Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/YoD3q4M8Q6-Rm95dpsh3q7ivesM.roa
File: YoD3q4M8Q6-Rm95dpsh3q7ivesM.roa (raw, json)
Hash identifier: 7Rj6HMpCnsx6vDSVHVWVBctdJKW1LlLiJ5mSl02/NQ8=
Subject key identifier: 62:80:F7:AB:83:3C:43:AF:91:9B:DE:5D:A6:C8:77:AB:B8:AF:7A:C3
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 0191DC6F03C8187A9C8855CCB8545AFEDBAF
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/YoD3q4M8Q6-Rm95dpsh3q7ivesM.roa
Signing time: Tue 10 Sep 2024 14:55:48 +0000
ROA not before: Tue 10 Sep 2024 14:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8410
IP address blocks: 194.0.120.0/22 maxlen: 22
194.55.161.0/24 maxlen: 24
194.55.163.0/24 maxlen: 24
194.55.168.0/24 maxlen: 24
194.55.171.0/24 maxlen: 24
195.140.180.0/22 maxlen: 22
212.15.32.0/21 maxlen: 21
212.15.40.0/24 maxlen: 24
212.15.41.0/24 maxlen: 24
212.15.42.0/24 maxlen: 24
212.15.43.0/24 maxlen: 24
212.15.44.0/24 maxlen: 24
212.15.45.0/24 maxlen: 24
212.15.46.0/24 maxlen: 24
212.15.47.0/24 maxlen: 24
212.15.48.0/24 maxlen: 24
212.15.50.0/24 maxlen: 24
212.15.51.0/24 maxlen: 24
212.15.52.0/24 maxlen: 24
212.15.53.0/24 maxlen: 24
212.15.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Dec 2024 02:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dc:6f:03:c8:18:7a:9c:88:55:cc:b8:54:5a:fe:db:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Sep 10 14:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6280f7ab833c43af919bde5da6c877abb8af7ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:3f:a1:85:9f:43:1a:09:4e:86:c8:41:5f:
45:09:5e:f5:58:44:ef:f0:d8:5f:df:78:fa:85:e2:
ea:09:b2:e2:34:0c:ae:78:2d:e5:42:74:08:58:05:
d9:eb:e4:fe:bd:c2:8b:b6:7c:77:06:58:0b:56:52:
9b:fc:78:a6:df:29:71:ef:5c:2b:d2:76:4d:b7:1e:
9d:4c:6d:c9:1b:5b:4e:f2:17:24:ce:f6:c7:f7:19:
e0:e3:1e:4b:b1:cc:cc:73:63:fa:ca:86:c9:6e:86:
7a:3a:6e:e6:5f:f7:ee:eb:e7:84:79:6c:5b:fa:61:
d6:56:20:56:d0:dc:7a:ac:cf:7f:58:9a:9b:55:04:
2e:27:d3:23:42:ba:ad:4c:68:f1:06:34:27:49:4d:
1b:ec:57:be:1d:ca:6c:ae:67:03:98:84:96:e8:3c:
3c:af:26:9f:2e:bd:70:6a:96:ff:a9:07:01:a1:e8:
6e:7b:a2:24:0c:ac:9d:c1:1c:d9:6e:d1:43:d0:45:
7c:25:c2:aa:5e:e5:1d:84:3b:72:b4:a8:9b:9b:65:
8c:c1:42:ad:49:c3:cc:56:1f:18:3b:b9:da:ee:99:
a9:17:a9:d3:9c:72:f3:b2:66:12:73:40:51:2f:c6:
49:a3:23:c1:c3:e0:c9:ea:6a:39:81:fa:30:52:3b:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:F7:AB:83:3C:43:AF:91:9B:DE:5D:A6:C8:77:AB:B8:AF:7A:C3
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/YoD3q4M8Q6-Rm95dpsh3q7ivesM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.120.0/22
194.55.161.0/24
