Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YOYL0IlXh-RelFnFt2LiUy3_24U.roa
File: YOYL0IlXh-RelFnFt2LiUy3_24U.roa (raw, json)
Hash identifier: EMqpgKhiHdVLPIQlmS3u3K/rsYNYdFLWoxsLmTnQVjc=
Subject key identifier: 60:E6:0B:D0:89:57:87:E4:5E:94:59:C5:B7:62:E2:53:2D:FF:DB:85
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 01968BA3CF9782478FDB4A371CA1BD70BD6A
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YOYL0IlXh-RelFnFt2LiUy3_24U.roa
Signing time: Thu 01 May 2025 11:38:10 +0000
ROA not before: Thu 01 May 2025 11:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62205
IP address blocks: 79.174.184.0/21 maxlen: 21
91.209.128.0/23 maxlen: 23
91.209.130.0/24 maxlen: 24
139.28.180.0/22 maxlen: 22
139.28.180.0/23 maxlen: 23
139.28.182.0/23 maxlen: 23
178.213.80.0/21 maxlen: 21
178.213.80.0/22 maxlen: 24
178.213.84.0/23 maxlen: 24
178.213.86.0/24 maxlen: 24
185.44.164.0/22 maxlen: 24
185.77.228.0/22 maxlen: 22
185.77.228.0/23 maxlen: 24
185.77.230.0/24 maxlen: 24
185.77.240.0/22 maxlen: 24
2a01:72a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 05 May 2025 08:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:a3:cf:97:82:47:8f:db:4a:37:1c:a1:bd:70:bd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: May 1 11:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60e60bd0895787e45e9459c5b762e2532dffdb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:11:44:59:96:5f:bf:7e:39:34:01:c2:d8:
ac:3b:44:e5:3a:39:c5:73:c5:82:87:63:2d:33:4e:
ca:c8:bc:2a:75:86:9e:63:0e:a7:b9:48:4f:14:c3:
aa:53:22:49:8d:d0:7e:29:ba:78:79:50:d7:4d:c6:
1a:0e:d7:38:b4:d7:1d:d4:ab:6b:6c:a2:47:04:5a:
df:d3:ac:ac:4e:1c:4d:89:48:26:5b:68:17:94:4e:
2e:d6:ab:5c:b2:c8:0f:9d:ab:35:e5:b9:ba:de:0c:
9e:56:f7:81:68:7d:e7:4a:cd:ca:c9:3a:73:23:5c:
47:9f:44:10:59:13:57:6c:7b:2f:10:f2:64:8b:08:
56:32:30:af:38:08:a3:34:66:e1:84:6b:62:0f:20:
81:87:10:ef:b4:21:55:28:f4:28:b3:e1:c7:ad:f3:
58:26:39:c2:2e:59:f9:67:a4:d7:e1:00:5d:a8:9a:
fc:7d:d3:db:59:c5:e3:1c:09:f9:eb:4f:3b:73:ea:
44:50:3e:5e:13:ab:16:9e:5f:3b:c6:70:23:31:d1:
5c:d2:a1:cb:ca:0f:81:04:89:6f:96:67:7d:47:df:
06:f2:aa:f4:ef:d5:f0:90:7a:3f:f1:57:14:9a:71:
8a:73:a8:d1:18:cc:9b:33:c9:fa:84:0c:cb:20:c5:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E6:0B:D0:89:57:87:E4:5E:94:59:C5:B7:62:E2:53:2D:FF:DB:85
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YOYL0IlXh-RelFnFt2LiUy3_24U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.184.0/21
91.209.128.0-91.209.130.255
139.28.180.0/22
178.213.80.0/21
