Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yBZVSTxbgkJRaCVoIHGvIpaRimk.roa
File: yBZVSTxbgkJRaCVoIHGvIpaRimk.roa (raw, json)
Hash identifier: bEHlSP0SD/dybCY3g5Ftypzp5OYEZ+IAYRdgU2oTPWg=
Subject key identifier: C8:16:55:49:3C:5B:82:42:51:68:25:68:20:71:AF:22:96:91:8A:69
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0195377C398846D4E2A746760A7EA5C0CC78
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yBZVSTxbgkJRaCVoIHGvIpaRimk.roa
Signing time: Mon 24 Feb 2025 10:24:02 +0000
ROA not before: Mon 24 Feb 2025 10:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 192.36.37.0/24 maxlen: 24
192.71.5.0/24 maxlen: 24
192.71.40.0/24 maxlen: 24
192.71.97.0/24 maxlen: 24
192.71.158.0/24 maxlen: 24
192.121.21.0/24 maxlen: 24
192.121.101.0/24 maxlen: 24
192.121.172.0/24 maxlen: 24
192.121.192.0/24 maxlen: 24
192.165.65.0/24 maxlen: 24
192.165.86.0/24 maxlen: 24
192.176.161.0/24 maxlen: 24
193.180.61.0/24 maxlen: 24
193.181.0.0/24 maxlen: 24
193.181.187.0/24 maxlen: 24
193.183.3.0/24 maxlen: 24
193.183.68.0/23 maxlen: 23
193.183.79.0/24 maxlen: 24
193.183.92.0/24 maxlen: 24
193.183.93.0/24 maxlen: 24
193.183.104.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.234.68.0/23 maxlen: 23
193.234.220.0/23 maxlen: 23
193.234.237.0/24 maxlen: 24
193.235.142.0/23 maxlen: 24
194.14.129.0/24 maxlen: 24
194.14.212.0/24 maxlen: 24
194.68.56.0/23 maxlen: 23
194.68.99.0/24 maxlen: 24
194.68.126.0/24 maxlen: 24
194.68.194.0/23 maxlen: 23
194.71.27.0/24 maxlen: 24
194.71.83.0/24 maxlen: 24
194.71.140.0/23 maxlen: 23
194.71.168.0/24 maxlen: 24
194.71.248.0/21 maxlen: 21
194.103.50.0/24 maxlen: 24
194.132.108.0/23 maxlen: 23
194.132.174.0/24 maxlen: 24
194.132.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 09:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:7c:39:88:46:d4:e2:a7:46:76:0a:7e:a5:c0:cc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 24 10:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c81655493c5b8242516825682071af2296918a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:cb:9a:ee:0e:82:a5:53:92:69:3f:eb:d6:
72:7a:c5:d2:35:01:80:01:d6:c0:63:c3:d9:f9:8a:
84:90:96:7b:d4:48:ce:9f:9c:ca:00:a8:a0:d8:2d:
3b:99:70:2c:9c:f3:ef:63:1f:bd:1c:51:38:5c:29:
2e:73:02:64:60:1d:7b:f7:c4:c0:7e:43:28:78:b2:
60:19:2b:ae:ae:ec:72:9c:c0:f6:9b:6f:c1:f1:20:
39:71:2d:c6:82:35:01:6e:de:41:2b:07:1d:b6:a5:
1c:5a:b6:eb:9e:45:cd:d3:29:00:b6:ef:eb:4b:3b:
93:14:05:71:d2:68:db:8b:7c:3e:68:0c:df:da:cd:
e9:3e:79:89:62:40:1e:93:b9:71:c7:c8:38:a7:fd:
1e:71:02:ef:ad:b0:5b:b5:43:b9:ab:19:3e:c6:62:
95:7f:fa:f4:f4:b5:15:c1:4f:d6:63:54:7d:4a:da:
15:12:24:72:43:84:dc:ce:dc:6c:da:52:62:29:e7:
66:88:4d:b3:3d:3a:4c:78:08:7a:73:c9:cf:48:7a:
0a:db:76:bc:b4:70:ba:0d:b0:61:19:aa:0f:03:66:
59:a0:12:4f:d0:1a:80:62:a7:46:ab:f3:38:5a:f1:
c3:34:40:99:91:9c:e3:6b:04:b3:8a:db:89:c3:b4:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:16:55:49:3C:5B:82:42:51:68:25:68:20:71:AF:22:96:91:8A:69
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yBZVSTxbgkJRaCVoIHGvIpaRimk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.37.0/24
192.71.5.0/24
