Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ycsH-fryrn1OATxwIRqgbhZS0uY.roa
File: ycsH-fryrn1OATxwIRqgbhZS0uY.roa (raw, json)
Hash identifier: b5nNggb/ZLTFduovTOm0zEIJI9kN+cujdVJb9CTXSvI=
Subject key identifier: C9:CB:07:F9:FA:F2:AE:7D:4E:01:3C:70:21:1A:A0:6E:16:52:D2:E6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F614ECD5A1B14EB4086EA0BB8D03E03EE
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ycsH-fryrn1OATxwIRqgbhZS0uY.roa
Signing time: Fri 10 May 2024 07:01:45 +0000
ROA not before: Fri 10 May 2024 07:01:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.54.0/24 maxlen: 24
82.152.160.0/21 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.163.21.0/24 maxlen: 24
89.213.98.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.201.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.130.156.0/24 maxlen: 24
213.210.59.0/24 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
213.218.249.0/24 maxlen: 24
217.144.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 10:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:4e:cd:5a:1b:14:eb:40:86:ea:0b:b8:d0:3e:03:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 10 07:01:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9cb07f9faf2ae7d4e013c70211aa06e1652d2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0e:67:a3:65:7b:a3:ae:85:45:0a:ce:16:4b:
c5:0b:d6:0e:c1:25:f2:1d:98:3a:f1:6e:e7:6e:9c:
66:94:09:8f:b9:67:2e:17:77:cd:b9:ca:5f:fb:e5:
96:3e:20:7d:c5:28:c6:df:74:37:dc:52:68:b1:93:
a8:c2:37:ac:47:e1:ad:32:3b:60:99:86:95:fd:11:
85:5c:d7:b0:e6:63:0e:c5:02:1a:7a:d8:1d:b3:07:
fb:67:24:25:f7:58:43:88:84:c5:47:4c:c1:7e:8a:
70:5e:66:f5:24:cb:21:95:72:df:ee:77:ba:f6:f7:
e1:f1:57:0f:d4:8f:07:ed:74:6f:64:ec:15:a8:6c:
4b:28:4e:81:05:fb:da:bd:75:5c:11:67:be:56:ae:
31:78:34:7b:1c:63:5b:24:98:b2:ac:76:eb:33:2d:
42:08:3e:dc:cd:00:97:6f:6c:6b:52:55:65:aa:63:
b7:6a:cc:3e:83:ee:7e:50:8f:8d:23:37:3e:d4:ea:
52:84:5d:69:a4:95:91:89:85:31:df:3b:63:cd:0f:
a4:f2:8c:ba:b1:3b:4d:62:83:ca:8e:d5:26:cc:a1:
18:ff:63:e0:40:2d:2a:b1:75:4a:70:47:b4:26:12:
60:40:94:6a:69:b6:74:31:43:a0:76:66:81:77:25:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CB:07:F9:FA:F2:AE:7D:4E:01:3C:70:21:1A:A0:6E:16:52:D2:E6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ycsH-fryrn1OATxwIRqgbhZS0uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.54.0/24
82.152.160.0/21
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
82.163.21.0/24
89.213.98.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
109.176.16.0/21
109.176.201.0/24
185.49.126.0/23
194.105.80.0/20
213.130.130.0/24
213.130.149.0/24
213.130.156.0/24
213.210.59.0/24
213.218.210.0/23
213.218.213.0/24
213.218.227.0/24
213.218.231.0/24
213.218.249.0/24
217.144.158.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b3:a1:2a:d3:46:64:00:40:3f:db:3f:b1:31:d5:30:ed:36:
af:5f:ec:a5:67:d6:86:ac:a3:3c:b2:06:5d:3b:a5:a9:8a:5c:
6b:4a:bf:13:ea:a8:51:02:18:a2:c6:63:7e:6d:83:b2:cd:5a:
cb:eb:7c:17:87:47:98:81:81:85:3a:0b:5e:40:d1:0e:99:0c:
89:a0:2c:b7:e8:9b:dd:5f:71:06:f5:26:a0:92:7b:ca:e8:29:
8b:68:7a:33:a7:64:94:3d:65:48:a0:40:9e:5f:ce:07:b9:b3:
de:ee:dc:8c:c0:89:fa:d9:3a:7b:a4:8c:0d:69:ff:34:3d:d8:
7d:ca:ba:8b:e8:38:18:c5:53:b1:1d:82:70:ef:0d:32:c4:bf:
0d:85:82:5a:98:9a:b7:36:76:3d:e7:99:3f:bf:9d:a1:f1:6e:
51:30:20:d1:bf:72:aa:90:41:9d:c3:43:44:e9:71:09:36:05:
27:76:44:4e:ed:a3:ec:cc:b7:9a:fd:05:46:a1:1a:fa:a4:8d:
df:d0:95:d8:5f:3d:73:91:8e:37:0b:d1:3d:05:39:c0:0f:a1:
56:27:f0:b1:7b:37:e8:5e:43:4e:45:9b:c6:d7:fa:3f:4c:98:
1b:ff:5f:97:e8:96:7b:80:bf:b1:7d:e5:78:c9:f7:11:e0:0b:
18:aa:fe:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:40:28 2025 by rpki-client