Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/YFHcADTIt5jOBbAfxTQV09lQWK8.roa
File: YFHcADTIt5jOBbAfxTQV09lQWK8.roa (raw, json)
Hash identifier: G2MB4XtG5GunuU1lFtKb3PvW+g3aPnbH1nut0PYKZQA=
Subject key identifier: 60:51:DC:00:34:C8:B7:98:CE:05:B0:1F:C5:34:15:D3:D9:50:58:AF
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 0194252174BFA284F61E093AAC9467A19192
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/YFHcADTIt5jOBbAfxTQV09lQWK8.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43766
IP address blocks: 2a00:5400:f000::/48 maxlen: 48
2a00:5400:f001::/48 maxlen: 48
2a00:5400:f002::/48 maxlen: 48
2a00:5400:f003::/48 maxlen: 48
2a00:5400:f004::/48 maxlen: 48
2a00:5400:f005::/48 maxlen: 48
2a00:5400:f006::/48 maxlen: 48
2a00:5400:f007::/48 maxlen: 48
2a00:5400:f008::/47 maxlen: 47
2a00:5400:f008::/48 maxlen: 48
2a00:5400:f009::/48 maxlen: 48
2a00:5400:f00a::/47 maxlen: 47
2a00:5400:f00a::/48 maxlen: 48
2a00:5400:f00b::/48 maxlen: 48
2a00:5400:f00c::/47 maxlen: 47
2a00:5400:f00c::/48 maxlen: 48
2a00:5400:f00d::/48 maxlen: 48
2a00:5400:f00e::/47 maxlen: 47
2a00:5400:f00e::/48 maxlen: 48
2a00:5400:f00f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 19 Jan 2025 11:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:74:bf:a2:84:f6:1e:09:3a:ac:94:67:a1:91:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6051dc0034c8b798ce05b01fc53415d3d95058af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:2a:ab:16:04:28:45:db:f1:2f:6f:02:ae:
4b:a8:78:9b:78:ef:ed:5c:ba:bc:78:d1:60:1d:1b:
2b:fe:2c:4b:33:16:46:15:74:22:dc:40:82:fb:15:
f1:39:ab:d2:1a:5d:53:81:5b:01:80:2d:22:07:43:
38:df:e4:9b:c3:bb:61:d6:35:e6:40:51:ee:74:2a:
3e:37:c9:7f:ff:e9:c2:68:22:49:77:8d:4c:b1:9a:
62:8c:d6:8d:94:ba:9f:b0:bb:17:95:01:94:c2:a4:
eb:7d:b6:b7:4d:86:56:2d:3d:b1:e2:5b:c0:92:87:
59:23:de:24:f9:9c:19:c3:23:c1:f0:88:3c:d2:14:
fd:9e:55:14:23:30:65:68:3a:94:71:87:f0:6e:41:
84:46:48:73:06:5a:de:2c:bd:a3:31:3e:4b:ff:bd:
d9:cd:ae:ab:e5:25:1d:da:d6:bc:ff:ce:64:90:ca:
6a:fd:9e:f2:26:a4:39:11:c1:b0:3b:0c:3f:f2:b6:
9a:52:cf:68:1c:26:ea:a1:56:0d:ff:9a:80:0d:e8:
68:04:b6:d3:5e:36:60:1e:dc:e7:6e:3f:ec:e0:15:
3b:d5:77:f4:a2:50:18:2d:2a:f5:fd:07:66:5f:d4:
fc:0d:51:0b:4b:25:af:35:ae:68:8b:c7:c9:64:9a:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:51:DC:00:34:C8:B7:98:CE:05:B0:1F:C5:34:15:D3:D9:50:58:AF
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/YFHcADTIt5jOBbAfxTQV09lQWK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:5400:f000::/44
