Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/kYh36f0YdUvvuTwyW87_JP_us5E.roa
File: kYh36f0YdUvvuTwyW87_JP_us5E.roa (raw, json)
Hash identifier: DVxYvOUx/QV+WNXoUqY5dmtKsgwNzPVYskV/EXWehoM=
Subject key identifier: 91:88:77:E9:FD:18:75:4B:EF:B9:3C:32:5B:CE:FF:24:FF:EE:B3:91
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 018CC425318D8EF80E0FE37C109848345F7C
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/kYh36f0YdUvvuTwyW87_JP_us5E.roa
Signing time: Mon 01 Jan 2024 08:30:20 +0000
ROA not before: Mon 01 Jan 2024 08:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12693
IP address blocks: 82.193.255.0/24 maxlen: 24
212.204.32.0/19 maxlen: 24
82.193.224.0/19 maxlen: 24
85.199.96.0/20 maxlen: 24
149.249.48.0/21 maxlen: 21
92.42.224.0/21 maxlen: 21
153.92.72.0/21 maxlen: 24
185.90.156.0/22 maxlen: 24
156.67.224.0/21 maxlen: 21
85.199.64.0/18 maxlen: 24
85.199.74.0/24 maxlen: 24
2a01:a380::/48 maxlen: 48
2a01:a380::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:31:8d:8e:f8:0e:0f:e3:7c:10:98:48:34:5f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Jan 1 08:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=918877e9fd18754befb93c325bceff24ffeeb391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:0c:13:4f:d8:34:32:6a:1a:6b:0b:a9:33:
7a:0c:1b:fc:63:4f:a3:66:4c:cb:6a:43:5e:0a:87:
77:41:b6:da:e0:b9:68:b8:42:5f:76:70:a4:c1:47:
eb:9e:d5:35:5e:68:24:7b:2f:5a:46:26:63:eb:33:
50:fc:27:72:d2:09:ba:d8:8c:5a:ed:44:a6:0d:c7:
dd:90:66:41:ca:e4:0b:4a:3c:2e:5c:9a:5b:a2:0a:
17:58:10:2d:62:7c:eb:cd:ad:35:cf:f8:84:44:ab:
8f:9e:ae:b0:28:90:50:33:46:b9:93:0f:70:4b:0a:
1f:c9:0f:89:e0:a4:ba:20:6f:5b:c1:96:c1:10:2e:
9b:95:f8:ba:71:4c:4e:f7:3d:20:f2:29:65:14:93:
b3:ab:f9:8e:4d:d6:72:79:51:dd:fe:84:5b:5b:f6:
4b:2f:b5:c6:6e:73:66:ae:6b:54:fd:ac:6f:8d:70:
5d:ad:e2:6b:9f:a2:ca:ef:83:19:12:0a:10:81:5c:
8e:72:05:10:e3:93:81:cd:3e:7b:4f:ba:4a:b7:3d:
f9:71:f1:9b:35:69:e7:c3:0a:2f:06:aa:60:a8:f6:
89:41:0c:90:e2:51:77:af:e2:74:25:3e:60:99:b0:
67:29:bb:ad:cd:c8:1e:c9:d9:f2:96:f5:f3:3d:e4:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:88:77:E9:FD:18:75:4B:EF:B9:3C:32:5B:CE:FF:24:FF:EE:B3:91
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/kYh36f0YdUvvuTwyW87_JP_us5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.224.0/19
85.199.64.0/18
92.42.224.0/21
149.249.48.0/21
153.92.72.0/21
156.67.224.0/21
185.90.156.0/22
212.204.32.0/19
IPv6:
2a01:a380::/32
