Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/YZtgaF70ltQiKCaxKBDQmU_b1dE.roa
File: YZtgaF70ltQiKCaxKBDQmU_b1dE.roa (raw, json)
Hash identifier: 3l1LL+bnnA44K+9etRH4BlYAs8VWOBzp2cZ9g61cpTE=
Subject key identifier: 61:9B:60:68:5E:F4:96:D4:22:28:26:B1:28:10:D0:99:4F:DB:D5:D1
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 0191EB17C4127055A84FB8AD21D18D23F7D5
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/YZtgaF70ltQiKCaxKBDQmU_b1dE.roa
Signing time: Fri 13 Sep 2024 11:14:48 +0000
ROA not before: Fri 13 Sep 2024 11:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202364
IP address blocks: 185.119.108.0/24 maxlen: 24
185.119.109.0/24 maxlen: 24
185.119.110.0/24 maxlen: 24
185.119.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 18:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:eb:17:c4:12:70:55:a8:4f:b8:ad:21:d1:8d:23:f7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Sep 13 11:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=619b60685ef496d4222826b12810d0994fdbd5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:83:e4:af:df:91:ec:1c:0f:a9:68:01:dd:
cd:d1:99:01:15:f8:b0:89:be:cd:2d:4d:d2:62:47:
d2:06:8f:f6:8f:d0:d1:e2:67:cd:67:ef:fa:f2:47:
7c:bf:4d:c9:72:78:90:b3:1c:92:7c:50:26:f2:43:
dd:ae:f4:47:30:23:3d:d2:c4:42:05:f1:f6:a7:c3:
06:21:7c:02:8f:3b:e2:45:51:ca:15:2a:19:a6:65:
3d:1a:92:1f:cc:d4:99:c6:b0:cd:97:ad:db:a6:bb:
7e:b1:b5:fa:14:c3:a3:c6:7d:58:7c:2e:7c:c9:f5:
76:14:95:81:9b:2f:4d:e9:e0:fa:aa:af:52:e6:54:
19:92:0a:6a:8c:d3:96:dc:20:18:56:4e:6b:97:97:
88:c7:42:b3:3d:9b:f4:3e:17:83:47:6e:b7:88:1a:
a5:f4:57:be:7e:3b:e3:a0:7d:8b:bc:47:32:41:4e:
9f:55:59:88:12:c3:bd:d8:da:18:c9:69:d2:d6:9f:
fe:c1:21:bb:b2:2a:3b:5f:8e:2a:58:61:76:94:9a:
cc:45:c0:1b:c0:d1:60:9b:45:04:1d:55:66:8b:e2:
e7:82:f1:fd:b7:14:13:5b:93:e5:4a:25:41:7c:d3:
e9:ba:09:f0:b4:8f:68:ed:c8:c6:90:54:86:6b:00:
b2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9B:60:68:5E:F4:96:D4:22:28:26:B1:28:10:D0:99:4F:DB:D5:D1
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/YZtgaF70ltQiKCaxKBDQmU_b1dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.108.0/22
Signature Algorithm: sha256WithRSAEncryption
47:69:ea:26:fc:92:74:24:69:00:ef:95:fc:ae:d1:65:b4:4e:
6b:1e:80:4d:3b:94:4d:b2:95:f3:22:ce:7f:fb:9a:ea:88:5f:
1a:4d:dd:6c:e1:96:4f:ab:ec:59:ef:28:59:f1:12:7d:0d:3e:
8c:0d:3b:18:73:8c:0f:1f:b8:8f:82:ae:6b:c0:42:7e:57:47:
93:d5:8e:c9:f5:dd:3c:dd:ae:b9:06:7f:18:64:27:e9:6e:72:
0e:be:98:01:50:7d:85:05:e8:70:4b:14:dc:e6:03:d5:57:2a:
7b:f0:de:be:a2:1e:7e:36:fa:6f:77:be:42:59:12:1a:6b:8f:
f4:8d:05:4a:25:94:08:19:3b:e6:c9:5d:0b:08:2b:ab:21:e3:
99:24:7b:82:75:b8:d3:75:a0:9c:e5:09:06:90:80:9c:18:29:
f1:b8:80:fa:38:84:fa:a2:43:9e:ec:b4:1a:76:c6:7d:0b:48:
6c:27:d6:62:21:05:e0:3c:8b:fa:7d:93:c0:7c:39:cc:7f:d8:
6f:01:78:ee:0a:fa:c1:ab:ce:b4:57:d3:54:b3:fc:48:62:71:
52:e2:b4:e2:0f:dd:e7:3b:05:d5:09:e6:55:21:f3:89:b3:bf:
f8:5d:bb:37:b8:9a:d8:7f:68:bf:4f:eb:9a:50:a0:99:fd:34:
a7:5a:0e:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHrF8QScFWoT7itIdGNI/fVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYmY2NWUwMDY5ZGJjYzc2YjdiNTU2ZThjMWQ3MDU4ODlk
ZjI3ZTkwHhcNMjQwOTEzMTExNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTliNjA2ODVlZjQ5NmQ0MjIyODI2YjEyODEwZDA5OTRmZGJkNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtviD5K/fkewcD6loAd3N0ZkBFfiw
ib7NLU3SYkfSBo/2j9DR4mfNZ+/68kd8v03JcniQsxySfFAm8kPdrvRHMCM90sRC
BfH2p8MGIXwCjzviRVHKFSoZpmU9GpIfzNSZxrDNl63bprt+sbX6FMOjxn1YfC58
yfV2FJWBmy9N6eD6qq9S5lQZkgpqjNOW3CAYVk5rl5eIx0KzPZv0PheDR263iBql
9Fe+fjvjoH2LvEcyQU6fVVmIEsO92NoYyWnS1p/+wSG7sio7X44qWGF2lJrMRcAb
wNFgm0UEHVVmi+LngvH9txQTW5PlSiVBfNPpugnwtI9o7cjGkFSGawCyGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGGbYGhe9JbUIigmsSgQ0JlP29XRMB8GA1UdIwQY
MBaAFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2Yt
MjNiYTRhOTFhMTA1LzEvWVp0Z2FGNzBsdFFpS0NheEtCRFFtVV9iMWRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2YtMjNiYTRhOTFhMTA1
LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXdsMA0G
CSqGSIb3DQEBCwUAA4IBAQBHaeom/JJ0JGkA75X8rtFltE5rHoBNO5RNspXzIs5/
+5rqiF8aTd1s4ZZPq+xZ7yhZ8RJ9DT6MDTsYc4wPH7iPgq5rwEJ+V0eT1Y7J9d08
3a65Bn8YZCfpbnIOvpgBUH2FBehwSxTc5gPVVyp78N6+oh5+Nvpvd75CWRIaa4/0
jQVKJZQIGTvmyV0LCCurIeOZJHuCdbjTdaCc5QkGkICcGCnxuID6OIT6okOe7LQa
dsZ9C0hsJ9ZiIQXgPIv6fZPAfDnMf9hvAXjuCvrBq860V9NUs/xIYnFS4rTiD93n
OwXVCeZVIfOJs7/4Xbs3uJrYf2i/T+uaUKCZ/TSnWg4G
-----END CERTIFICATE-----
Generated at Thu May 1 07:21:26 2025 by rpki-client