Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/yixk9VaiXBMuxQCDaHTysSlu0P8.roa
File: yixk9VaiXBMuxQCDaHTysSlu0P8.roa (raw, json)
Hash identifier: wotIdUukI33t4V/hgetCaB/N9KBQ9PAnt80MFC1pRas=
Subject key identifier: CA:2C:64:F5:56:A2:5C:13:2E:C5:00:83:68:74:F2:B1:29:6E:D0:FF
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C3501DE652B708379F85F6E48A226
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/yixk9VaiXBMuxQCDaHTysSlu0P8.roa
Signing time: Mon 02 Jan 2023 05:55:03 +0000
ROA not before: Mon 02 Jan 2023 05:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205090
IP address blocks: 185.112.102.0/24 maxlen: 24
185.112.101.0/24 maxlen: 24
185.112.103.0/24 maxlen: 24
45.9.73.0/24 maxlen: 24
45.9.75.0/24 maxlen: 24
193.162.143.0/24 maxlen: 24
185.233.83.0/24 maxlen: 24
185.105.90.0/24 maxlen: 24
185.105.88.0/24 maxlen: 24
185.105.91.0/24 maxlen: 24
185.105.89.0/24 maxlen: 24
185.221.162.0/24 maxlen: 24
45.95.202.0/24 maxlen: 24
185.102.139.0/24 maxlen: 24
45.95.203.0/24 maxlen: 24
45.90.216.0/24 maxlen: 24
45.90.218.0/24 maxlen: 24
45.90.217.0/24 maxlen: 24
45.90.219.0/24 maxlen: 24
84.252.73.0/24 maxlen: 24
84.252.75.0/24 maxlen: 24
84.252.74.0/24 maxlen: 24
185.233.200.0/24 maxlen: 24
185.232.169.0/24 maxlen: 24
185.128.105.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
85.209.2.0/24 maxlen: 24
185.103.109.0/24 maxlen: 24
185.128.107.0/24 maxlen: 24
185.128.106.0/24 maxlen: 24
193.168.227.0/24 maxlen: 24
185.217.198.0/24 maxlen: 24
185.217.199.0/24 maxlen: 24
185.104.251.0/24 maxlen: 24
2a09:5302:ffff::/48 maxlen: 48
2a0e:d603::/32 maxlen: 32
2a09:5302::/32 maxlen: 32
2a0d:2dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 07 Apr 2023 15:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:35:01:de:65:2b:70:83:79:f8:5f:6e:48:a2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca2c64f556a25c132ec500836874f2b1296ed0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e7:d7:0d:73:08:97:e3:cf:b7:8e:37:08:bb:
d1:3c:67:94:2f:0b:20:fa:2e:13:5e:20:5a:9d:e3:
eb:bd:df:c2:ac:1a:27:e7:86:63:20:60:ff:35:53:
1b:bd:8d:e9:43:69:05:c9:83:c8:53:7b:45:23:78:
41:ac:21:3b:0e:6d:f8:b9:90:89:4e:13:db:ce:e4:
18:cd:35:e3:83:5e:34:c0:9a:9b:4b:6f:79:2e:01:
d8:cd:c4:5c:45:ab:e2:da:c0:f7:9e:82:3c:c7:a9:
67:9e:7c:0a:5b:49:58:af:81:6d:cf:26:91:1d:99:
47:a7:a8:ad:0d:dd:0b:5b:00:8c:06:04:17:fd:fe:
91:49:b8:fc:11:89:7d:b9:9d:f2:48:0b:d7:1a:f3:
57:8d:73:c3:b1:50:44:c9:7a:68:02:b4:e7:fe:62:
d9:2b:1a:ed:c5:1b:ad:65:f4:36:66:6c:7d:f2:3e:
ae:e9:54:26:8d:1d:18:bf:c4:0d:0b:fe:9e:c3:63:
b5:53:02:6a:83:8d:8f:14:7c:ee:37:71:d0:e8:9a:
fc:a6:98:8c:ba:c5:42:96:5a:01:1c:92:8a:37:0e:
fb:04:e1:2f:c9:41:f5:08:e4:e8:75:fa:13:ad:bc:
04:1a:7c:fb:1a:82:d5:3e:4a:98:eb:8f:21:be:8a:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:64:F5:56:A2:5C:13:2E:C5:00:83:68:74:F2:B1:29:6E:D0:FF
