Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/yzvvwChVamtR21Q1i9Q5y4dTCg8.roa
File: yzvvwChVamtR21Q1i9Q5y4dTCg8.roa (raw, json)
Hash identifier: hussbZVANvG+KyotX7ESBPWw6acbz9XCSLn3xjSGO0c=
Subject key identifier: CB:3B:EF:C0:28:55:6A:6B:51:DB:54:35:8B:D4:39:CB:87:53:0A:0F
Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Certificate serial: 01857169A9FCA6D81C5C05B64F78D2A455BE
Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/yzvvwChVamtR21Q1i9Q5y4dTCg8.roa
Signing time: Mon 02 Jan 2023 07:37:08 +0000
ROA not before: Mon 02 Jan 2023 07:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202196
IP address blocks: 37.10.27.0/24 maxlen: 24
37.10.28.0/24 maxlen: 24
37.10.29.0/24 maxlen: 24
37.10.30.0/24 maxlen: 24
37.10.31.0/24 maxlen: 24
37.10.25.0/24 maxlen: 24
37.10.26.0/24 maxlen: 24
37.10.30.0/23 maxlen: 23
37.10.41.0/24 maxlen: 24
37.10.42.0/24 maxlen: 24
37.10.43.0/24 maxlen: 24
37.10.44.0/24 maxlen: 24
37.10.40.0/24 maxlen: 24
37.10.45.0/24 maxlen: 24
37.10.46.0/24 maxlen: 24
5.57.20.0/24 maxlen: 24
5.57.21.0/24 maxlen: 24
5.57.20.0/23 maxlen: 23
37.10.1.0/24 maxlen: 24
37.10.24.0/24 maxlen: 24
37.10.24.0/23 maxlen: 23
91.195.236.0/24 maxlen: 24
2a01:5043:7::/48 maxlen: 48
2a01:5043:2007::/48 maxlen: 48
2a01:5041:7::/48 maxlen: 48
2a01:5041:2007::/48 maxlen: 48
2a01:5041:4007::/48 maxlen: 48
2a01:5041:6004::/48 maxlen: 48
2a01:5041:2004::/48 maxlen: 48
2a01:5041:4::/48 maxlen: 48
2a01:5041:eff::/48 maxlen: 48
2a01:5041:2eff::/48 maxlen: 48
2a01:5041:2010::/48 maxlen: 48
2a01:5042:2eff::/48 maxlen: 48
2a01:5042:eff::/48 maxlen: 48
2a01:5041:f::/48 maxlen: 48
2a01:5041:200f::/48 maxlen: 48
2a01:5041:ea09::/48 maxlen: 48
2a01:5042:1::/48 maxlen: 48
2a01:5042:2001::/48 maxlen: 48
2a01:5041:ea15::/48 maxlen: 48
2a01:5041:1::/48 maxlen: 48
2a01:5041:2001::/48 maxlen: 48
2a01:5043:eff::/48 maxlen: 48
2a01:5043:2eff::/48 maxlen: 48
2a01:5041:efe::/48 maxlen: 48
2a01:5041:2efe::/48 maxlen: 48
2a01:5041:4efe::/48 maxlen: 48
2a01:5042:7::/48 maxlen: 48
2a01:5042:2007::/48 maxlen: 48
2a01:5043:efd::/48 maxlen: 48
2a01:5043:2efd::/48 maxlen: 48
2a01:5041:3000::/48 maxlen: 48
2a01:5041:4000::/48 maxlen: 48
2a01:5041::/48 maxlen: 48
2a01:5041:6000::/48 maxlen: 48
2a01:5041:2000::/48 maxlen: 48
2a01:5041:5000::/48 maxlen: 48
2a01:5041:1000::/48 maxlen: 48
2a01:5043:e::/48 maxlen: 48
2a01:5042:3::/48 maxlen: 48
2a01:5042:2003::/48 maxlen: 48
2a01:5041:efd::/48 maxlen: 48
2a01:5041:2efd::/48 maxlen: 48
2a01:5041:4efd::/48 maxlen: 48
2a01:5041:200e::/48 maxlen: 48
2a01:5041:400e::/48 maxlen: 48
2a01:5041:500e::/48 maxlen: 48
2a01:5041:600e::/48 maxlen: 48
2a01:5041:e::/48 maxlen: 48
2a01:5043:2000::/48 maxlen: 48
2a01:5043::/48 maxlen: 48
2a01:5041:6006::/48 maxlen: 48
2a01:5041:2006::/48 maxlen: 48
2a01:5041:6::/48 maxlen: 48
2a01:5041:1003::/48 maxlen: 48
2a01:5041:6003::/48 maxlen: 48
2a01:5041:2003::/48 maxlen: 48
2a01:5041:3003::/48 maxlen: 48
2a01:5041:4003::/48 maxlen: 48
2a01:5041:5003::/48 maxlen: 48
2a01:5041:3::/48 maxlen: 48
2a01:5041:1014::/48 maxlen: 48
2a01:5041:3014::/48 maxlen: 48
2a01:5041:ea14::/48 maxlen: 48
2a01:5043:b::/48 maxlen: 48
2a01:5041::/32 maxlen: 48
2a01:5041:ea16::/48 maxlen: 48
2a01:5042:200b::/48 maxlen: 48
2a01:5042:b::/48 maxlen: 48
2a01:5041:200b::/48 maxlen: 48
