Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/YmEAbVIB_pRL9BvMfZmGKiUzCPs.roa
File: YmEAbVIB_pRL9BvMfZmGKiUzCPs.roa (raw, json)
Hash identifier: FZKoRh9NoS6ski6qbjZvpBqnneSvPxoybJCfErI7ePo=
Subject key identifier: 62:61:00:6D:52:01:FE:94:4B:F4:1B:CC:7D:99:86:2A:25:33:08:FB
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 01903ADEBE286F594E69CD1159368BF30606
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/YmEAbVIB_pRL9BvMfZmGKiUzCPs.roa
Signing time: Fri 21 Jun 2024 12:56:34 +0000
ROA not before: Fri 21 Jun 2024 12:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213291
IP address blocks: 195.242.8.0/21 maxlen: 24
195.242.16.0/20 maxlen: 24
2a13:5947::/40 maxlen: 48
2a13:5947:130::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Aug 2024 15:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:de:be:28:6f:59:4e:69:cd:11:59:36:8b:f3:06:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Jun 21 12:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6261006d5201fe944bf41bcc7d99862a253308fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:30:94:43:b5:ee:5e:90:b7:63:da:91:cc:
f6:94:57:9e:5e:09:41:22:87:43:42:52:90:ee:78:
c9:b7:7f:77:ab:03:60:46:41:ec:52:dc:41:4f:21:
65:2d:54:22:32:40:e5:3a:93:b0:eb:32:8c:2b:37:
92:82:9b:d5:f0:15:56:9e:ee:4a:54:b8:8e:87:63:
4d:1b:f2:1d:dd:c1:fa:a3:55:cb:5d:2d:34:7a:3c:
31:a1:d6:37:5e:a8:64:60:10:39:6e:fc:b0:ec:ab:
66:ca:aa:18:b2:b5:5a:ef:f3:48:ff:08:11:b1:a0:
05:37:98:9d:11:e8:2a:71:ee:50:f4:c5:51:cc:12:
d2:99:58:44:bb:2d:7a:ef:45:95:d9:82:db:82:ba:
d4:cf:74:45:f4:69:a6:a3:fd:01:d0:87:f6:10:69:
b4:cd:6e:a9:6a:83:1d:bd:b6:6a:5b:5b:ca:a1:cb:
8e:33:16:6c:9c:54:c5:fb:90:4a:46:94:fe:58:96:
90:d1:99:c4:07:18:7b:4a:fe:d5:f0:11:ec:bd:45:
16:21:a5:ba:85:b2:07:4b:97:d3:10:c9:0f:c3:87:
88:3c:8d:f7:17:d7:ad:c1:c6:f6:f9:33:c1:7c:35:
01:76:57:7c:7e:ea:db:d4:84:15:64:a2:90:ce:17:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:61:00:6D:52:01:FE:94:4B:F4:1B:CC:7D:99:86:2A:25:33:08:FB
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/YmEAbVIB_pRL9BvMfZmGKiUzCPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.8.0-195.242.31.255
IPv6:
2a13:5947::/40
2a13:5947:130::/48
Signature Algorithm: sha256WithRSAEncryption
13:e8:df:02:7f:14:da:ef:b6:7e:c6:fb:c8:e4:d5:9e:46:8c:
16:3e:8d:17:2b:30:98:5c:1c:b1:bd:37:c5:91:ce:03:13:89:
94:1e:da:36:57:54:96:c6:e2:4b:ea:69:04:4a:a4:e7:0d:54:
a8:49:58:72:96:a1:e9:84:5b:b1:66:6a:0b:d0:d1:9a:25:42:
47:20:96:80:f8:90:1c:3a:51:96:c4:7e:35:37:93:fc:e7:59:
9a:d0:ac:96:c8:02:28:a1:00:05:6d:7b:80:78:ff:9f:18:05:
fb:0d:6b:26:b3:57:c6:f4:84:fd:f3:46:0e:c6:6d:b7:f0:b9:
17:de:26:41:69:3b:02:35:28:82:f1:b7:19:05:4d:07:05:05:
f7:0e:3d:4c:bf:11:11:8d:c3:34:08:08:2b:0a:14:05:cd:73:
e0:7d:1a:97:e6:af:04:66:58:a0:ce:f3:41:44:e9:c9:c9:78:
76:b0:58:59:18:5e:a0:61:c2:13:be:09:73:36:86:0c:70:c5:
02:f5:92:2a:e7:72:84:b4:1b:04:c6:87:b5:b6:20:c8:b6:69:
d2:8d:a7:7e:4c:ba:90:40:a2:ce:84:e9:1c:f8:2d:8f:80:ce:
94:d5:9c:be:21:c6:60:7e:39:d1:16:cf:95:d1:50:0d:e4:fc:
40:d2:e6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:09:33 2025 by rpki-client