Signature Algorithm: sha256WithRSAEncryption
ab:ba:30:d0:88:f9:fd:79:0a:62:37:78:24:3e:31:92:f8:49:
c7:82:76:2f:69:fd:15:f5:a1:a1:e7:e9:7b:b8:9e:8b:47:2a:
0f:53:2c:52:f0:44:c0:93:b1:c4:4c:ce:68:e7:a3:5f:e6:43:
32:e2:a3:5b:c3:b9:c8:41:ee:37:f9:ad:40:15:5e:4c:0b:a1:
ae:c2:19:04:b1:5f:df:e1:de:c6:be:f6:da:f2:74:c4:5a:65:
83:aa:eb:0d:03:4a:d8:5f:e5:d4:2f:56:33:75:71:58:e8:94:
5d:09:5c:eb:b5:79:6c:e6:bb:4b:c3:e0:31:d3:e9:c1:22:c7:
bf:2a:0d:02:e8:9f:6d:16:d5:30:84:ac:41:7e:2d:05:0f:bd:
9f:1a:c8:e0:f3:62:74:eb:4c:15:95:fb:4c:d1:f9:12:f4:b6:
43:e6:dc:07:a9:47:ce:cf:c9:72:8b:3a:7e:a5:6a:8f:e5:b0:
41:94:f6:8a:c1:03:e4:c8:71:33:8f:cc:84:da:a0:ef:04:1d:
f4:6b:38:b2:ad:94:67:3d:85:0f:2f:ab:fa:a2:35:b8:c8:ee:
fa:0e:f5:06:f2:94:37:ef:4d:9c:e1:dc:95:c2:38:03:1c:8b:
04:fb:80:19:ed:1a:48:19:d5:a4:57:a2:52:b2:bc:07:c0:0f:
70:ed:25:20
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIXS/ooT2Hgk6rJRnoZGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGQyMDVjNzk4ZWQ3OGYzYzQ0Y2EwYzhmMjg1MmU4YmVj
OGVhYTIwHhcNMjUwMTAyMDM0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDUxZGMwMDM0YzhiNzk4Y2UwNWIwMWZjNTM0MTVkM2Q5NTA1OGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcYqqxYEKEXb8S9vAq5LqHibeO/t
XLq8eNFgHRsr/ixLMxZGFXQi3ECC+xXxOavSGl1TgVsBgC0iB0M43+Sbw7th1jXm
QFHudCo+N8l//+nCaCJJd41MsZpijNaNlLqfsLsXlQGUwqTrfba3TYZWLT2x4lvA
kodZI94k+ZwZwyPB8Ig80hT9nlUUIzBlaDqUcYfwbkGERkhzBlreLL2jMT5L/73Z
za6r5SUd2ta8/85kkMpq/Z7yJqQ5EcGwOww/8raaUs9oHCbqoVYN/5qADehoBLbT
XjZgHtznbj/s4BU71Xf0olAYLSr1/QdmX9T8DVELSyWvNa5oi8fJZJqifwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGBR3AA0yLeYzgWwH8U0FdPZUFivMB8GA1UdIwQY
MBaAFB6NIFx5jtePPETKDI8oUui+yOqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTkt
ZWUxYmQzNDRmMDE1LzEvWUZIY0FEVEl0NWpPQmJBZnhUUVYwOWxRV0s4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTktZWUxYmQzNDRmMDE1
LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgBUAPAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCrujDQiPn9eQpiN3gkPjGS+EnHgnYvaf0V9aGh
5+l7uJ6LRyoPUyxS8ETAk7HETM5o56Nf5kMy4qNbw7nIQe43+a1AFV5MC6GuwhkE
sV/f4d7Gvvba8nTEWmWDqusNA0rYX+XUL1YzdXFY6JRdCVzrtXls5rtLw+Ax0+nB
Ise/Kg0C6J9tFtUwhKxBfi0FD72fGsjg82J060wVlftM0fkS9LZD5twHqUfOz8ly
izp+pWqP5bBBlPaKwQPkyHEzj8yE2qDvBB30aziyrZRnPYUPL6v6ojW4yO76DvUG
8pQ3702c4dyVwjgDHIsE+4AZ7RpIGdWkV6JSsrwHwA9w7SUg
-----END CERTIFICATE-----
Generated at Thu May 1 05:04:31 2025 by rpki-client