2a01:5041:400b::/48 maxlen: 48
2a01:5041:b::/48 maxlen: 48
2a01:5043:3::/48 maxlen: 48
2a01:5043:2003::/48 maxlen: 48
2a01:5041:8::/48 maxlen: 48
2a01:5041:6008::/48 maxlen: 48
2a01:5041:2008::/48 maxlen: 48
2a01:5042:200e::/48 maxlen: 48
2a01:5042:e::/48 maxlen: 48
2a01:5042:efd::/48 maxlen: 48
2a01:5042:2efd::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 Feb 2023 05:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:a9:fc:a6:d8:1c:5c:05:b6:4f:78:d2:a4:55:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Validity
Not Before: Jan 2 07:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb3befc028556a6b51db54358bd439cb87530a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:9c:42:70:e4:68:ac:f8:de:f9:7b:6c:c3:
cd:e8:08:95:8c:9b:cc:9e:b7:40:54:f1:bb:74:45:
bd:e5:49:a5:94:46:b5:c0:cb:a4:e1:71:68:c6:41:
e6:ee:c0:5e:2e:8b:7a:34:cd:44:86:94:a5:52:f3:
b0:a4:7c:08:54:d7:88:48:f7:02:35:12:e6:03:05:
ec:7c:56:5e:64:42:ae:02:0d:6f:57:22:43:0e:49:
3b:1f:11:24:be:ce:69:54:c9:42:80:e4:fe:4a:c6:
4d:a3:76:76:da:09:b1:7e:e4:48:8d:a6:b2:6e:ad:
63:90:b9:ef:01:72:15:af:f9:ec:ba:d6:86:54:24:
74:d7:63:5d:53:02:77:ba:ed:81:0a:2b:8d:c9:ca:
b3:59:2a:ed:12:b4:58:27:c3:9e:fe:a4:d4:e6:34:
b0:40:27:ff:2a:fe:c9:96:63:29:1a:b2:ec:e4:1a:
65:f6:8d:24:7a:a4:95:0c:71:c0:45:13:b1:93:a1:
0a:2c:dd:76:d9:43:e2:b1:5b:d5:b4:4f:2e:90:e4:
e3:e8:ec:4c:db:77:05:4b:54:23:d9:cf:47:7c:80:
11:78:c3:e7:c9:67:b0:2f:17:97:66:9a:ea:da:0b:
a3:7b:6b:03:d9:f8:f5:41:45:e4:ff:35:38:af:94:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3B:EF:C0:28:55:6A:6B:51:DB:54:35:8B:D4:39:CB:87:53:0A:0F
X509v3 Authority Key Identifier:
keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/yzvvwChVamtR21Q1i9Q5y4dTCg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.20.0/23
37.10.1.0/24
37.10.24.0/21
37.10.40.0-37.10.46.255
91.195.236.0/24
IPv6:
2a01:5041::/32
2a01:5042:1::/48
2a01:5042:3::/48
2a01:5042:7::/48
2a01:5042:b::/48
2a01:5042:e::/48
2a01:5042:efd::/48
2a01:5042:eff::/48
2a01:5042:2001::/48
2a01:5042:2003::/48
2a01:5042:2007::/48
2a01:5042:200b::/48
2a01:5042:200e::/48
2a01:5042:2efd::/48
2a01:5042:2eff::/48
2a01:5043::/48
2a01:5043:3::/48
2a01:5043:7::/48
2a01:5043:b::/48
2a01:5043:e::/48
2a01:5043:efd::/48
2a01:5043:eff::/48
2a01:5043:2000::/48
2a01:5043:2003::/48
2a01:5043:2007::/48
2a01:5043:2efd::/48
2a01:5043:2eff::/48
Signature Algorithm: sha256WithRSAEncryption
70:3e:93:c2:4e:dc:b6:da:7a:b2:81:ac:de:02:f3:11:f8:4d:
99:46:00:c0:9e:2d:00:f5:70:23:d2:44:af:ce:a1:7d:65:73:
dc:92:bc:4f:1a:53:1b:27:73:19:fd:35:c2:15:74:d8:87:b0:
a1:9a:f0:52:46:69:c0:28:45:ee:ff:a6:69:67:e6:85:2c:67:
a9:84:72:f1:d0:da:a2:78:a1:e2:ee:83:34:e7:a1:66:1b:52:
60:9d:ba:ad:4b:e6:f7:3e:88:fd:ce:fb:9b:01:ec:40:20:f5:
6b:45:9d:e0:c8:7a:17:04:7e:f7:4a:b4:ad:3c:5f:0d:fb:3d:
45:27:78:f2:b0:4a:56:41:40:de:03:04:c9:89:2e:be:a6:2d:
4e:e9:ee:fa:8b:fc:68:f4:ae:24:ff:1a:2a:b1:1e:29:72:a2:
7d:0e:99:1a:bd:5a:8e:e9:e3:11:82:2b:06:e8:5c:37:80:f1:
50:83:7d:9b:e9:2f:80:fc:20:ab:8e:60:ed:eb:20:77:10:f7:
06:e0:47:4f:a3:9a:ae:7d:cb:58:ed:b1:74:13:85:f1:e2:39:
35:b6:2d:d4:c2:be:a6:23:8f:af:8e:09:8a:8d:a4:3f:e4:ba:
b2:2d:a5:c8:7a:6a:5a:aa:68:e9:cd:89:93:1b:2d:00:b8:a9:
61:74:70:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:51 2024 by rpki-client on console-fra.rpki-client.org