Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/Cy6p1q3pIyOKeqk8nffB4lBv02M.roa
File: Cy6p1q3pIyOKeqk8nffB4lBv02M.roa (raw, json)
Hash identifier: ch9CD/JsIGrgtuU32JDtKE/+2aXGmLmPlkhrtnggKmw=
Subject key identifier: 0B:2E:A9:D6:AD:E9:23:23:8A:7A:A9:3C:9D:F7:C1:E2:50:6F:D3:63
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 01941C425DDA474A3B109519DAD82F0A118D
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/Cy6p1q3pIyOKeqk8nffB4lBv02M.roa
Signing time: Tue 31 Dec 2024 10:28:18 +0000
ROA not before: Tue 31 Dec 2024 10:28:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202940
IP address blocks: 89.208.0.0/21 maxlen: 21
89.208.4.0/22 maxlen: 24
89.208.56.0/21 maxlen: 21
89.208.128.0/21 maxlen: 21
89.208.134.0/23 maxlen: 24
141.226.120.0/22 maxlen: 24
147.234.23.0/24 maxlen: 24
147.236.104.0/21 maxlen: 23
147.236.116.0/23 maxlen: 24
147.236.120.0/21 maxlen: 21
147.236.125.0/24 maxlen: 24
147.236.144.0/20 maxlen: 24
147.236.176.0/20 maxlen: 24
147.236.183.0/24 maxlen: 24
185.108.80.0/22 maxlen: 24
185.149.252.0/22 maxlen: 24
185.167.108.0/22 maxlen: 24
185.175.32.0/22 maxlen: 23
185.180.100.0/22 maxlen: 24
185.180.100.0/24 maxlen: 24
185.180.102.0/24 maxlen: 24
185.180.103.0/24 maxlen: 24
185.182.76.0/22 maxlen: 24
185.184.244.0/22 maxlen: 23
188.191.224.0/21 maxlen: 21
188.191.224.0/22 maxlen: 22
188.191.224.0/24 maxlen: 24
188.191.228.0/22 maxlen: 22
217.175.80.0/20 maxlen: 20
217.175.84.0/22 maxlen: 22
217.175.88.0/21 maxlen: 23
2a00:7c40::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1c:42:5d:da:47:4a:3b:10:95:19:da:d8:2f:0a:11:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Dec 31 10:28:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b2ea9d6ade923238a7aa93c9df7c1e2506fd363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:3c:b3:8f:21:f7:14:ff:a5:1c:0b:31:a7:
0d:c1:be:09:91:0b:ae:ba:b5:ff:ae:d4:12:7f:9f:
dd:a1:1a:0a:0a:0f:6a:59:e6:d5:41:bd:93:58:ff:
6c:ea:11:b8:b1:8f:59:03:9b:a9:d4:89:5c:71:4f:
2f:92:b1:c5:1e:fe:13:78:fa:03:59:1d:31:2b:c9:
0c:ce:c8:a9:89:14:98:bd:e5:ae:ec:e7:78:7f:c4:
a6:11:32:fa:39:d8:a0:15:3f:38:51:66:aa:a6:9c:
2a:1d:f8:93:22:4b:77:31:de:be:f0:06:7a:b3:d1:
24:42:b2:5b:5b:97:47:a8:8c:1e:9f:cc:2e:d5:aa:
a7:ac:78:31:a6:ae:2a:cf:99:1e:fc:49:06:9f:f2:
92:21:b6:57:9b:c1:ba:61:d8:d4:e7:b3:27:4d:2b:
46:3d:fe:68:0b:0e:8f:4e:62:30:6a:7b:cd:44:a0:
5b:43:69:a2:76:53:5b:e1:da:32:80:1b:c1:f6:e3:
9a:2a:1b:e5:65:a9:20:2b:ac:f8:fc:13:2b:ea:e7:
fa:bb:85:8a:21:70:60:62:44:55:11:f3:c6:2c:89:
c1:b6:96:82:4a:3d:83:7c:03:1e:e7:79:92:20:a1:
22:e0:0e:60:f9:6b:26:53:ed:57:20:94:c0:0d:6c:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2E:A9:D6:AD:E9:23:23:8A:7A:A9:3C:9D:F7:C1:E2:50:6F:D3:63
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/Cy6p1q3pIyOKeqk8nffB4lBv02M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.208.0.0/21
89.208.56.0/21
