Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/IzYdlmP_stW0nJYIb85hN17YNhs.roa
File: IzYdlmP_stW0nJYIb85hN17YNhs.roa (raw, json)
Hash identifier: IvJFuRAPTeH0I2VFmTECU1fCAglZV5OM2D+B9QIF06E=
Subject key identifier: 23:36:1D:96:63:FF:B2:D5:B4:9C:96:08:6F:CE:61:37:5E:D8:36:1B
Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e
Certificate serial: 01940ED2018E71E826C844523107B96882F6
Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/IzYdlmP_stW0nJYIb85hN17YNhs.roa
Signing time: Sat 28 Dec 2024 19:50:31 +0000
ROA not before: Sat 28 Dec 2024 19:50:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3360
IP address blocks: 159.101.128.0/21 maxlen: 21
159.101.236.0/22 maxlen: 22
159.101.240.0/22 maxlen: 22
159.101.252.0/23 maxlen: 23
159.101.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0e:d2:01:8e:71:e8:26:c8:44:52:31:07:b9:68:82:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead799026094d60516b527d842b6166805668e9e
Validity
Not Before: Dec 28 19:50:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23361d9663ffb2d5b49c96086fce61375ed8361b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:35:28:8e:dd:b8:0f:b0:94:65:8e:d0:a6:99:
16:e8:4a:08:05:1c:b1:ae:98:ed:e3:45:ce:55:af:
c8:1c:ac:00:af:74:8f:03:87:92:c6:50:ef:49:0b:
c2:77:53:5b:6c:ff:38:37:24:00:50:2f:fc:c6:02:
0e:8b:c1:d4:e3:c7:59:28:54:28:c5:2a:31:26:a0:
c0:32:d4:33:9f:06:de:f8:1e:d4:cf:0a:62:d7:87:
76:c4:0d:5d:d5:64:57:5e:de:a5:07:54:17:5d:2a:
df:eb:d6:a1:04:67:06:41:10:0e:0d:a4:85:7b:fb:
05:1d:ae:27:d5:8b:fc:87:5b:09:9c:a7:08:28:bd:
e2:f6:34:3a:34:a2:1b:bb:2f:8c:3e:e6:bd:89:74:
36:a0:61:55:16:6d:9d:49:c7:d2:80:1a:a0:a6:de:
ae:af:56:13:73:da:0c:cd:f0:08:f8:43:f4:5c:db:
bf:b2:0e:8c:9e:91:13:76:02:e7:8d:f0:65:ca:c6:
d8:f3:61:98:20:5d:f0:53:f6:89:30:2d:d3:2e:2f:
a0:67:3e:9e:8d:d5:e1:c4:12:cc:7e:96:23:fa:3d:
be:08:f5:3f:33:d3:b6:16:48:53:cf:fe:5e:4c:cd:
4a:ea:fb:c1:62:de:fc:58:aa:7a:95:e4:b2:8b:a6:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:36:1D:96:63:FF:B2:D5:B4:9C:96:08:6F:CE:61:37:5E:D8:36:1B
X509v3 Authority Key Identifier:
keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/IzYdlmP_stW0nJYIb85hN17YNhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.101.128.0/21
159.101.236.0-159.101.243.255
159.101.252.0/22
Signature Algorithm: sha256WithRSAEncryption
85:5b:4f:e2:4c:60:ad:63:08:63:b3:f8:62:96:9c:c3:04:2e:
89:f0:84:f0:96:53:4b:84:65:5f:ab:20:17:ed:b4:2e:9b:59:
d0:fe:6a:2c:d8:6e:5a:13:e8:64:f2:81:59:81:8f:9c:a8:37:
f8:97:31:6a:ba:be:fe:26:e7:a4:5f:1d:f5:d9:2e:97:0b:5a:
c7:e3:f4:5e:87:db:ef:5a:0d:2b:cd:a0:1e:21:68:23:f7:1e:
c8:54:70:72:1e:8f:07:a8:c5:bc:c6:5a:a9:c8:26:2f:7d:73:
61:92:7e:0b:b5:45:c0:9b:b6:65:10:29:27:6e:c2:00:d8:e4:
8f:ad:bc:f0:68:59:02:99:12:6f:83:5a:3f:98:cc:13:79:4c:
ff:7d:24:fb:24:4e:a0:13:fd:06:43:03:5f:4c:9e:c2:46:ca:
68:26:fa:47:3f:23:ef:47:ba:71:f8:e0:bd:3d:9b:6c:9c:7b:
65:2c:04:12:53:05:11:67:6b:90:4e:19:fa:3b:02:4a:54:9d:
30:06:04:6a:b0:b0:3f:e9:50:84:4e:19:ca:7e:ac:91:be:b0:
81:69:8f:7b:a3:14:7a:51:a7:cf:f3:b3:27:d5:40:30:32:d8:
90:25:9b:ff:55:7b:06:81:0e:28:24:f3:49:13:f5:82:bd:43:
8c:c0:e3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:09:16 2025 by rpki-client