Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/yiSg28TXUGNTDy3n0-Ihz9a_Ig8.roa
File: yiSg28TXUGNTDy3n0-Ihz9a_Ig8.roa (raw, json)
Hash identifier: ubjZqMW+kOza7Skg4KdSbElzeju69VCI+d6jMQFl0Xg=
Subject key identifier: CA:24:A0:DB:C4:D7:50:63:53:0F:2D:E7:D3:E2:21:CF:D6:BF:22:0F
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 0189060BB1DD108495EDC83427F1A4C46616
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/yiSg28TXUGNTDy3n0-Ihz9a_Ig8.roa
Signing time: Thu 29 Jun 2023 07:26:17 +0000
ROA not before: Thu 29 Jun 2023 07:26:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202053
IP address blocks: 94.237.4.0/22 maxlen: 22
94.237.1.0/24 maxlen: 24
94.237.0.0/24 maxlen: 24
94.237.2.0/23 maxlen: 23
94.237.8.0/21 maxlen: 21
5.22.208.0/21 maxlen: 21
185.26.48.0/22 maxlen: 22
5.22.216.0/22 maxlen: 22
5.22.220.0/22 maxlen: 22
94.237.80.0/20 maxlen: 20
94.237.96.0/21 maxlen: 21
94.237.104.0/22 maxlen: 22
94.237.108.0/22 maxlen: 22
94.237.112.0/21 maxlen: 21
94.237.16.0/21 maxlen: 21
94.237.24.0/21 maxlen: 21
94.237.32.0/21 maxlen: 21
94.237.40.0/21 maxlen: 21
94.237.48.0/20 maxlen: 20
94.237.64.0/20 maxlen: 20
185.20.136.0/22 maxlen: 22
94.237.120.0/22 maxlen: 22
94.237.124.0/23 maxlen: 23
185.70.196.0/22 maxlen: 22
94.237.126.0/24 maxlen: 24
194.62.96.0/22 maxlen: 22
95.111.208.0/22 maxlen: 22
95.111.216.0/21 maxlen: 21
83.136.248.0/21 maxlen: 21
95.111.192.0/20 maxlen: 20
80.69.172.0/22 maxlen: 22
2a04:3546::/32 maxlen: 32
2a04:3545::/32 maxlen: 32
2a04:3542::/32 maxlen: 32
2a04:3542:8000::/34 maxlen: 34
2a04:3543::/32 maxlen: 32
2a04:3541::/32 maxlen: 32
2a04:3544:8000::/34 maxlen: 34
2a04:3544::/32 maxlen: 32
2a04:3540::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 05 Sep 2023 07:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:0b:b1:dd:10:84:95:ed:c8:34:27:f1:a4:c4:66:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Jun 29 07:26:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca24a0dbc4d75063530f2de7d3e221cfd6bf220f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:7a:bd:43:b8:40:88:9a:94:b1:4f:ed:ec:
26:5d:7c:5a:f3:4f:b4:ec:42:df:20:d6:a1:c2:11:
37:ca:d4:9f:31:68:80:4e:df:a4:26:dd:16:a8:1d:
79:a0:4a:15:96:20:6b:49:18:0e:20:63:30:50:5f:
54:53:bf:5e:cd:ff:0b:d4:86:6d:1e:e4:31:1c:9e:
c0:db:87:8c:67:82:21:0f:35:6d:2a:ca:bb:7e:06:
b8:79:52:43:3a:52:50:b7:d7:31:42:42:ed:c6:f4:
55:84:7f:99:16:b8:e7:63:b9:1e:9e:7e:af:44:bc:
24:b3:bc:4d:2e:33:c9:ec:aa:86:4a:b2:60:70:ee:
d6:e2:82:d0:4c:cd:96:eb:9e:7c:09:10:fe:37:7d:
45:71:ec:d9:e9:9b:2b:cd:aa:65:8e:c5:d4:54:5b:
fb:d8:fc:c0:a3:47:81:13:93:9e:02:fc:69:63:97:
93:ef:28:3f:f3:ac:cb:44:79:2c:26:81:18:b3:ce:
cf:3f:83:be:f9:93:e3:16:22:1e:68:ff:64:02:7f:
29:9a:8f:ff:52:b5:2d:d8:87:6f:8b:ad:77:2f:53:
29:82:ba:8f:dc:cd:3f:ee:68:d8:90:b2:32:72:83:
be:e1:95:fa:de:a1:e4:92:ac:28:fb:9d:6b:70:37:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:24:A0:DB:C4:D7:50:63:53:0F:2D:E7:D3:E2:21:CF:D6:BF:22:0F