192.71.40.0/24
192.71.97.0/24
192.71.158.0/24
192.121.21.0/24
192.121.101.0/24
192.121.172.0/24
192.121.192.0/24
192.165.65.0/24
192.165.86.0/24
192.176.161.0/24
193.180.61.0/24
193.181.0.0/24
193.181.187.0/24
193.183.3.0/24
193.183.68.0/23
193.183.79.0/24
193.183.92.0/23
193.183.104.0/24
193.183.118.0/24
193.234.68.0/23
193.234.220.0/23
193.234.237.0/24
193.235.142.0/23
194.14.129.0/24
194.14.212.0/24
194.68.56.0/23
194.68.99.0/24
194.68.126.0/24
194.68.194.0/23
194.71.27.0/24
194.71.83.0/24
194.71.140.0/23
194.71.168.0/24
194.71.248.0/21
194.103.50.0/24
194.132.108.0/23
194.132.174.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:71:6b:97:dd:84:84:a7:fe:bf:ba:93:4d:03:a9:d4:c5:ee:
aa:55:9a:10:15:3b:b3:bc:02:d9:bd:f9:2d:04:23:14:db:6d:
92:29:2a:d5:5c:01:a9:fd:54:56:fb:67:23:60:f7:72:cf:aa:
00:4c:ae:d3:ce:b5:60:8e:f4:2c:d8:35:27:93:0d:6e:7e:f2:
5c:06:ea:5c:d8:8e:73:97:e9:16:d5:db:e8:62:a6:68:a0:db:
ba:5f:dd:90:aa:db:22:0a:c9:de:02:6c:76:00:38:f2:51:e2:
21:df:56:fe:f3:4c:5b:fa:00:8e:fc:e2:96:30:b1:4a:ae:02:
66:b1:c8:08:81:f0:4e:0d:27:a3:8e:fb:13:0c:9b:6b:d8:cb:
09:fd:27:84:0b:46:78:bd:57:01:60:b0:02:17:7c:a6:25:b0:
e4:29:bd:b5:35:f4:9b:8e:1d:7f:57:44:5b:9e:ff:89:cb:55:
3d:3c:b1:9c:99:b8:f0:55:86:6e:e4:85:46:51:c0:cb:1b:90:
aa:7f:f5:0f:01:46:c8:be:71:d8:8d:29:11:66:9e:3d:3e:5f:
8b:47:9c:9f:1a:9d:cc:fd:47:33:b8:34:fd:53:36:a7:78:c1:
41:0b:8d:f9:86:07:e8:3f:41:dd:eb:fb:41:49:4f:30:85:34:
7b:c6:d9:35
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgISAZU3fDmIRtTip0Z2Cn6lwMx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMjI0MTAyNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODE2NTU0OTNjNWI4MjQyNTE2ODI1NjgyMDcxYWYyMjk2OTE4YTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugzLmu4OgqVTkmk/69ZyesXSNQGA
AdbAY8PZ+YqEkJZ71EjOn5zKAKig2C07mXAsnPPvYx+9HFE4XCkucwJkYB1798TA
fkMoeLJgGSuuruxynMD2m2/B8SA5cS3GgjUBbt5BKwcdtqUcWrbrnkXN0ykAtu/r
SzuTFAVx0mjbi3w+aAzf2s3pPnmJYkAek7lxx8g4p/0ecQLvrbBbtUO5qxk+xmKV
f/r09LUVwU/WY1R9StoVEiRyQ4Tcztxs2lJiKedmiE2zPTpMeAh6c8nPSHoK23a8
tHC6DbBhGaoPA2ZZoBJP0BqAYqdGq/M4WvHDNECZkZzjawSzituJw7QfBwIDAQAB
o4IC8zCCAu8wHQYDVR0OBBYEFMgWVUk8W4JCUWglaCBxryKWkYppMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEveUJaVlNUeGJna0pSYUNWb0lIR3ZJcGFSaW1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBwYIKwYBBQUHAQcBAf8EgfcwgfQwgfEEAgABMIHqAwQA
wCQlAwQAwEcFAwQAwEcoAwQAwEdhAwQAwEeeAwQAwHkVAwQAwHllAwQAwHmsAwQA
wHnAAwQAwKVBAwQAwKVWAwQAwLChAwQAwbQ9AwQAwbUAAwQAwbW7AwQAwbcDAwQB
wbdEAwQAwbdPAwQBwbdcAwQAwbdoAwQAwbd2AwQBwepEAwQBwercAwQAwertAwQB
weuOAwQAwg6BAwQAwg7UAwQBwkQ4AwQAwkRjAwQAwkR+AwQBwkTCAwQAwkcbAwQA
wkdTAwQBwkeMAwQAwkeoAwQDwkf4AwQAwmcyAwQBwoRsAwQBwoSuMA0GCSqGSIb3
DQEBCwUAA4IBAQCkcWuX3YSEp/6/upNNA6nUxe6qVZoQFTuzvALZvfktBCMU222S
KSrVXAGp/VRW+2cjYPdyz6oATK7TzrVgjvQs2DUnkw1ufvJcBupc2I5zl+kW1dvo
YqZooNu6X92QqtsiCsneAmx2ADjyUeIh31b+80xb+gCO/OKWMLFKrgJmscgIgfBO
DSejjvsTDJtr2MsJ/SeEC0Z4vVcBYLACF3ymJbDkKb21NfSbjh1/V0Rbnv+Jy1U9
PLGcmbjwVYZu5IVGUcDLG5Cqf/UPAUbIvnHYjSkRZp49Pl+LR5yfGp3M/UczuDT9
UzaneMFBC435hgfoP0Hd6/tBSU8whTR7xtk1
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:25:57 2025 by rpki-client