Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/YTnfXssyNxZfKE-0LlQA4ukYtVA.roa
File: YTnfXssyNxZfKE-0LlQA4ukYtVA.roa (raw, json)
Hash identifier: Ygdot0+YPxW90O02q4HjSfmoAj4/1A8QpWh0fMTcq20=
Subject key identifier: 61:39:DF:5E:CB:32:37:16:5F:28:4F:B4:2E:54:00:E2:E9:18:B5:50
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 0192246F542A514D845A52DAF280C4EADBB2
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/YTnfXssyNxZfKE-0LlQA4ukYtVA.roa
Signing time: Tue 24 Sep 2024 14:28:48 +0000
ROA not before: Tue 24 Sep 2024 14:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31122
IP address blocks: 37.46.16.0/21 maxlen: 21
46.183.104.0/23 maxlen: 23
78.137.128.0/18 maxlen: 18
78.143.128.0/18 maxlen: 18
80.93.16.0/20 maxlen: 20
83.147.128.0/18 maxlen: 18
84.203.0.0/16 maxlen: 16
89.16.64.0/19 maxlen: 19
89.184.32.0/22 maxlen: 22
89.184.40.0/21 maxlen: 21
89.184.48.0/21 maxlen: 21
89.184.56.0/23 maxlen: 23
89.234.64.0/18 maxlen: 18
91.142.96.0/20 maxlen: 20
92.51.192.0/19 maxlen: 19
92.51.208.0/20 maxlen: 20
92.51.240.0/20 maxlen: 20
92.51.240.0/21 maxlen: 21
93.92.8.0/21 maxlen: 21
94.247.48.0/21 maxlen: 21
109.106.96.0/20 maxlen: 20
109.106.112.0/21 maxlen: 21
109.106.124.0/22 maxlen: 22
176.52.216.0/22 maxlen: 22
176.52.220.0/23 maxlen: 23
185.47.144.0/22 maxlen: 22
185.53.32.0/24 maxlen: 24
185.53.35.0/24 maxlen: 24
185.182.72.0/22 maxlen: 22
185.205.228.0/22 maxlen: 22
185.233.176.0/22 maxlen: 22
185.242.236.0/23 maxlen: 23
212.126.32.0/19 maxlen: 19
212.126.60.0/22 maxlen: 22
217.78.0.0/20 maxlen: 20
2001:1bb8::/32 maxlen: 32
2a00:15b8::/32 maxlen: 32
2a00:15b8:400::/40 maxlen: 40
2a01:258::/32 maxlen: 32
2a01:8aa0::/32 maxlen: 32
2a02:220::/32 maxlen: 32
2a0a:e780::/29 maxlen: 30
2a0b:bc0::/29 maxlen: 30
Validation: Failed, certificate revoked on Wed 25 Sep 2024 08:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:24:6f:54:2a:51:4d:84:5a:52:da:f2:80:c4:ea:db:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Sep 24 14:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6139df5ecb3237165f284fb42e5400e2e918b550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ce:b2:fa:15:5d:2a:f9:98:13:21:c9:9d:e9:
41:ce:bf:05:80:17:b4:40:7f:2a:50:9a:ec:02:3c:
ef:e0:a2:ce:1c:57:ff:34:03:ab:ac:4a:14:e5:cb:
95:b6:7b:dd:52:e4:8f:92:98:cf:ad:e1:9c:f3:13:
a4:0b:9c:f2:a3:ca:4b:e6:66:c8:d3:ea:ba:5c:07:
31:e6:f0:2d:ef:03:9d:f4:39:9b:ec:b6:f3:b3:07:
9d:49:a3:21:87:cc:2f:61:c1:ec:62:0a:4c:5d:74:
7f:8a:2e:11:45:77:33:86:d4:80:1c:3a:b7:3b:27:
37:41:74:9c:ae:a0:b7:24:9f:7e:bd:0b:82:1e:59:
0e:87:fa:64:0d:8e:c4:81:1f:9f:42:5f:74:1a:0c:
e3:57:43:53:0e:50:35:0a:55:b6:21:8a:02:83:54:
79:37:08:e2:99:4a:39:91:c8:d5:e1:74:1c:d4:50:
a3:d7:01:94:f8:1a:3c:28:fc:c8:24:a8:ca:ef:fc:
a2:2d:c6:e7:59:dd:b1:12:03:79:2f:22:bb:d2:01:
ef:93:13:6b:65:78:39:0c:ab:6d:ce:6a:96:a9:ab:
de:ca:3f:29:09:58:55:02:82:10:67:b5:c6:47:20:
9b:8e:18:f9:ac:39:c6:33:d1:dd:c1:e7:59:bf:fa:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:39:DF:5E:CB:32:37:16:5F:28:4F:B4:2E:54:00:E2:E9:18:B5:50
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/YTnfXssyNxZfKE-0LlQA4ukYtVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.16.0/21
46.183.104.0/23
78.137.128.0/18
78.143.128.0/18
80.93.16.0/20
83.147.128.0/18
84.203.0.0/16
89.16.64.0/19
89.184.32.0/22
89.184.40.0-89.184.57.255
89.234.64.0/18
91.142.96.0/20
92.51.192.0/19
92.51.240.0/20
93.92.8.0/21
94.247.48.0/21
109.106.96.0-109.106.119.255
109.106.124.0/22
176.52.216.0-176.52.221.255
185.47.144.0/22
185.53.32.0/24
185.53.35.0/24
185.182.72.0/22
185.205.228.0/22
185.233.176.0/22
185.242.236.0/23
212.126.32.0/19
217.78.0.0/20
IPv6:
2001:1bb8::/32
2a00:15b8::/32
2a01:258::/32
2a01:8aa0::/32
2a02:220::/32
2a0a:e780::/29
2a0b:bc0::/29
Signature Algorithm: sha256WithRSAEncryption
c9:bc:d1:3c:6a:62:72:b2:e6:fe:ae:59:4a:99:07:60:1c:37:
e6:63:95:3b:eb:29:48:7c:26:1a:06:5d:d0:e6:06:b8:29:19:
b6:56:a6:8a:39:fa:38:0b:31:39:bd:7e:31:3f:a0:5c:05:fa:
38:d0:9d:a1:9d:d5:62:66:f8:6b:4d:1e:0b:0d:2d:6e:08:9e:
73:9d:0f:a2:48:b8:19:5a:f7:6e:7b:27:31:43:2c:2e:dd:77:
fb:eb:d4:50:c5:c3:09:12:f1:69:64:ec:a9:1b:f1:9a:2e:dc:
19:06:08:2c:03:6d:e1:4c:e0:ec:d9:48:89:3c:4d:98:9d:c8:
c3:92:83:d2:98:7c:88:ce:02:f2:94:73:29:87:82:67:97:59:
32:13:1b:33:89:a2:95:d8:94:f3:6b:92:af:71:ed:9a:6d:88:
75:e8:ab:90:ba:a0:a6:b6:1e:5a:6c:1f:c6:e4:3a:8e:fc:1b:
6e:39:b8:5a:df:03:da:37:30:12:75:01:ee:1c:6c:f5:49:db:
ad:d0:16:d1:75:53:f8:ba:a9:d5:1f:61:52:52:7f:68:94:13:
05:5a:2b:cf:aa:48:84:0b:0a:71:50:c0:b6:9c:4a:55:9f:4a:
31:7b:fd:c6:3b:c6:58:7c:60:8e:eb:d9:6a:28:3b:f6:38:d4:
1d:ca:3a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 10:31:32 2024 by rpki-client on console-ams.rpki-client.org