Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/ynsq8zHlaZ5ASEu3CiNkBTbGbj4.roa
File: ynsq8zHlaZ5ASEu3CiNkBTbGbj4.roa (raw, json)
Hash identifier: ZWcZSibrBfWx0U1I7MGRC9PwZ217Pij+an5E32vLuMM=
Subject key identifier: CA:7B:2A:F3:31:E5:69:9E:40:48:4B:B7:0A:23:64:05:36:C6:6E:3E
Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial: 018CC2DAF793C2261ED20A2BACBD76908543
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/ynsq8zHlaZ5ASEu3CiNkBTbGbj4.roa
Signing time: Mon 01 Jan 2024 02:29:39 +0000
ROA not before: Mon 01 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21488
IP address blocks: 217.66.96.0/21 maxlen: 21
217.66.104.0/21 maxlen: 21
193.110.106.0/23 maxlen: 23
194.246.116.0/23 maxlen: 23
2a0f:c240::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f7:93:c2:26:1e:d2:0a:2b:ac:bd:76:90:85:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Validity
Not Before: Jan 1 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca7b2af331e5699e40484bb70a23640536c66e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:c2:a1:0b:d7:ba:65:eb:95:3b:9e:74:53:
f4:49:9e:83:32:78:b5:ee:1c:8b:61:c2:17:18:3b:
4c:6b:bf:f7:30:2b:d5:c9:18:50:2c:94:28:05:11:
06:5a:69:e0:b4:65:93:b6:55:25:22:75:01:ce:89:
31:7e:ac:b4:d4:38:e4:95:ed:55:20:e3:a6:6e:c7:
90:91:c2:e1:82:68:1a:51:fe:1d:92:94:44:4d:a8:
b8:84:e3:be:e4:ad:b7:d4:30:55:a2:d2:db:14:54:
ca:a5:10:ef:85:12:33:d9:a8:90:55:3c:ee:6a:6d:
58:e3:38:fd:cc:b8:cd:4b:ff:d9:c4:cf:aa:10:ca:
8a:fa:65:00:a1:7d:b4:b8:64:b1:03:96:2f:7b:b9:
0c:f3:bd:44:3e:63:ab:96:0d:b0:e1:f7:9f:0e:71:
cd:7e:42:78:a8:3f:3d:fb:36:76:6a:70:50:8b:90:
4d:da:fd:99:20:ae:5a:8e:98:ba:57:47:d7:0f:db:
f4:af:51:01:39:27:81:e8:8e:64:6e:01:56:ad:85:
2e:39:c9:d9:d5:0d:bc:69:46:a5:76:9a:50:e1:72:
54:ff:7f:d7:56:fd:57:ef:40:ca:d5:d3:d4:e6:3d:
61:d3:01:7e:06:04:3e:b5:ce:c7:fa:4f:0e:14:ad:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7B:2A:F3:31:E5:69:9E:40:48:4B:B7:0A:23:64:05:36:C6:6E:3E
X509v3 Authority Key Identifier:
keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/ynsq8zHlaZ5ASEu3CiNkBTbGbj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.106.0/23
194.246.116.0/23
217.66.96.0/20
IPv6:
2a0f:c240::/29
Signature Algorithm: sha256WithRSAEncryption
c3:d6:39:89:98:10:d7:28:78:d4:58:eb:ac:63:51:12:99:14:
bd:24:4d:1c:3c:f6:c3:f2:cb:7c:e5:c3:8a:c9:78:ee:6c:72:
fb:1b:c6:9b:d2:b2:0f:7b:44:9f:a2:cd:44:5e:c3:9f:24:4e:
77:ae:99:36:58:5d:b5:79:cd:85:02:28:1c:04:a4:fa:4f:2c:
a6:d4:6f:5d:15:6b:df:2d:73:7f:fc:7c:77:6f:98:40:0a:24:
77:94:23:67:77:94:99:de:98:12:3a:a7:e7:be:8c:87:cd:1d:
7f:10:1d:61:44:e2:e6:22:8e:73:81:51:b4:1c:f2:df:9f:df:
4a:86:9f:c4:59:f7:6f:27:c7:66:8b:b0:8a:4d:fe:cd:7b:8b:
3e:ce:f9:6b:b2:a5:ca:4a:1c:37:e6:72:98:f8:a3:94:b5:9d:
08:ea:e6:1c:64:82:5d:f7:30:7f:8e:96:db:80:fa:79:9a:36:
19:6c:94:ff:f2:0b:d1:7e:9b:f7:f4:8e:46:19:07:af:c6:21:
65:da:74:1b:43:85:d4:cf:7a:4c:8f:dc:35:da:c5:4a:9c:7b:
53:de:94:1f:0a:05:a1:18:9b:54:02:74:1b:d5:b4:5c:e8:69:
05:f3:ed:0e:4a:d8:78:49:ed:42:2b:2e:29:df:73:04:b5:28:
5b:40:fa:36
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzC2veTwiYe0gorrL12kIVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZmNiNjQzZTZhMjFlMmZiNmUyMWNkMDY1M2FiMDk1ZTll
YmVmMTMwHhcNMjQwMTAxMDIyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTdiMmFmMzMxZTU2OTllNDA0ODRiYjcwYTIzNjQwNTM2YzY2ZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVnCoQvXumXrlTuedFP0SZ6DMni1
7hyLYcIXGDtMa7/3MCvVyRhQLJQoBREGWmngtGWTtlUlInUBzokxfqy01Djkle1V
IOOmbseQkcLhgmgaUf4dkpRETai4hOO+5K231DBVotLbFFTKpRDvhRIz2aiQVTzu
am1Y4zj9zLjNS//ZxM+qEMqK+mUAoX20uGSxA5Yve7kM871EPmOrlg2w4fefDnHN
fkJ4qD89+zZ2anBQi5BN2v2ZIK5ajpi6V0fXD9v0r1EBOSeB6I5kbgFWrYUuOcnZ
1Q28aUaldppQ4XJU/3/XVv1X70DK1dPU5j1h0wF+BgQ+tc7H+k8OFK1NVQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFMp7KvMx5WmeQEhLtwojZAU2xm4+MB8GA1UdIwQY
MBaAFNr8tkPmoh4vtuIc0GU6sJXp6+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2Ut
ZGUyZGUxNWY5MGVkLzEveW5zcTh6SGxhWjVBU0V1M0NpTmtCVGJHYmo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2UtZGUyZGUxNWY5MGVk
LzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBwW5qAwQB
wvZ0AwQE2UJgMA0EAgACMAcDBQMqD8JAMA0GCSqGSIb3DQEBCwUAA4IBAQDD1jmJ
mBDXKHjUWOusY1ESmRS9JE0cPPbD8st85cOKyXjubHL7G8ab0rIPe0Sfos1EXsOf
JE53rpk2WF21ec2FAigcBKT6Tyym1G9dFWvfLXN//Hx3b5hACiR3lCNnd5SZ3pgS
OqfnvoyHzR1/EB1hROLmIo5zgVG0HPLfn99Khp/EWfdvJ8dmi7CKTf7Ne4s+zvlr
sqXKShw35nKY+KOUtZ0I6uYcZIJd9zB/jpbbgPp5mjYZbJT/8gvRfpv39I5GGQev
xiFl2nQbQ4XUz3pMj9w12sVKnHtT3pQfCgWhGJtUAnQb1bRc6GkF8+0OSth4Se1C
Ky4p33MEtShbQPo2
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:33 2025 by rpki-client