Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/YZ2hDL5hGlgZ_VEr5B56XaXwUbs.roa
File: YZ2hDL5hGlgZ_VEr5B56XaXwUbs.roa (raw, json)
Hash identifier: t3LJIug4+OJDY5qGJlAMWtMSz2EUFCBzrprrzVt4g3g=
Subject key identifier: 61:9D:A1:0C:BE:61:1A:58:19:FD:51:2B:E4:1E:7A:5D:A5:F0:51:BB
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 018570FB95EFEDEAB2F5B7E383A722AA0126
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/YZ2hDL5hGlgZ_VEr5B56XaXwUbs.roa
Signing time: Mon 02 Jan 2023 05:36:54 +0000
ROA not before: Mon 02 Jan 2023 05:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205620
IP address blocks: 185.211.64.0/24 maxlen: 24
185.211.66.0/24 maxlen: 24
185.211.67.0/24 maxlen: 24
185.211.65.0/24 maxlen: 24
193.27.24.0/24 maxlen: 24
193.27.25.0/24 maxlen: 24
193.27.26.0/24 maxlen: 24
193.27.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:95:ef:ed:ea:b2:f5:b7:e3:83:a7:22:aa:01:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Jan 2 05:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=619da10cbe611a5819fd512be41e7a5da5f051bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:47:11:42:6d:a8:70:c5:aa:b0:41:a0:75:
f5:8c:b9:42:32:f6:38:31:2c:d1:6b:d1:75:06:8e:
17:97:ba:d5:cb:5f:91:4e:56:59:d2:bd:f5:ec:38:
29:ed:31:e9:bd:44:44:27:fc:55:ca:e1:d3:b4:63:
25:c8:8b:4c:ae:ef:f2:b1:47:6d:a3:c2:a7:b6:92:
90:2a:77:07:d6:da:f0:43:19:df:25:ab:24:14:fc:
32:5d:06:57:d3:e8:26:b1:81:a5:47:d8:4a:86:df:
67:36:15:5e:d7:c4:75:2e:1a:71:96:f3:a8:74:46:
54:62:94:b4:72:27:60:73:12:cf:d8:81:42:c2:0c:
dd:1d:74:da:a0:4e:bd:cf:7f:30:fa:ff:0b:85:8e:
cd:d4:62:ed:6a:8f:0c:71:94:1a:58:bf:b1:fa:4d:
c1:7f:47:5d:23:b0:b3:09:0d:ca:2e:ec:71:46:50:
f2:5f:cc:f7:73:f8:2a:d2:22:cb:9e:41:19:db:97:
d4:71:91:7e:cd:ad:85:a8:48:a8:d3:0d:65:57:a4:
9b:42:02:71:24:40:bb:e9:75:ad:5f:01:aa:b5:a8:
5f:07:97:11:d4:40:47:6e:e6:5b:c0:d2:38:ee:59:
b2:b5:53:c8:e7:8a:e1:29:32:fc:d6:e9:60:6c:f2:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9D:A1:0C:BE:61:1A:58:19:FD:51:2B:E4:1E:7A:5D:A5:F0:51:BB
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/YZ2hDL5hGlgZ_VEr5B56XaXwUbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.64.0/22
193.27.24.0/22
Signature Algorithm: sha256WithRSAEncryption
16:d9:24:c2:87:fc:3b:ca:7d:df:88:45:e7:66:c7:e1:9b:94:
0f:c1:eb:ad:da:39:f9:2d:1f:9c:90:2c:cb:ee:0d:67:31:cb:
60:3a:26:ca:3c:c7:8b:53:74:3d:3e:b3:6e:6b:be:7b:d4:7e:
dd:24:da:21:e2:4d:bd:9f:64:20:6a:75:f7:9d:4a:4d:54:5d:
23:ed:c0:c8:2d:d1:79:af:a8:6c:ef:16:6a:fb:ee:3a:c4:66:
b0:df:b6:a6:e3:d6:a6:32:85:a5:02:09:7f:69:4e:27:d8:83:
ef:e7:25:5d:50:3e:aa:cf:09:79:69:b4:0a:9e:d6:78:68:d6:
67:09:2f:85:1b:b5:1c:8e:35:67:fe:20:35:30:20:0b:9e:60:
38:6c:47:a2:04:64:a8:a7:e2:15:aa:cd:6c:f1:ed:c1:c9:b8:
a4:d8:36:1a:7f:df:c6:ed:69:8f:2a:51:4b:a8:18:ad:4b:f8:
db:59:e4:3d:fe:3c:4d:c3:70:1e:6c:98:e6:7c:1d:3e:6d:f2:
24:45:07:9d:07:dc:21:56:d4:7a:08:4c:60:04:80:87:d9:8d:
4e:fd:e6:d0:78:78:2b:8c:f2:84:09:6c:45:2e:bb:0d:33:ab:
fa:46:a6:cc:53:62:a4:58:2d:a4:b1:8c:3c:92:ae:79:08:ad:
03:f2:a6:98
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVw+5Xv7eqy9bfjg6ciqgEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZWU1ZDkwMDYxZmEyYTcyNGMzNjc0MjU4NmM2MjlkNDcx
ZTdhNGQwHhcNMjMwMTAyMDUzNjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTlkYTEwY2JlNjExYTU4MTlmZDUxMmJlNDFlN2E1ZGE1ZjA1MWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h5HEUJtqHDFqrBBoHX1jLlCMvY4
MSzRa9F1Bo4Xl7rVy1+RTlZZ0r317Dgp7THpvUREJ/xVyuHTtGMlyItMru/ysUdt
o8KntpKQKncH1trwQxnfJaskFPwyXQZX0+gmsYGlR9hKht9nNhVe18R1LhpxlvOo
dEZUYpS0cidgcxLP2IFCwgzdHXTaoE69z38w+v8LhY7N1GLtao8McZQaWL+x+k3B
f0ddI7CzCQ3KLuxxRlDyX8z3c/gq0iLLnkEZ25fUcZF+za2FqEio0w1lV6SbQgJx
JEC76XWtXwGqtahfB5cR1EBHbuZbwNI47lmytVPI54rhKTL81ulgbPJGSwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGGdoQy+YRpYGf1RK+Qeel2l8FG7MB8GA1UdIwQY
MBaAFM3uXZAGH6KnJMNnQlhsYp1HHnpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82YjFlYTUtM2Y3OS00OWNhLWI5ODUt
NTdhNWYzMjg5OTkyLzEvWVoyaERMNWhHbGdaX1ZFcjVCNTZYYVh3VWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS82YjFlYTUtM2Y3OS00OWNhLWI5ODUtNTdhNWYzMjg5OTky
LzEvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCudNAAwQC
wRsYMA0GCSqGSIb3DQEBCwUAA4IBAQAW2STCh/w7yn3fiEXnZsfhm5QPweut2jn5
LR+ckCzL7g1nMctgOibKPMeLU3Q9PrNua7571H7dJNoh4k29n2QganX3nUpNVF0j
7cDILdF5r6hs7xZq++46xGaw37am49amMoWlAgl/aU4n2IPv5yVdUD6qzwl5abQK
ntZ4aNZnCS+FG7UcjjVn/iA1MCALnmA4bEeiBGSop+IVqs1s8e3Bybik2DYaf9/G
7WmPKlFLqBitS/jbWeQ9/jxNw3AebJjmfB0+bfIkRQedB9whVtR6CExgBICH2Y1O
/ebQeHgrjPKECWxFLrsNM6v6RqbMU2KkWC2ksYw8kq55CK0D8qaY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:37 2024 by rpki-client on console-ams.rpki-client.org