194.55.163.0/24
194.55.168.0/24
194.55.171.0/24
195.140.180.0/22
212.15.32.0-212.15.48.255
212.15.50.0-212.15.54.255
Signature Algorithm: sha256WithRSAEncryption
0a:02:f8:ab:6f:18:52:6d:20:72:9c:56:5e:d1:d6:21:4d:57:
cd:47:24:20:8a:74:54:3a:c0:1b:7d:06:e9:e8:ec:d0:a2:52:
19:53:54:f8:67:2d:46:46:90:55:1b:8b:2c:53:4f:b7:ac:72:
60:e0:e4:fb:6b:5a:03:5d:6c:1f:64:d8:a3:10:87:35:be:96:
8d:f7:00:36:a3:68:b6:7f:20:0d:42:4f:47:2f:11:56:82:e7:
77:47:a9:4d:4f:18:9f:d9:d2:d5:5d:20:33:e9:7c:7c:dd:d4:
08:d6:22:ee:bb:30:e5:0e:7e:6e:38:7c:06:9b:58:b9:27:b8:
3c:20:d9:a4:e4:a8:5a:ce:4d:70:9c:cb:62:d3:49:c8:fc:54:
73:6d:59:97:0e:ea:c5:ff:5d:e3:54:7d:51:6c:9b:99:79:d8:
7d:80:83:36:e6:8f:ff:41:92:18:2f:80:4f:87:d4:38:b3:20:
83:ad:88:00:e8:7c:8d:11:47:c4:fd:a6:f7:a3:44:ac:b9:7e:
bc:02:90:92:53:56:2a:64:ba:04:3b:2b:92:1a:d0:89:8f:ff:
da:70:13:bd:0d:78:ab:e4:83:27:ba:c8:d9:32:95:95:78:1a:
40:34:7e:74:11:5c:2d:bd:5b:a1:3c:37:6a:8d:8b:17:04:58:
57:a6:65:91
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZHcbwPIGHqciFXMuFRa/tuvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWFmYWEzMGIzNDBlY2Y4MTBhNGNiOWFmM2I1MWM3MDI1
NjY1OTgwHhcNMjQwOTEwMTQ1NTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjgwZjdhYjgzM2M0M2FmOTE5YmRlNWRhNmM4NzdhYmI4YWY3YWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRM/oYWfQxoJTobIQV9FCV71WETv
8Nhf33j6heLqCbLiNAyueC3lQnQIWAXZ6+T+vcKLtnx3BlgLVlKb/Him3ylx71wr
0nZNtx6dTG3JG1tO8hckzvbH9xng4x5LsczMc2P6yobJboZ6Om7mX/fu6+eEeWxb
+mHWViBW0Nx6rM9/WJqbVQQuJ9MjQrqtTGjxBjQnSU0b7Fe+HcpsrmcDmISW6Dw8
ryafLr1wapb/qQcBoehue6IkDKydwRzZbtFD0EV8JcKqXuUdhDtytKibm2WMwUKt
ScPMVh8YO7na7pmpF6nTnHLzsmYSc0BRL8ZJoyPBw+DJ6mo5gfowUjts9wIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFGKA96uDPEOvkZveXabId6u4r3rDMB8GA1UdIwQY
MBaAFMLq+qMLNA7PgQpMua87UccCVmWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGIt
NWVjYWZkYTQ3MWY3LzEvWW9EM3E0TThRNi1SbTk1ZHBzaDNxN2l2ZXNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGItNWVjYWZkYTQ3MWY3
LzEvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQCwgB4AwQA
wjehAwQAwjejAwQAwjeoAwQAwjerAwQCw4y0MAwDBAXUDyADBADUDzAwDAMEAdQP
MgMEANQPNjANBgkqhkiG9w0BAQsFAAOCAQEACgL4q28YUm0gcpxWXtHWIU1XzUck
IIp0VDrAG30G6ejs0KJSGVNU+GctRkaQVRuLLFNPt6xyYODk+2taA11sH2TYoxCH
Nb6WjfcANqNotn8gDUJPRy8RVoLnd0epTU8Yn9nS1V0gM+l8fN3UCNYi7rsw5Q5+
bjh8BptYuSe4PCDZpOSoWs5NcJzLYtNJyPxUc21Zlw7qxf9d41R9UWybmXnYfYCD
NuaP/0GSGC+AT4fUOLMgg62IAOh8jRFHxP2m96NErLl+vAKQklNWKmS6BDsrkhrQ
iY//2nATvQ14q+SDJ7rI2TKVlXgaQDR+dBFcLb1boTw3ao2LFwRYV6ZlkQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:02:42 2025 by rpki-client