Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YkXBj4Ej-4bpZNtgiCMWsNJxLRk.roa
File: YkXBj4Ej-4bpZNtgiCMWsNJxLRk.roa (raw, json)
Hash identifier: jVnKYNcIML6Dvi+sS6FNepjEheam+vewHSeJ1FlmNd0=
Subject key identifier: 62:45:C1:8F:81:23:FB:86:E9:64:DB:60:88:23:16:B0:D2:71:2D:19
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018FE2924561F05B4FBDC60AAE8D958BEFEC
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YkXBj4Ej-4bpZNtgiCMWsNJxLRk.roa
Signing time: Tue 04 Jun 2024 09:26:27 +0000
ROA not before: Tue 04 Jun 2024 09:26:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 43.225.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 17:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e2:92:45:61:f0:5b:4f:bd:c6:0a:ae:8d:95:8b:ef:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 4 09:26:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6245c18f8123fb86e964db60882316b0d2712d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:35:52:e6:03:04:1e:b7:a1:66:e1:16:0f:
5d:e9:8e:bb:69:cc:34:36:3f:f9:91:a4:bb:8a:fd:
ad:88:d9:c2:1f:70:af:f5:49:08:42:fd:48:49:73:
35:ea:fc:3c:d8:7f:00:3a:f0:eb:34:f7:12:63:a7:
ee:3d:ad:fe:b9:3a:23:3e:62:32:f4:4e:83:05:11:
34:45:d2:5a:c5:f7:ce:46:2a:61:86:34:1c:d2:57:
cf:2e:55:d8:fb:8b:1a:00:b9:29:ea:64:a7:b4:6d:
03:18:0f:2c:4a:d1:23:6f:38:47:2e:94:a3:d9:6c:
6c:4c:74:aa:b8:4e:0c:21:22:24:70:38:c2:64:a0:
3b:2a:7e:1d:88:0f:d6:76:52:e8:23:40:07:00:30:
12:32:1c:7e:17:66:08:4d:7a:fc:99:ab:21:25:3b:
ff:31:5a:49:07:91:5f:bc:1e:db:32:06:24:24:97:
44:bd:d3:f5:38:2b:23:fe:d5:64:19:e5:c3:41:58:
01:f7:f3:0e:3c:d1:c0:93:d2:85:e9:56:70:55:24:
79:19:9d:49:34:7b:91:e2:c4:e5:36:15:bd:c7:37:
80:1c:88:a7:3a:1b:f4:7e:0b:c5:74:a8:5e:f7:6b:
a6:31:e7:28:e1:34:15:3e:9a:8a:35:6b:8b:c3:40:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:45:C1:8F:81:23:FB:86:E9:64:DB:60:88:23:16:B0:D2:71:2D:19
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YkXBj4Ej-4bpZNtgiCMWsNJxLRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.91.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:1d:8b:51:f9:87:cb:02:ac:8d:6f:c1:3d:b6:a4:0c:f4:eb:
8a:9a:b0:77:49:b6:f9:9e:f0:17:f1:4f:5a:03:06:07:be:39:
ab:3c:54:66:19:8a:05:cd:14:67:e0:71:47:12:6d:20:8c:d1:
d9:10:a4:ef:64:77:a4:a4:82:a4:9c:2b:ba:e8:df:d6:da:c9:
e2:3f:52:7f:f9:00:99:ea:c5:a8:fc:45:83:b8:27:24:ad:c4:
93:86:82:72:01:21:98:c4:e3:3b:f4:34:7d:bc:0d:91:f0:e6:
12:ca:33:2a:24:91:91:3b:c6:25:9b:63:58:00:d0:2a:7c:24:
c7:43:80:27:29:26:35:bd:0b:b3:99:f0:bb:d7:10:e6:2c:0a:
fe:72:8f:20:9c:ae:35:18:50:81:63:b2:f8:a2:50:78:56:1f:
8a:54:c1:5b:5b:d4:54:02:69:7a:ee:d8:66:07:f9:63:18:43:
d2:9e:c6:c4:2c:6d:24:44:e3:41:3c:47:b4:02:08:96:fa:df:
25:f1:24:77:7d:16:c8:bc:8e:4f:f4:19:69:9b:dc:3d:f1:b4:
39:6c:c7:93:96:be:bb:85:69:89:73:3d:fe:7d:4c:3d:99:a1:
84:15:fb:8e:3f:46:61:ff:ff:1e:5e:9b:c9:6d:98:29:3c:57:
66:a1:c3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 21:58:39 2024 by rpki-client on console-fra.rpki-client.org