Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/yn6csaAOx5GAUFawH-iW7rQjyEM.roa
File: yn6csaAOx5GAUFawH-iW7rQjyEM.roa (raw, json)
Hash identifier: wmtIYaODSvqrNNoksMBnHKOEwqUAIbkSA25VhLU+Y7I=
Subject key identifier: CA:7E:9C:B1:A0:0E:C7:91:80:50:56:B0:1F:E8:96:EE:B4:23:C8:43
Certificate issuer: /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial: 018CC86F502BC5746087E25F82F2EB18F13C
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/yn6csaAOx5GAUFawH-iW7rQjyEM.roa
Signing time: Tue 02 Jan 2024 04:29:47 +0000
ROA not before: Tue 02 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61438
IP address blocks: 194.93.76.0/23 maxlen: 24
45.84.144.0/22 maxlen: 22
146.19.235.0/24 maxlen: 24
2a04:d200::/32 maxlen: 32
2a04:d201::/32 maxlen: 32
2a04:d200::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:50:2b:c5:74:60:87:e2:5f:82:f2:eb:18:f1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Validity
Not Before: Jan 2 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca7e9cb1a00ec791805056b01fe896eeb423c843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:12:a3:97:fe:62:f6:d9:2e:b0:85:2a:e1:
87:38:58:83:7a:f1:a7:d9:a9:47:66:12:eb:5e:f2:
cc:b0:42:12:6f:62:6e:48:01:8a:89:0b:c4:e4:46:
30:50:93:81:94:7e:13:79:9d:16:f9:e5:f6:3f:29:
80:40:2f:e1:0f:95:6c:53:e3:24:ae:38:c6:35:4a:
a4:27:46:6f:e3:74:40:95:e5:e1:ff:33:81:6b:f7:
99:30:d9:5e:17:22:42:74:25:57:35:97:b4:fc:52:
44:fe:e7:b2:80:f0:74:71:48:86:45:5f:84:5a:42:
1e:ea:14:34:5c:99:f5:cd:00:09:85:aa:7f:29:9b:
1a:14:a2:f8:57:83:91:99:d0:a5:df:fe:45:c2:b1:
72:90:4c:11:eb:76:65:d1:ca:17:83:a9:c2:9e:24:
ed:79:97:4c:76:f3:51:93:d2:94:51:c3:c6:29:75:
27:ad:bf:71:87:c9:60:69:be:88:e8:06:d8:6a:7b:
ec:2a:e6:58:44:c8:d3:25:7d:b8:45:9f:a2:c9:29:
c0:39:54:48:2b:cf:d8:fb:d8:52:87:5b:45:c7:54:
ed:af:7d:dc:cf:59:e8:a6:fb:e9:08:a0:23:89:c5:
56:ff:f5:87:03:7d:12:30:ee:84:67:76:19:a4:93:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7E:9C:B1:A0:0E:C7:91:80:50:56:B0:1F:E8:96:EE:B4:23:C8:43
X509v3 Authority Key Identifier:
keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/yn6csaAOx5GAUFawH-iW7rQjyEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.144.0/22
146.19.235.0/24
194.93.76.0/23
IPv6:
2a04:d200::/29
Signature Algorithm: sha256WithRSAEncryption
99:45:d7:d6:e1:ff:2f:3b:3e:f1:d1:89:5f:3d:c2:8d:6b:fa:
a3:3f:92:2c:af:ea:96:60:5f:54:67:ae:33:51:24:b8:91:15:
