Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/yFImzWUwAlyQoPANDPwOEUD5fqY.roa
File: yFImzWUwAlyQoPANDPwOEUD5fqY.roa (raw, json)
Hash identifier: RiM6Eosu4SMzWZEPWPJoKNuo0xWj55tsB18/m0MqX+A=
Subject key identifier: C8:52:26:CD:65:30:02:5C:90:A0:F0:0D:0C:FC:0E:11:40:F9:7E:A6
Certificate issuer: /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Certificate serial: 018CC56E0DA7D2FE77885F8F7CB02CF5A243
Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/yFImzWUwAlyQoPANDPwOEUD5fqY.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43530
IP address blocks: 176.62.240.0/20 maxlen: 20
78.110.144.0/20 maxlen: 20
37.75.192.0/21 maxlen: 21
46.245.128.0/21 maxlen: 21
5.35.128.0/19 maxlen: 19
185.222.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0d:a7:d2:fe:77:88:5f:8f:7c:b0:2c:f5:a2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c85226cd6530025c90a0f00d0cfc0e1140f97ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:83:f4:8d:3d:4f:ec:b3:50:c2:18:bf:08:
7a:88:5f:5e:28:b1:99:50:e1:64:72:fd:4d:94:da:
56:10:25:38:6a:23:3f:4f:3a:a3:67:88:3a:e1:1f:
b0:7d:8e:c8:a2:6c:1b:3a:18:72:de:0b:bd:8a:a9:
54:c6:2c:1e:68:32:9a:4c:ec:a1:a3:0a:21:5a:54:
b8:9a:73:66:d6:79:0c:d2:6f:c6:31:76:6a:ef:f9:
eb:c1:4f:4e:76:29:0e:2c:25:f0:58:fc:52:44:f3:
73:74:8a:07:f1:d5:e9:d4:95:cd:26:fa:04:2d:ee:
89:c2:15:a3:11:b2:95:5f:49:da:cd:9d:be:09:90:
34:3a:7c:f1:63:1d:f1:42:98:9e:89:e2:23:2a:b3:
b5:bf:ab:fd:5a:53:10:a6:cd:c4:b5:ae:a4:30:8a:
35:f9:53:68:9e:d5:43:3d:66:af:53:95:bf:0d:7c:
4a:7d:8b:fd:5f:03:eb:7b:80:c6:4c:ff:09:31:c6:
be:05:63:95:32:83:13:d2:20:e3:e1:ef:ce:82:b4:
ca:9b:c9:c3:bc:df:4f:90:92:03:37:14:e1:08:ea:
de:19:05:44:b7:21:e6:1b:d5:1c:ab:15:66:31:a7:
32:cf:4d:7b:6f:2e:26:e9:ba:68:ee:96:11:9c:ab:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:52:26:CD:65:30:02:5C:90:A0:F0:0D:0C:FC:0E:11:40:F9:7E:A6
X509v3 Authority Key Identifier:
keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/yFImzWUwAlyQoPANDPwOEUD5fqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.128.0/19
37.75.192.0/21
46.245.128.0/21
78.110.144.0/20
176.62.240.0/20
185.222.236.0/22
Signature Algorithm: sha256WithRSAEncryption
94:18:b9:6f:8f:a1:61:4e:f9:80:1b:c8:2d:63:b6:ce:91:81:
cc:ae:1f:ee:69:6b:68:70:69:37:59:67:20:1c:22:af:48:19:
84:f3:46:7a:8a:b9:e9:36:33:19:58:c3:61:88:2d:27:ff:05:
11:02:37:f6:4f:60:3e:2f:52:02:b5:ae:85:11:55:0b:53:45:
0f:eb:05:ee:31:1e:47:6b:a6:d5:dd:c0:a2:c6:fc:8f:c0:77:
c6:de:0c:b9:1a:db:98:55:cf:14:59:e3:04:1c:2a:a8:e6:6e:
f4:ce:f2:1f:7a:1d:e8:9c:57:ec:2d:2c:d2:be:32:57:90:a9:
b4:0f:f4:a8:4c:1b:29:0c:bc:3a:a8:11:3c:6f:e1:9a:8b:c4:
0f:92:98:ce:06:7b:ef:ce:4c:4e:9b:c5:01:6a:7c:6a:35:5d:
e8:fd:90:02:1a:3c:f0:cd:e4:e8:d1:e8:29:e4:c7:ed:05:f8:
81:65:7d:36:35:fc:8c:98:6b:92:ba:aa:c5:b9:bb:21:74:cf:
61:a3:2d:e3:2d:4d:9d:26:55:d5:be:e0:4b:8f:f1:9b:94:6e:
78:db:5d:9d:77:f9:98:ac:ba:4e:f0:29:82:2b:60:6e:49:36:
10:8f:0c:46:77:6b:5d:91:b8:41:25:9d:21:8e:1e:bf:e3:de:
66:fe:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:03:48 2025 by rpki-client