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/yixk9VaiXBMuxQCDaHTysSlu0P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.0/24
45.9.75.0/24
45.89.65.0/24
45.90.216.0/22
45.95.202.0/23
84.252.73.0-84.252.75.255
85.209.2.0/24
185.102.139.0/24
185.103.109.0/24
185.104.251.0/24
185.105.88.0/22
185.112.101.0-185.112.103.255
185.128.105.0-185.128.107.255
185.217.198.0/23
185.221.162.0/24
185.232.169.0/24
185.233.83.0/24
185.233.200.0/24
193.162.143.0/24
193.168.227.0/24
IPv6:
2a09:5302::/32
2a0d:2dc0::/29
2a0e:d603::/32
Signature Algorithm: sha256WithRSAEncryption
18:51:70:94:8b:a7:5d:c7:1f:14:5d:33:8a:13:8b:e4:cc:2d:
6a:21:85:ce:da:54:3a:32:49:1e:bb:68:c9:1c:ac:3a:22:b6:
7a:50:5f:05:e4:49:5d:e7:60:a6:43:42:b6:39:e1:4f:a7:83:
09:f9:8e:32:b7:91:d8:f4:2d:a3:50:35:19:ab:f2:10:d0:61:
c9:16:bc:56:41:ad:f9:ea:8c:67:ac:aa:39:27:57:b9:53:9f:
be:9d:69:93:b8:95:fb:34:8d:41:cf:5c:0e:13:01:dd:2a:6c:
97:9e:6e:da:f0:7f:8f:38:89:62:38:4c:75:14:86:2f:fb:37:
25:2b:31:d9:a2:a7:e1:d4:3e:6e:5e:bf:cc:e5:2c:2c:35:9f:
35:46:7c:a0:88:47:29:ef:24:ac:15:b7:ce:f7:45:80:9c:c5:
6d:16:22:f7:fd:23:24:7b:a3:84:64:7e:09:af:bf:91:1b:1c:
be:25:0d:78:70:fa:8a:73:1e:37:b5:ee:7e:26:f2:cb:41:54:
0a:1e:e3:d7:33:b5:eb:a4:80:ea:82:bb:83:6d:a6:25:83:6f:
37:36:9a:ee:83:02:55:ac:87:5f:14:76:29:62:e6:b5:9c:2b:
a9:f7:92:34:eb:5f:bc:ec:66:2d:3c:ad:db:6c:98:98:f5:7f:
e5:7a:bc:f5
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYVxDDUB3mUrcIN5+F9uSKImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwMTAyMDU1NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTJjNjRmNTU2YTI1YzEzMmVjNTAwODM2ODc0ZjJiMTI5NmVkMGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgufXDXMIl+PPt443CLvRPGeULwsg
+i4TXiBanePrvd/CrBon54ZjIGD/NVMbvY3pQ2kFyYPIU3tFI3hBrCE7Dm34uZCJ
ThPbzuQYzTXjg140wJqbS295LgHYzcRcRavi2sD3noI8x6lnnnwKW0lYr4FtzyaR
HZlHp6itDd0LWwCMBgQX/f6RSbj8EYl9uZ3ySAvXGvNXjXPDsVBEyXpoArTn/mLZ
KxrtxRutZfQ2Zmx98j6u6VQmjR0Yv8QNC/6ew2O1UwJqg42PFHzuN3HQ6Jr8ppiM
usVClloBHJKKNw77BOEvyUH1COTodfoTrbwEGnz7GoLVPkqY648hvoqinwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFMosZPVWolwTLsUAg2h08rEpbtD/MB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEveWl4azlWYWlYQk11eFFDRGFIVHlzU2x1MFA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHKBggrBgEFBQcBBwEB/wSBujCBtzCBlwQCAAEwgZADBAAt
CUkDBAAtCUsDBAAtWUEDBAItWtgDBAEtX8owDAMEAFT8SQMEAlT8SAMEAFXRAgME
ALlmiwMEALlnbQMEALlo+wMEArlpWDAMAwQAuXBlAwQDuXBgMAwDBAC5gGkDBAK5
gGgDBAG52cYDBAC53aIDBAC56KkDBAC56VMDBAC56cgDBADBoo8DBADBqOMwGwQC
AAIwFQMFACoJUwIDBQMqDS3AAwUAKg7WAzANBgkqhkiG9w0BAQsFAAOCAQEAGFFw
lIunXccfFF0zihOL5MwtaiGFztpUOjJJHrtoyRysOiK2elBfBeRJXedgpkNCtjnh
T6eDCfmOMreR2PQto1A1GavyENBhyRa8VkGt+eqMZ6yqOSdXuVOfvp1pk7iV+zSN
Qc9cDhMB3Spsl55u2vB/jziJYjhMdRSGL/s3JSsx2aKn4dQ+bl6/zOUsLDWfNUZ8
oIhHKe8krBW3zvdFgJzFbRYi9/0jJHujhGR+Ca+/kRscviUNeHD6inMeN7Xufiby
y0FUCh7j1zO166SA6oK7g22mJYNvNzaa7oMCVayHXxR2KWLmtZwrqfeSNOtfvOxm
LTyt22yYmPV/5Xq89Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org