69:b1:34:f7:fb:1d:69:4f:f6:0b:9d:1b:33:68:8d:eb:18:ef:
70:0a:1e:97:fa:9b:3a:e9:86:5c:c8:86:96:cf:ec:4c:44:26:
41:24:4e:5b:9b:db:ec:2a:a5:f7:e5:24:0c:9e:0b:84:f4:9e:
15:12:0f:ae:46:67:38:a1:79:b1:67:50:49:58:5c:47:59:2f:
87:8a:78:c3:99:3b:9e:97:d5:54:ea:a6:5b:c3:25:8d:94:f8:
70:0e:ad:84:e5:fc:df:df:64:35:52:ea:20:23:97:28:4f:25:
f5:ed:1a:d3:c4:bb:f8:cd:34:13:b1:e6:23:fa:2f:af:67:d8:
32:f9:b5:6e:c1:9e:1c:02:0e:d8:1e:46:43:cd:18:25:3e:6a:
b1:24:86:f3:89:59:af:a6:28:43:9b:14:3c:40:5b:e3:27:ed:
fb:15:63:dc:c2:dc:24:7a:2a:60:f4:58:34:ad:87:d5:92:10:
bc:ff:47:41:76:4d:a0:aa:59:d7:f1:3e:c0:ac:27:54:7b:b0:
12:6a:2b:20:e8:5c:50:14:53:c0:fb:40:d5:78:7e:33:a9:53:
5d:11:fc:96
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzIb1ArxXRgh+JfgvLrGPE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDgyY2NmMGM4ZGVhN2Q3ZjZhZDcyZThlNjI0NjJkN2Jl
MjBkNTYwHhcNMjQwMTAyMDQyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTdlOWNiMWEwMGVjNzkxODA1MDU2YjAxZmU4OTZlZWI0MjNjODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWsSo5f+YvbZLrCFKuGHOFiDevGn
2alHZhLrXvLMsEISb2JuSAGKiQvE5EYwUJOBlH4TeZ0W+eX2PymAQC/hD5VsU+Mk
rjjGNUqkJ0Zv43RAleXh/zOBa/eZMNleFyJCdCVXNZe0/FJE/ueygPB0cUiGRV+E
WkIe6hQ0XJn1zQAJhap/KZsaFKL4V4ORmdCl3/5FwrFykEwR63Zl0coXg6nCniTt
eZdMdvNRk9KUUcPGKXUnrb9xh8lgab6I6AbYanvsKuZYRMjTJX24RZ+iySnAOVRI
K8/Y+9hSh1tFx1Ttr33cz1nopvvpCKAjicVW//WHA30SMO6EZ3YZpJOuZwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFMp+nLGgDseRgFBWsB/olu60I8hDMB8GA1UdIwQY
MBaAFMLYLM8Mjep9f2rXLo5iRi174g1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3Rnc3p3eU42bjFfYXRjdWptSkdMWHZpRFZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMjc5NTItNGM2Ni00Yjk1LWI2ZGUt
NDMxMThlNDk2ZDQwLzEveW42Y3NhQU94NUdBVUZhd0gtaVc3clFqeUVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zMjc5NTItNGM2Ni00Yjk1LWI2ZGUtNDMxMThlNDk2ZDQw
LzEvd3Rnc3p3eU42bjFfYXRjdWptSkdMWHZpRFZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLVSQAwQA
khPrAwQBwl1MMA0EAgACMAcDBQMqBNIAMA0GCSqGSIb3DQEBCwUAA4IBAQCZRdfW
4f8vOz7x0YlfPcKNa/qjP5Isr+qWYF9UZ64zUSS4kRVpsTT3+x1pT/YLnRszaI3r
GO9wCh6X+ps66YZcyIaWz+xMRCZBJE5bm9vsKqX35SQMnguE9J4VEg+uRmc4oXmx
Z1BJWFxHWS+HinjDmTuel9VU6qZbwyWNlPhwDq2E5fzf32Q1UuogI5coTyX17RrT
xLv4zTQTseYj+i+vZ9gy+bVuwZ4cAg7YHkZDzRglPmqxJIbziVmvpihDmxQ8QFvj
J+37FWPcwtwkeipg9Fg0rYfVkhC8/0dBdk2gqlnX8T7ArCdUe7ASaisg6FxQFFPA
+0DVeH4zqVNdEfyW
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:06 2025 by rpki-client