Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/yTvuSo4M2yPlnQuPKFDI2oPFr00.roa
File: yTvuSo4M2yPlnQuPKFDI2oPFr00.roa (raw, json)
Hash identifier: epYxZvKxDKG6H4vfcmDpFaVeig8WUmsKPfaIYsf3X8g=
Subject key identifier: C9:3B:EE:4A:8E:0C:DB:23:E5:9D:0B:8F:28:50:C8:DA:83:C5:AF:4D
Certificate issuer: /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Certificate serial: 018CC42452BEB5F02DD1AA4EE25A6973B587
Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/yTvuSo4M2yPlnQuPKFDI2oPFr00.roa
Signing time: Mon 01 Jan 2024 08:29:23 +0000
ROA not before: Mon 01 Jan 2024 08:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207916
IP address blocks: 93.174.80.0/21 maxlen: 21
185.80.116.0/22 maxlen: 22
83.229.20.0/23 maxlen: 23
37.26.74.0/23 maxlen: 23
37.26.76.0/22 maxlen: 22
2a00:1350::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:52:be:b5:f0:2d:d1:aa:4e:e2:5a:69:73:b5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Validity
Not Before: Jan 1 08:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c93bee4a8e0cdb23e59d0b8f2850c8da83c5af4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:52:ab:3d:d7:89:af:77:fb:75:85:d4:84:
5d:f3:1e:15:0a:3a:f7:d3:ac:21:49:d0:cb:4c:1e:
f0:f8:c6:0d:af:f8:49:7d:17:4e:78:91:0b:71:f1:
2a:45:06:a3:60:36:ce:3e:b5:2b:05:2f:d8:8b:03:
e7:cc:2e:5a:14:0d:31:f0:60:a9:e7:63:03:c8:92:
f4:a6:ce:d7:bf:3b:5c:86:6f:62:78:85:a8:7b:b5:
92:25:51:38:57:76:1b:08:ac:4f:99:9f:8f:a6:36:
77:ee:99:e4:51:35:ac:1c:c8:df:2a:54:a3:67:5f:
51:ff:db:3a:c2:ad:5c:5e:45:65:36:c6:0d:5b:83:
11:15:8a:81:90:9c:a8:54:82:5a:c5:40:f4:23:3c:
6d:76:47:7f:be:86:94:01:07:53:5b:90:4c:2a:a7:
b2:3c:b3:aa:88:bc:13:42:5e:d8:55:39:2b:e4:b4:
49:20:69:1e:7f:98:93:cb:b6:b5:2a:e0:91:b2:ee:
4e:41:7f:95:28:a1:71:c5:d8:8e:d2:ca:ae:71:6e:
64:6f:33:6b:a4:2d:57:cc:ad:bf:43:1b:8f:6a:09:
9c:98:bb:ba:d3:67:f1:14:41:f7:28:bc:91:25:3a:
94:51:d0:bb:0f:a5:9b:3a:51:4d:a6:2f:a6:66:97:
f8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3B:EE:4A:8E:0C:DB:23:E5:9D:0B:8F:28:50:C8:DA:83:C5:AF:4D
X509v3 Authority Key Identifier:
keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/yTvuSo4M2yPlnQuPKFDI2oPFr00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.74.0-37.26.79.255
83.229.20.0/23
93.174.80.0/21
185.80.116.0/22
IPv6:
2a00:1350::/32
Signature Algorithm: sha256WithRSAEncryption
9a:5f:83:f4:53:07:fb:bd:5a:4f:63:3a:16:38:0e:c1:eb:df:
34:8d:36:49:25:ae:f5:c6:58:81:14:da:29:40:d9:95:7d:fe:
c6:78:df:1c:b3:35:8f:cb:91:c7:7d:04:56:f8:c4:45:d4:52:
e5:16:5a:0d:37:49:56:3e:5f:da:54:13:fe:e2:a9:6e:9e:c3:
6c:94:ab:dc:72:04:3f:1c:95:b1:ee:5c:e7:fd:6e:fd:cf:52:
0a:e0:e6:75:22:7b:79:7f:ad:15:80:df:d3:34:0c:5d:1e:92:
72:5a:c9:b4:04:b8:43:89:46:16:45:62:da:b6:2e:80:bd:96:
84:80:8b:be:f7:25:ca:27:26:87:24:09:8f:33:a5:8c:f0:77:
03:11:99:bd:69:fa:f5:07:b3:2a:ab:45:0e:01:61:47:b6:cd:
5f:c9:16:f4:ce:24:6e:3f:d8:1c:e7:ee:96:8a:31:07:72:f5:
c7:e7:6e:60:a8:41:fd:69:b6:bd:bc:2e:cb:99:06:43:a1:61:
5e:3e:e2:92:96:06:29:e0:cf:24:2a:86:fb:65:8e:f8:9b:3a:
cc:17:04:91:c9:d7:aa:1d:bf:44:96:46:04:94:46:14:e3:cc:
b5:31:2c:98:47:36:94:88:39:3c:e8:96:14:f9:c7:3f:6b:5c:
7c:ee:8e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:36:56 2025 by rpki-client