:B9:F6:64:2A
X509v3 Authority Key Identifier:
keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/yl8tZvdPyDxaakMrPNgbULn2ZCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.8.0/21
5.83.120.0/21
31.7.144.0/20
45.80.172.0/23
45.90.232.0/22
78.138.32.0/22
83.229.8.0/22
89.21.192.0/19
91.214.72.0/22
93.88.96.0/20
94.101.48.0/20
185.9.208.0/22
185.29.248.0/22
185.104.124.0/22
185.105.92.0/22
185.105.104.0/22
185.105.128.0/22
185.105.212.0/22
185.195.8.0/22
185.217.228.0/22
195.60.190.0/23
213.167.232.0/21
217.28.68.0/22
IPv6:
2a01:9a80::/30
Signature Algorithm: sha256WithRSAEncryption
a5:f4:c3:eb:34:19:68:49:c9:0b:5d:c9:0f:d5:31:dc:03:db:
e9:d0:aa:85:40:fd:3b:a9:eb:aa:2c:8e:58:e0:be:3f:c1:9e:
83:d4:c1:33:0c:31:79:aa:f9:3c:f7:f5:6a:03:9b:46:7f:84:
7a:8b:4f:ef:e8:55:fd:c9:da:d8:9c:bc:45:0c:55:ae:27:b3:
4e:2f:25:64:55:21:26:8d:43:4f:d7:fc:fc:32:6c:69:7a:99:
02:b2:2a:7d:0f:fd:92:46:d9:24:4f:a3:3a:fe:b7:f7:a5:01:
03:cb:1e:41:d9:43:8e:91:fa:3b:16:c3:91:24:b2:06:ad:4c:
e7:f6:63:ba:15:36:07:45:50:80:e5:21:fc:4d:c3:0f:63:d9:
d7:cb:dc:51:7f:35:1b:78:81:77:c2:46:70:59:a6:a6:f5:12:
f2:45:40:6c:7b:e1:7b:f8:84:3a:75:19:dc:3c:6b:50:e9:22:
dd:85:4a:f6:f1:79:b2:69:f1:c9:30:99:2a:b2:c3:c4:ec:5b:
56:4f:64:30:19:4f:bc:dc:87:a4:00:23:b9:7f:79:45:9d:e5:
66:b2:d1:64:5c:05:f2:6f:01:be:84:ac:37:ad:ad:54:11:4e:
ae:01:38:00:a3:4c:8a:05:81:9e:36:1f:84:58:cb:7f:9a:85:
8c:0e:7d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:49 2025 by rpki-client