Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/yYn9kncrg-gdevt6cSWsB-CCYGw.roa
File: yYn9kncrg-gdevt6cSWsB-CCYGw.roa (raw, json)
Hash identifier: BO8q7Akt8jZZQsZzh1Li+gm7/aji35rR6itlxAuNKgg=
Subject key identifier: C9:89:FD:92:77:2B:83:E8:1D:7A:FB:7A:71:25:AC:07:E0:82:60:6C
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0194127EFA1DF324DF4C4346A0628D79C033
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/yYn9kncrg-gdevt6cSWsB-CCYGw.roa
Signing time: Sun 29 Dec 2024 12:58:18 +0000
ROA not before: Sun 29 Dec 2024 12:58:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21341
IP address blocks: 62.220.96.0/21 maxlen: 24
62.220.104.0/21 maxlen: 24
62.220.120.0/22 maxlen: 22
62.220.124.0/23 maxlen: 23
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.48.0/22 maxlen: 24
81.12.58.0/24 maxlen: 24
81.12.59.0/24 maxlen: 24
87.107.0.0/21 maxlen: 24
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
87.107.40.0/24 maxlen: 24
87.107.41.0/24 maxlen: 24
87.107.42.0/23 maxlen: 23
87.107.50.0/23 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 24
87.107.88.0/22 maxlen: 22
87.107.96.0/22 maxlen: 24
87.107.106.0/23 maxlen: 24
87.107.112.0/22 maxlen: 24
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 23
87.107.132.0/23 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.173.0/24 maxlen: 24
87.107.232.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
2a00:1198::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:7e:fa:1d:f3:24:df:4c:43:46:a0:62:8d:79:c0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Dec 29 12:58:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c989fd92772b83e81d7afb7a7125ac07e082606c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:50:56:48:01:8f:45:0b:5d:86:87:76:f6:
28:df:eb:e7:11:16:af:c4:a5:78:31:be:3b:8d:43:
a9:f3:4e:6b:0d:64:f8:f8:20:72:52:b0:1c:5a:bc:
35:ff:7b:ae:91:91:1c:1a:23:bb:03:78:19:eb:d7:
63:8c:fa:ed:8e:88:96:a1:0e:3e:9d:97:c8:77:a1:
a4:56:f0:3f:0a:d6:db:f4:e8:ee:f3:e0:73:07:01:
70:ab:f4:ea:db:de:82:b1:45:e6:e9:dc:98:ab:2d:
15:3f:9b:ed:b5:92:a9:8e:91:ad:59:8e:08:39:58:
03:6c:0c:ce:c8:bb:3c:62:5b:81:fc:28:53:3e:fb:
3e:0e:97:07:35:b2:f0:48:b0:3e:00:95:42:3b:6e:
e0:6b:68:59:e3:43:3e:ed:02:88:a5:ac:58:f2:9f:
b5:ef:44:ba:43:d2:3f:8f:d4:6b:f2:74:bd:e0:ee:
7d:00:73:49:c0:43:65:a0:c8:d3:1f:6f:7e:a0:7b:
7d:20:85:7b:f9:d4:9e:14:41:29:e7:6f:8c:ff:93:
20:05:b3:75:61:1f:93:f1:42:13:35:92:b3:50:04:
8f:ba:4b:2d:ec:33:0c:2a:4a:e9:0f:e4:ca:51:08:
f2:0e:29:62:c8:42:b1:3f:5f:7c:fa:8f:af:e4:40:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:89:FD:92:77:2B:83:E8:1D:7A:FB:7A:71:25:AC:07:E0:82:60:6C
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/yYn9kncrg-gdevt6cSWsB-CCYGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0/20
62.220.120.0-62.220.125.255
81.12.8.0-81.12.23.255
81.12.48.0/22
81.12.58.0/23
87.107.0.0/21
87.107.24.0/22
87.107.34.0/23
87.107.40.0/22
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.106.0/23
87.107.112.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.168.0/22
87.107.173.0/24
87.107.232.0/24
185.60.136.0/22
IPv6:
2a00:1198::/32
Signature Algorithm: sha256WithRSAEncryption
c9:8c:9c:21:c2:38:8d:99:0a:17:bd:0c:8b:0c:ce:d6:60:d1:
ff:62:c9:8b:23:ad:51:39:b3:44:77:27:6b:5f:a0:c2:e7:b0:
94:ef:df:3d:36:ec:5b:a4:61:11:ab:1c:06:be:fe:5d:c3:5f:
88:da:c7:11:56:4a:ac:45:6b:e2:81:f8:3d:6f:23:1e:b4:f6:
87:39:21:90:b7:29:b6:60:eb:e9:1e:90:d3:a3:73:04:8d:99:
c3:98:b8:08:da:00:6b:e2:27:16:76:9a:8f:cc:6b:ba:f7:4d:
f4:0a:b2:b8:6d:d9:df:7f:fa:23:64:ee:d4:ab:28:fb:2e:68:
37:b0:35:db:a3:28:2d:51:fb:a0:5b:c5:9a:af:22:1a:c1:5e:
1a:17:c9:2c:35:76:91:81:bf:b5:7a:ba:f2:75:a0:6d:30:19:
6c:c1:11:84:f5:76:08:18:85:35:51:fa:2c:6f:ab:dd:01:d3:
e5:d4:c7:f8:6b:95:3c:65:60:9c:37:c3:2b:08:55:f2:97:7d:
ab:ab:1c:ea:2f:19:c4:b4:97:a2:34:d6:bd:25:78:a7:e0:13:
e7:d2:e1:fc:1c:89:05:90:6e:d3:9c:d1:5f:6e:85:fd:dd:6d:
72:c1:06:73:31:6c:d6:36:6c:8f:67:1a:f2:25:ad:2f:6a:69:
81:8e:cf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:22:16 2025 by rpki-client