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/yiSg28TXUGNTDy3n0-Ihz9a_Ig8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.208.0/20
80.69.172.0/22
83.136.248.0/21
94.237.0.0-94.237.126.255
95.111.192.0-95.111.211.255
95.111.216.0/21
185.20.136.0/22
185.26.48.0/22
185.70.196.0/22
194.62.96.0/22
IPv6:
2a04:3540::-2a04:3546:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
03:9f:ee:67:c3:18:b0:a6:2b:fb:c2:3c:f9:75:cb:29:5c:a7:
9f:9c:0a:15:c8:77:ef:32:c7:1b:2f:7a:09:d9:00:b5:75:fd:
37:9b:43:4a:a3:a8:76:0e:4a:af:e1:e3:7f:14:75:88:02:38:
86:45:85:a4:bf:0d:fa:0e:9f:21:4c:85:18:62:7b:6d:c1:39:
52:e5:d9:d7:4c:fd:5b:28:fb:12:95:17:1f:f5:4c:0e:9a:3d:
8b:14:29:90:85:da:7b:85:5c:eb:31:e8:85:61:e6:cf:07:41:
6c:fe:e8:ef:a2:2f:b3:dc:b4:f5:e8:6a:d6:a5:58:a0:14:2c:
ac:06:f0:2c:c6:3f:97:11:a7:2c:16:f5:6b:74:8e:6c:26:a9:
4e:47:58:bb:32:42:8f:ce:bb:43:39:32:9d:47:93:7f:e3:28:
a2:7f:cc:95:6c:90:04:78:0f:8f:02:9f:13:62:4f:b3:d6:35:
54:e4:88:22:cf:47:05:f3:9c:22:f7:d8:c5:5c:e6:cd:8a:29:
64:c5:dd:66:f5:26:41:4e:36:90:a2:75:33:b3:1c:e8:6f:19:
22:e0:81:49:4c:ff:97:6d:6b:b9:54:ee:14:f3:ee:4a:ae:59:
29:14:9e:f4:cb:50:cb:db:04:b5:a4:d4:0d:c6:c1:3e:ee:7d:
62:6f:1e:03
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgISAYkGC7HdEISV7cg0J/GkxGYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWExZjJkYmY3YjdhODRhZTU3YjhkNjc0MjZiN2U0ZTQy
MGZhYjUwHhcNMjMwNjI5MDcyNjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTI0YTBkYmM0ZDc1MDYzNTMwZjJkZTdkM2UyMjFjZmQ2YmYyMjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A16vUO4QIialLFP7ewmXXxa80+0
7ELfINahwhE3ytSfMWiATt+kJt0WqB15oEoVliBrSRgOIGMwUF9UU79ezf8L1IZt
HuQxHJ7A24eMZ4IhDzVtKsq7fga4eVJDOlJQt9cxQkLtxvRVhH+ZFrjnY7kenn6v
RLwks7xNLjPJ7KqGSrJgcO7W4oLQTM2W6558CRD+N31FcezZ6ZsrzapljsXUVFv7
2PzAo0eBE5OeAvxpY5eT7yg/86zLRHksJoEYs87PP4O++ZPjFiIeaP9kAn8pmo//
UrUt2Idvi613L1MpgrqP3M0/7mjYkLIycoO+4ZX63qHkkqwo+51rcDcU3wIDAQAB
o4ICZjCCAmIwHQYDVR0OBBYEFMokoNvE11BjUw8t59PiIc/WvyIPMB8GA1UdIwQY
MBaAFAmaHy2/e3qErle41nQmt+TkIPq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAt
OWNkNjhmMjIxZTIxLzEveWlTZzI4VFhVR05URHkzbjAtSWh6OWFfSWc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAtOWNkNjhmMjIxZTIx
LzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBRBAIAATBLAwQEBRbQAwQC
UEWsAwQDU4j4MAsDAwBe7QMEAF7tfjAMAwQGX2/AAwQCX2/QAwQDX2/YAwQCuRSI
AwQCuRowAwQCuUbEAwQCwj5gMBYEAgACMBAwDgMFBioENUADBQAqBDVGMA0GCSqG
SIb3DQEBCwUAA4IBAQADn+5nwxiwpiv7wjz5dcspXKefnAoVyHfvMscbL3oJ2QC1
df03m0NKo6h2Dkqv4eN/FHWIAjiGRYWkvw36Dp8hTIUYYnttwTlS5dnXTP1bKPsS
lRcf9UwOmj2LFCmQhdp7hVzrMeiFYebPB0Fs/ujvoi+z3LT16GrWpVigFCysBvAs
xj+XEacsFvVrdI5sJqlOR1i7MkKPzrtDOTKdR5N/4yiif8yVbJAEeA+PAp8TYk+z
1jVU5Igiz0cF85wi99jFXObNiilkxd1m9SZBTjaQonUzsxzobxki4IFJTP+XbWu5
VO4U8+5KrlkpFJ70y1DL2wS1pNQNxsE+7n1ibx4D
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:52 2024 by rpki-client on console-ams.rpki-client.org