Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/YBNLHB0wqyYcFGr45glyALO9tvw.roa
File: YBNLHB0wqyYcFGr45glyALO9tvw.roa (raw, json)
Hash identifier: NG+ZyRQ5w+6ZH8DTUNu0LQOw0wwPYvvnz5ZyxatLXiM=
Subject key identifier: 60:13:4B:1C:1D:30:AB:26:1C:14:6A:F8:E6:09:72:00:B3:BD:B6:FC
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 018CC801CB9A5B0A63A0FA57F82CF79F2F75
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/YBNLHB0wqyYcFGr45glyALO9tvw.roa
Signing time: Tue 02 Jan 2024 02:30:10 +0000
ROA not before: Tue 02 Jan 2024 02:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5605
IP address blocks: 193.101.58.0/24 maxlen: 24
193.102.227.0/24 maxlen: 24
195.244.226.0/24 maxlen: 24
195.244.225.0/24 maxlen: 24
195.244.224.0/24 maxlen: 24
195.244.228.0/24 maxlen: 24
195.244.227.0/24 maxlen: 24
195.244.233.0/24 maxlen: 24
195.244.232.0/24 maxlen: 24
195.244.229.0/24 maxlen: 24
195.244.231.0/24 maxlen: 24
195.244.230.0/24 maxlen: 24
195.244.240.0/24 maxlen: 24
195.244.239.0/24 maxlen: 24
195.244.236.0/24 maxlen: 24
195.244.238.0/24 maxlen: 24
195.244.237.0/24 maxlen: 24
195.244.235.0/24 maxlen: 24
195.244.234.0/24 maxlen: 24
195.244.242.0/24 maxlen: 24
195.244.241.0/24 maxlen: 24
195.244.246.0/24 maxlen: 24
195.244.243.0/24 maxlen: 24
195.244.245.0/24 maxlen: 24
195.244.244.0/24 maxlen: 24
193.98.110.0/24 maxlen: 24
195.244.253.0/24 maxlen: 24
195.244.250.0/24 maxlen: 24
195.244.252.0/24 maxlen: 24
195.244.251.0/24 maxlen: 24
195.244.247.0/24 maxlen: 24
195.244.249.0/24 maxlen: 24
195.244.248.0/24 maxlen: 24
195.244.254.0/24 maxlen: 24
195.244.255.0/24 maxlen: 24
2a00:fa8::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 May 2024 08:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:cb:9a:5b:0a:63:a0:fa:57:f8:2c:f7:9f:2f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Jan 2 02:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60134b1c1d30ab261c146af8e6097200b3bdb6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2b:97:48:5a:4d:0e:cf:aa:48:5e:37:80:b9:
49:78:32:12:3e:c7:69:ed:e9:b6:5f:88:09:cf:9b:
19:e9:51:84:9c:56:98:38:29:f2:c6:7d:06:de:45:
c7:1a:04:b7:d5:66:50:de:c4:7a:76:b4:42:85:d5:
b0:1b:33:20:34:df:7c:1c:d4:7d:89:1c:a2:1f:ce:
b7:65:61:17:a1:b8:5f:2a:81:fd:bd:53:13:6e:95:
4d:7d:11:08:19:77:a7:01:66:f2:12:93:8c:a7:a4:
d5:ad:1b:c1:54:93:23:c2:f4:63:67:3e:26:43:48:
bc:ec:b8:06:5a:df:30:5a:5a:f9:0b:29:a3:22:48:
a0:57:9e:86:b4:1f:33:b8:42:00:c1:e8:00:a2:b2:
e8:70:2b:ca:a3:a1:3b:e6:0e:7a:60:d4:a0:65:87:
15:82:ca:7b:41:df:0f:64:a1:6e:60:77:f9:fd:c7:
87:34:59:2d:e8:62:fa:fc:93:35:78:77:ce:3e:4b:
ba:d0:9c:74:cb:88:9e:5b:68:72:83:7f:8b:9b:a0:
b8:fa:0f:9b:11:b7:6c:6d:93:02:63:38:f7:aa:89:
b7:cd:0b:1b:a9:8a:63:bf:ea:94:09:42:5d:c7:78:
