Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/YZ72XB3UPkdiy10XXZcygZUWWzo.roa
File: YZ72XB3UPkdiy10XXZcygZUWWzo.roa (raw, json)
Hash identifier: T7Ob+fIJyXdap8NcHLh+6twmkR5gusOXp7gDyH3y8EA=
Subject key identifier: 61:9E:F6:5C:1D:D4:3E:47:62:CB:5D:17:5D:97:32:81:95:16:5B:3A
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 0191C6FFDCD63E4EED9828F7915EEF125197
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/YZ72XB3UPkdiy10XXZcygZUWWzo.roa
Signing time: Fri 06 Sep 2024 11:02:22 +0000
ROA not before: Fri 06 Sep 2024 11:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35725
IP address blocks: 89.33.32.0/21 maxlen: 21
89.33.48.0/21 maxlen: 21
178.138.0.0/16 maxlen: 16
178.138.0.0/18 maxlen: 18
178.138.38.0/24 maxlen: 24
178.138.39.0/24 maxlen: 24
178.138.40.0/23 maxlen: 23
178.138.62.0/24 maxlen: 24
178.138.96.0/23 maxlen: 23
178.138.98.0/23 maxlen: 23
178.138.104.0/24 maxlen: 24
178.138.126.0/23 maxlen: 23
178.138.192.0/23 maxlen: 23
178.138.194.0/23 maxlen: 23
193.104.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 08:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:ff:dc:d6:3e:4e:ed:98:28:f7:91:5e:ef:12:51:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Sep 6 11:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=619ef65c1dd43e4762cb5d175d97328195165b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:7b:0e:d3:81:3a:f9:8b:4b:9c:1d:30:ce:
5a:c8:ad:a0:3f:6e:2c:32:fd:0a:d6:c2:8c:b8:87:
1d:8b:ae:d4:6b:74:2b:6e:ec:48:ca:32:c1:ac:3d:
23:76:51:8a:c8:48:c4:3f:23:50:96:00:d8:cf:4f:
3b:4b:a2:92:e5:88:79:ec:6f:28:73:db:ef:cb:9a:
84:63:99:eb:51:f4:78:b5:31:c4:74:95:06:16:b0:
e4:58:c9:f6:65:b7:6c:84:7a:df:f1:2d:24:5b:2b:
40:2d:2b:27:bb:ad:41:ae:1c:db:b1:d5:0f:c2:13:
f4:3c:1a:dc:f0:3d:78:dd:e7:3b:8f:17:db:c5:03:
ee:85:86:41:60:96:6c:11:b7:e2:03:9d:ea:c8:99:
95:d8:00:7a:d4:f7:07:0c:0a:5c:f1:93:f2:8d:04:
10:fb:ae:85:a2:7d:8b:7d:47:a5:a7:37:88:ce:8c:
5f:22:70:2b:f3:b9:dd:d5:b8:1c:fa:f4:fd:7d:a2:
7d:d0:60:b4:c3:ff:52:5c:24:9a:4f:c4:17:38:a3:
b0:92:dc:d3:e9:95:75:5d:2d:5a:39:e8:06:26:ff:
ea:82:b6:1c:40:1d:c6:77:b7:cb:5a:f3:60:f5:e1:
37:b7:44:5d:1b:08:fd:59:1d:5a:0b:9a:15:bd:5d:
e7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9E:F6:5C:1D:D4:3E:47:62:CB:5D:17:5D:97:32:81:95:16:5B:3A
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/YZ72XB3UPkdiy10XXZcygZUWWzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.32.0/21
89.33.48.0/21
178.138.0.0/16
193.104.247.0/24
Signature Algorithm: sha256WithRSAEncryption
51:c3:26:3f:da:34:6e:34:e8:7b:88:6b:7c:4e:e6:17:01:2d:
ee:c0:44:85:d7:48:30:7a:f4:a3:f7:97:f9:e9:ad:74:68:fb:
b7:5f:00:8c:35:a2:74:00:68:89:92:34:3b:10:12:5d:f4:3e:
ef:84:bb:d2:ce:98:ef:63:6c:87:96:fd:4b:33:64:73:e9:6d:
1e:04:ab:64:5f:43:55:86:23:2f:34:92:c6:4d:70:8b:85:10:
c6:04:58:eb:29:47:7c:f3:a4:87:cd:8b:2c:46:d6:23:0a:d5:
45:2a:ee:94:a5:d3:d1:e2:51:fb:3d:67:fa:35:d6:20:94:ef:
94:58:fb:e7:a0:c2:37:15:a3:3c:61:6d:1b:3b:12:49:a2:4a:
1f:a0:aa:bc:28:55:f0:8a:bc:87:85:74:88:74:c0:25:6c:cd:
cb:13:85:02:05:c1:54:f3:c6:f4:91:c0:c0:ad:4a:c1:bb:55:
13:9a:ea:19:ce:81:d8:24:b1:fa:1a:ff:c3:ed:98:15:41:01:
af:72:2d:ca:5e:12:5a:1d:c3:b6:ad:13:6d:00:9b:91:de:04:
47:55:6e:16:33:68:5d:56:c3:7c:61:2a:68:70:4e:17:7b:b3:
3d:14:d0:2d:7c:6a:26:88:c7:0a:7a:b0:79:ee:79:95:69:b4:
d3:6c:2d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:05 2025 by rpki-client