Signature Algorithm: sha256WithRSAEncryption
4c:eb:ee:4e:6f:ea:60:22:24:7f:cd:01:11:49:ab:bf:e5:95:
16:63:0e:d7:23:5d:b4:5a:df:db:6d:3e:b2:f3:0b:f8:fd:56:
8c:be:38:80:de:16:b3:59:1e:b9:2a:e3:b0:4c:18:b6:c8:c8:
bf:b1:f9:f6:33:fb:8a:c5:3b:e8:e9:88:c6:b8:41:dc:3b:d3:
14:e7:7a:de:15:eb:e0:c7:75:3a:4e:f0:2f:bd:fa:35:57:e3:
92:ef:7a:3c:f4:67:b8:4f:f8:3a:56:31:dc:db:9f:77:59:eb:
d1:65:8f:aa:37:c0:3a:26:a1:51:f6:7e:d8:5d:cc:7f:52:c4:
2f:bc:02:c0:a7:3c:51:94:d9:c5:d7:a8:8a:c6:f2:e9:1f:d5:
f6:f1:de:6e:e6:9f:5b:4b:96:2d:10:58:f2:13:12:2e:77:22:
c6:d1:33:35:30:dd:22:d8:28:8e:82:b3:bf:30:bb:80:4e:83:
00:c7:9c:45:93:9d:06:00:db:46:70:97:cc:9b:17:de:50:8b:
98:63:aa:8b:cb:52:1b:cc:9c:6d:14:7b:da:8f:02:20:28:e1:
13:09:49:52:3b:4f:e1:2b:c2:7f:1b:f7:26:42:79:8b:3a:02:
5f:81:e8:7b:29:30:5b:9c:74:a5:97:22:43:86:05:26:99:f2:
0f:57:90:1f
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAYzEJTGNjvgOD+N8EJhINF98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMWFjMzY5Yzk0NTY5MTRhMTJlMDJkZmZjOGRkNzk5NzRl
YjFlZjgwHhcNMjQwMTAxMDgzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTg4NzdlOWZkMTg3NTRiZWZiOTNjMzI1YmNlZmYyNGZmZWViMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoccME0/YNDJqGmsLqTN6DBv8Y0+j
ZkzLakNeCod3Qbba4LlouEJfdnCkwUfrntU1Xmgkey9aRiZj6zNQ/Cdy0gm62Ixa
7USmDcfdkGZByuQLSjwuXJpbogoXWBAtYnzrza01z/iERKuPnq6wKJBQM0a5kw9w
SwofyQ+J4KS6IG9bwZbBEC6blfi6cUxO9z0g8illFJOzq/mOTdZyeVHd/oRbW/ZL
L7XGbnNmrmtU/axvjXBdreJrn6LK74MZEgoQgVyOcgUQ45OBzT57T7pKtz35cfGb
NWnnwwovBqpgqPaJQQyQ4lF3r+J0JT5gmbBnKbutzcgeydnylvXzPeTbkwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFJGId+n9GHVL77k8MlvO/yT/7rORMB8GA1UdIwQY
MBaAFJ4aw2nJRWkUoS4C3/yN15l06x74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTct
ZDY4YzU3ZGI0Y2FlLzEva1loMzZmMFlkVXZ2dVR3eVc4N19KUF91czVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTctZDY4YzU3ZGI0Y2Fl
LzEvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQFUsHgAwQG
VcdAAwQDXCrgAwQDlfkwAwQDmVxIAwQDnEPgAwQCuVqcAwQF1MwgMA0EAgACMAcD
BQAqAaOAMA0GCSqGSIb3DQEBCwUAA4IBAQBM6+5Ob+pgIiR/zQERSau/5ZUWYw7X
I120Wt/bbT6y8wv4/VaMvjiA3hazWR65KuOwTBi2yMi/sfn2M/uKxTvo6YjGuEHc
O9MU53reFevgx3U6TvAvvfo1V+OS73o89Ge4T/g6VjHc2593WevRZY+qN8A6JqFR
9n7YXcx/UsQvvALApzxRlNnF16iKxvLpH9X28d5u5p9bS5YtEFjyExIudyLG0TM1
MN0i2CiOgrO/MLuAToMAx5xFk50GANtGcJfMmxfeUIuYY6qLy1IbzJxtFHvajwIg
KOETCUlSO0/hK8J/G/cmQnmLOgJfgeh7KTBbnHSllyJDhgUmmfIPV5Af
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:00 2025 by rpki-client