2c:df:e3:64:5b:2f:db:b5:9f:3a:66:45:dd:75:de:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:13:4B:1C:1D:30:AB:26:1C:14:6A:F8:E6:09:72:00:B3:BD:B6:FC
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/YBNLHB0wqyYcFGr45glyALO9tvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.98.110.0/24
193.101.58.0/24
193.102.227.0/24
195.244.224.0/19
IPv6:
2a00:fa8::/32
Signature Algorithm: sha256WithRSAEncryption
aa:7c:3e:2b:00:94:c2:c4:b6:c6:fe:09:e0:d8:9e:44:40:87:
23:76:11:ec:3a:e9:0e:9e:6a:fd:5a:01:0d:45:d5:a1:63:ac:
3a:85:82:69:1f:40:d4:79:f6:6b:60:2c:9c:62:7f:17:4f:12:
4e:dc:fc:68:06:88:11:bf:9f:08:7f:fe:99:2a:ec:1c:c7:0d:
e5:2b:f8:f9:20:f7:b9:7b:ac:04:9e:51:1a:8c:1e:d3:ea:bd:
94:de:5f:c5:d2:94:78:37:1d:5b:d0:af:dd:7d:9a:8f:53:8d:
e0:0f:ed:d3:8d:8b:89:98:ac:08:b9:f5:d7:9e:75:61:a2:d6:
d7:d2:ba:f4:13:f4:a1:50:fb:4e:83:b1:7c:56:98:bf:b3:80:
c9:7e:c1:69:fd:6e:68:ed:d9:ce:59:7e:1a:5c:7e:d0:40:b8:
a2:36:06:7b:4a:ff:68:05:27:b0:10:67:cb:9d:e1:a0:df:aa:
2a:47:7c:20:05:0c:f7:f9:f4:eb:87:60:74:35:a9:77:92:19:
b5:50:32:f3:5a:48:95:8e:f3:38:01:17:f6:6c:d4:81:05:c3:
ae:9f:9e:e1:2b:52:1f:97:4f:2f:56:ba:ef:a4:5b:73:dc:1a:
69:02:79:3e:6b:75:09:97:be:5d:06:f9:ef:e8:15:5e:eb:e0:
7c:0a:a1:2d
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzIAcuaWwpjoPpX+Cz3ny91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmFkMmY0ZmZjNTg3MmUzNWE0MjllNTNlZjE3OTkyNWZm
NDIxNWUwHhcNMjQwMTAyMDIzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDEzNGIxYzFkMzBhYjI2MWMxNDZhZjhlNjA5NzIwMGIzYmRiNmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSuXSFpNDs+qSF43gLlJeDISPsdp
7em2X4gJz5sZ6VGEnFaYOCnyxn0G3kXHGgS31WZQ3sR6drRChdWwGzMgNN98HNR9
iRyiH863ZWEXobhfKoH9vVMTbpVNfREIGXenAWbyEpOMp6TVrRvBVJMjwvRjZz4m
Q0i87LgGWt8wWlr5CymjIkigV56GtB8zuEIAwegAorLocCvKo6E75g56YNSgZYcV
gsp7Qd8PZKFuYHf5/ceHNFkt6GL6/JM1eHfOPku60Jx0y4ieW2hyg3+Lm6C4+g+b
EbdsbZMCYzj3qom3zQsbqYpjv+qUCUJdx3gs3+NkWy/btZ86ZkXddd49CQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFGATSxwdMKsmHBRq+OYJcgCzvbb8MB8GA1UdIwQY
MBaAFAVq0vT/xYcuNaQp5T7xeZJf9CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDkt
MWU0ZmNiMWM2MGNiLzEvWUJOTEhCMHdxeVljRkdyNDVnbHlBTE85dHZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDktMWU0ZmNiMWM2MGNi
LzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwWJuAwQA
wWU6AwQAwWbjAwQFw/TgMA0EAgACMAcDBQAqAA+oMA0GCSqGSIb3DQEBCwUAA4IB
AQCqfD4rAJTCxLbG/gng2J5EQIcjdhHsOukOnmr9WgENRdWhY6w6hYJpH0DUefZr
YCycYn8XTxJO3PxoBogRv58If/6ZKuwcxw3lK/j5IPe5e6wEnlEajB7T6r2U3l/F
0pR4Nx1b0K/dfZqPU43gD+3TjYuJmKwIufXXnnVhotbX0rr0E/ShUPtOg7F8Vpi/
s4DJfsFp/W5o7dnOWX4aXH7QQLiiNgZ7Sv9oBSewEGfLneGg36oqR3wgBQz3+fTr
h2B0Nal3khm1UDLzWkiVjvM4ARf2bNSBBcOun57hK1Ifl08vVrrvpFtz3BppAnk+
a3UJl75dBvnv6BVe6+B8CqEt
-----END CERTIFICATE-----
Generated at Thu May 16 12:16:22 2024 by rpki-client on console-ams.rpki-client.org