89.208.128.0/21
141.226.120.0/22
147.234.23.0/24
147.236.104.0/21
147.236.116.0/23
147.236.120.0/21
147.236.144.0/20
147.236.176.0/20
185.108.80.0/22
185.149.252.0/22
185.167.108.0/22
185.175.32.0/22
185.180.100.0/22
185.182.76.0/22
185.184.244.0/22
188.191.224.0/21
217.175.80.0/20
IPv6:
2a00:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
4a:ab:14:b5:24:36:f7:4a:00:dd:3c:2e:57:49:55:91:f5:35:
35:56:b7:81:52:70:24:57:4c:9b:49:d0:62:7f:36:44:7e:9f:
30:e9:20:85:f9:b2:f0:91:92:d1:8a:e1:0c:64:60:8b:38:e6:
dd:1b:38:c5:a8:ee:f1:48:c0:63:b2:0f:45:33:76:37:5a:cf:
7c:82:ee:60:4b:e2:d4:ea:17:7e:c4:2e:74:e3:e7:57:8d:b8:
7d:07:ce:92:26:73:23:b7:68:6f:66:49:ee:e2:96:97:88:bc:
49:4d:12:69:16:1a:6e:e3:d0:ca:15:a7:f1:c4:21:6c:49:c5:
85:80:42:d8:41:9c:26:e6:88:ed:39:a6:b0:07:d6:2c:2d:81:
72:01:c2:4a:83:a2:0f:43:14:6a:fb:8a:0f:4f:3a:45:e5:91:
50:28:b2:7d:5b:e5:07:81:81:32:b3:a7:a5:d0:96:ce:60:65:
3a:85:9a:a5:12:a3:3a:09:01:68:31:95:69:88:03:00:f7:90:
18:58:b1:67:8e:53:01:ab:fe:7f:74:c2:4f:e8:a1:ac:22:0f:
ee:43:d9:da:7e:ae:65:8d:4c:27:c3:e6:91:b6:c9:20:c8:cb:
14:20:ee:57:cd:2b:97:a3:f0:03:8f:21:c9:64:af:ed:8f:73:
14:7a:12:4e
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZQcQl3aR0o7EJUZ2tgvChGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTg1MWRkYWU1YTY0Y2MzODgyNTM5NWJlOWE1MDdkYTk1
YWI3Y2YwHhcNMjQxMjMxMTAyODE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjJlYTlkNmFkZTkyMzIzOGE3YWE5M2M5ZGY3YzFlMjUwNmZkMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoQ8s48h9xT/pRwLMacNwb4JkQuu
urX/rtQSf5/doRoKCg9qWebVQb2TWP9s6hG4sY9ZA5up1IlccU8vkrHFHv4TePoD
WR0xK8kMzsipiRSYveWu7Od4f8SmETL6OdigFT84UWaqppwqHfiTIkt3Md6+8AZ6
s9EkQrJbW5dHqIwen8wu1aqnrHgxpq4qz5ke/EkGn/KSIbZXm8G6YdjU57MnTStG
Pf5oCw6PTmIwanvNRKBbQ2midlNb4doygBvB9uOaKhvlZakgK6z4/BMr6uf6u4WK
IXBgYkRVEfPGLInBtpaCSj2DfAMe53mSIKEi4A5g+WsmU+1XIJTADWwDwQIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFAsuqdat6SMjinqpPJ33weJQb9NjMB8GA1UdIwQY
MBaAFOioUd2uWmTMOIJTlb6aUH2pWrfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEt
MTEwYzg3OGRjZDI5LzEvQ3k2cDFxM3BJeU9LZXFrOG5mZkI0bEJ2MDJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEtMTEwYzg3OGRjZDI5
LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTB4BAIAATByAwQDWdAA
AwQDWdA4AwQDWdCAAwQCjeJ4AwQAk+oXAwQDk+xoAwQBk+x0AwQDk+x4AwQEk+yQ
AwQEk+ywAwQCuWxQAwQCuZX8AwQCuadsAwQCua8gAwQCubRkAwQCubZMAwQCubj0
AwQDvL/gAwQE2a9QMA0EAgACMAcDBQMqAHxAMA0GCSqGSIb3DQEBCwUAA4IBAQBK
qxS1JDb3SgDdPC5XSVWR9TU1VreBUnAkV0ybSdBifzZEfp8w6SCF+bLwkZLRiuEM
ZGCLOObdGzjFqO7xSMBjsg9FM3Y3Ws98gu5gS+LU6hd+xC504+dXjbh9B86SJnMj
t2hvZknu4paXiLxJTRJpFhpu49DKFafxxCFsScWFgELYQZwm5ojtOaawB9YsLYFy
AcJKg6IPQxRq+4oPTzpF5ZFQKLJ9W+UHgYEys6el0JbOYGU6hZqlEqM6CQFoMZVp
iAMA95AYWLFnjlMBq/5/dMJP6KGsIg/uQ9nafq5ljUwnw+aRtskgyMsUIO5XzSuX
o/ADjyHJZK/tj3MUehJO
-----END CERTIFICATE-----
Generated at Fri May 2 14:24:56 2025 by rpki-client