Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yc-jlHGRL_lCH-UaKZswZF3UGac.roa
File: yc-jlHGRL_lCH-UaKZswZF3UGac.roa (raw, json)
Hash identifier: ttWr+TEAVuFGz3y7evI/WBJtOJrghGsV83rHXbATOs8=
Subject key identifier: C9:CF:A3:94:71:91:2F:F9:42:1F:E5:1A:29:9B:30:64:5D:D4:19:A7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01944B9BF4899EEB19B4032C93AE97130FDC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yc-jlHGRL_lCH-UaKZswZF3UGac.roa
Signing time: Thu 09 Jan 2025 15:08:19 +0000
ROA not before: Thu 09 Jan 2025 15:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213006
IP address blocks: 91.212.195.0/24 maxlen: 24
185.109.162.0/24 maxlen: 24
185.214.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 13:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:9b:f4:89:9e:eb:19:b4:03:2c:93:ae:97:13:0f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 9 15:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9cfa39471912ff9421fe51a299b30645dd419a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a3:8d:da:92:8f:3f:02:d7:e1:3c:61:f2:25:
03:8d:5a:ba:00:de:11:7c:d8:0f:23:5a:a2:5f:9e:
b8:d2:bd:e7:58:07:5a:a3:3f:e4:44:d4:5f:5f:35:
91:f5:48:b3:98:35:e4:51:db:6f:0d:2a:87:d5:d4:
02:ad:35:71:e9:b5:37:d0:ea:ee:0c:7f:72:4b:2b:
60:c6:a8:55:fb:12:da:52:9b:5a:63:f0:c8:fd:cb:
27:b9:a5:46:c6:3b:63:79:93:8f:e6:51:46:5e:ac:
7f:13:6d:0a:7c:ab:48:2d:45:c7:6e:21:3d:ab:34:
71:8e:eb:d5:cd:80:20:6f:83:04:ba:57:4a:1b:48:
2b:82:8b:b2:1e:46:4e:48:3c:70:9b:78:6d:ec:52:
0a:02:d3:52:15:34:fc:b4:03:f6:87:6f:91:c4:a0:
13:4d:18:56:f4:1b:14:1f:8a:36:68:30:ea:be:04:
8d:55:cd:39:d9:3c:aa:9a:92:9b:bf:1a:ba:3c:f4:
71:2c:4b:b6:4a:a7:ec:72:f4:f9:38:14:14:0c:47:
c1:f9:b4:56:3d:58:9b:58:23:27:2d:27:71:79:2c:
69:8e:e0:6d:9b:4f:5c:62:92:a9:01:60:6d:ca:89:
d9:3f:bc:f8:2f:c6:f3:95:46:08:98:27:7d:45:bd:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:A3:94:71:91:2F:F9:42:1F:E5:1A:29:9B:30:64:5D:D4:19:A7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yc-jlHGRL_lCH-UaKZswZF3UGac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.195.0/24
185.109.162.0/24
185.214.84.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:19:83:29:08:0b:a1:86:0d:b1:2a:84:8e:34:e7:93:a0:54:
59:50:32:5d:00:d3:8c:68:c8:67:6a:2d:db:04:30:79:45:4c:
c7:a3:31:b4:71:41:b1:b8:93:a7:c7:52:49:cd:0d:cb:9f:28:
5a:35:e9:09:ad:75:b3:42:19:21:01:35:e4:c7:23:51:34:31:
6f:01:85:af:e0:c6:38:ae:b0:f5:2b:de:9a:ba:9b:f9:04:d4:
81:b8:36:4d:c6:fc:fc:85:61:03:c4:8f:22:36:d5:a4:97:e2:
e3:13:f0:0f:3b:d2:0e:75:41:59:0f:e1:17:7d:f7:08:94:9e:
3e:c7:e7:37:b0:c2:f3:46:94:90:80:f8:45:7e:e9:b3:27:37:
1e:9c:88:7b:64:28:23:ed:75:01:c8:24:4e:9b:ba:8b:41:33:
f9:fd:da:6f:a9:40:20:c8:e2:93:e0:45:4b:a2:27:9c:c6:7a:
51:61:bf:fc:10:8d:0f:62:a9:c1:fd:c0:15:14:4b:fe:a5:e9:
63:bf:75:82:4a:6b:84:47:b2:71:e9:37:cf:b2:f4:19:ca:33:
db:dd:ec:9b:2c:90:3e:bd:b6:65:28:d2:4a:1d:52:b5:10:2b:
99:0b:da:b6:9f:2c:6f:3f:19:19:e8:f4:88:33:43:7f:61:8d:
a0:73:82:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:25:48 2025 by rpki-client