185.44.164.0/22
185.77.228.0/22
185.77.240.0/22
IPv6:
2a01:72a0::/32
Signature Algorithm: sha256WithRSAEncryption
18:98:d7:53:16:e4:d0:3e:70:de:70:4f:68:69:f9:d0:15:61:
c2:22:30:ec:d6:c1:88:0d:e7:91:49:ca:57:e0:22:27:a3:ac:
f5:9f:0a:02:08:4b:99:1f:ab:fe:c6:a0:ba:3b:9a:82:b5:d4:
6a:0f:2f:a7:78:39:77:15:4b:58:77:bd:64:d6:bd:24:9e:45:
81:d7:1d:ee:c6:e4:d2:08:15:b6:33:00:a8:88:6e:a6:6d:c2:
90:e6:48:0f:2f:e1:24:3a:ca:39:4d:37:c4:05:39:34:20:cc:
34:a1:9f:3a:c1:65:60:7c:6a:c5:b8:44:bb:51:df:31:94:f9:
6d:1d:d1:47:fa:52:cc:1f:c3:88:81:f9:1d:35:71:89:7b:e1:
f2:a6:a1:95:74:ae:b3:c3:36:de:d4:6d:b1:7b:ed:b5:b9:43:
66:9f:b8:fd:ee:24:82:68:a4:dc:37:aa:68:77:b3:74:6e:e6:
9c:25:9d:f4:e1:a3:27:cd:f6:52:87:aa:23:71:cd:58:16:4d:
16:33:2a:1f:48:2f:c3:63:8b:90:51:83:2b:d0:95:c7:d0:90:
f9:26:fa:10:0b:48:57:08:f4:36:51:d3:71:69:70:56:e3:de:
ed:ef:e9:5c:ea:47:dc:b3:46:b0:8e:04:d5:75:f3:fe:3e:42:
1d:32:f2:d4
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAZaLo8+XgkeP20o3HKG9cL1qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDgyZDZkM2ExZGM1MDE3OTU3Mzc1MzdjYTc0ZDI3YTgw
MjY1YTIwHhcNMjUwNTAxMTEzODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGU2MGJkMDg5NTc4N2U0NWU5NDU5YzViNzYyZTI1MzJkZmZkYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlkRRFmWX79+OTQBwtisO0TlOjnF
c8WCh2MtM07KyLwqdYaeYw6nuUhPFMOqUyJJjdB+Kbp4eVDXTcYaDtc4tNcd1Ktr
bKJHBFrf06ysThxNiUgmW2gXlE4u1qtcssgPnas15bm63gyeVveBaH3nSs3KyTpz
I1xHn0QQWRNXbHsvEPJkiwhWMjCvOAijNGbhhGtiDyCBhxDvtCFVKPQos+HHrfNY
JjnCLln5Z6TX4QBdqJr8fdPbWcXjHAn56087c+pEUD5eE6sWnl87xnAjMdFc0qHL
yg+BBIlvlmd9R98G8qr079XwkHo/8VcUmnGKc6jRGMybM8n6hAzLIMUXqQIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFGDmC9CJV4fkXpRZxbdi4lMt/9uFMB8GA1UdIwQY
MBaAFGMILW06HcUBeVc3U3ynTSeoAmWiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMt
YzE4YWQzNmE3YjMwLzEvWU9ZTDBJbFhoLVJlbEZuRnQyTGlVeTNfMjRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMtYzE4YWQzNmE3YjMw
LzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwQDT664MAwD
BAdb0YADBABb0YIDBAKLHLQDBAOy1VADBAK5LKQDBAK5TeQDBAK5TfAwDQQCAAIw
BwMFACoBcqAwDQYJKoZIhvcNAQELBQADggEBABiY11MW5NA+cN5wT2hp+dAVYcIi
MOzWwYgN55FJylfgIiejrPWfCgIIS5kfq/7GoLo7moK11GoPL6d4OXcVS1h3vWTW
vSSeRYHXHe7G5NIIFbYzAKiIbqZtwpDmSA8v4SQ6yjlNN8QFOTQgzDShnzrBZWB8
asW4RLtR3zGU+W0d0Uf6Uswfw4iB+R01cYl74fKmoZV0rrPDNt7UbbF77bW5Q2af
uP3uJIJopNw3qmh3s3Ru5pwlnfThoyfN9lKHqiNxzVgWTRYzKh9IL8Nji5BRgyvQ
lcfQkPkm+hALSFcI9DZR03FpcFbj3u3v6VzqR9yzRrCOBNV18/4+Qh0y8tQ=
-----END CERTIFICATE-----
Generated at Wed May 14 09:04:34 2025 by rpki-client