Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/rbEWkPr-oO7UYbtpc7CZix9FphY.roa
File: rbEWkPr-oO7UYbtpc7CZix9FphY.roa (raw, json)
Hash identifier: HwxUJbOMn9va3GaW4nfSZVoHKXiXg6NrEL8C0XLg52g=
Subject key identifier: AD:B1:16:90:FA:FE:A0:EE:D4:61:BB:69:73:B0:99:8B:1F:45:A6:16
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 018CC2DAC6CC2C967493CCA75C3AFF7FCC25
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/rbEWkPr-oO7UYbtpc7CZix9FphY.roa
Signing time: Mon 01 Jan 2024 02:29:26 +0000
ROA not before: Mon 01 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51809
IP address blocks: 109.74.28.0/22 maxlen: 24
45.66.252.0/22 maxlen: 24
91.217.6.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 09:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c6:cc:2c:96:74:93:cc:a7:5c:3a:ff:7f:cc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jan 1 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adb11690fafea0eed461bb6973b0998b1f45a616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:c4:ee:aa:52:3a:4c:e4:64:30:e9:b1:02:
17:9f:51:c1:83:63:37:b4:26:1d:b4:76:02:69:0e:
bf:98:fe:18:e9:1c:6f:1e:a5:9e:0e:61:05:24:84:
61:b1:dc:11:15:76:18:54:cd:6c:b5:bc:9b:b1:2e:
5d:67:31:66:99:97:5e:c6:9f:2d:be:a4:51:73:36:
38:52:77:83:0e:36:23:8e:a2:03:f4:5a:b9:ea:ef:
2f:48:e6:08:3f:bc:97:19:10:9d:a1:05:5a:0c:0a:
7f:d2:49:3d:26:0b:96:04:53:c6:96:42:e5:ed:29:
bc:a6:43:33:d5:a4:90:f4:67:e6:13:b6:a8:3f:a3:
bd:d7:99:13:28:19:c1:87:b6:74:51:80:d1:1b:0a:
83:ef:1f:0b:f8:ab:a4:93:ad:8e:c0:bd:bc:2e:65:
11:89:8f:0a:3b:1c:bf:8f:2d:a4:66:56:0b:01:5a:
b5:70:b3:bd:7d:6b:e0:f5:bd:6a:4a:11:a0:e4:4f:
dc:50:07:36:27:89:09:48:20:ce:ca:38:44:7a:ac:
e8:fa:09:f3:06:47:81:24:a8:14:50:83:48:eb:c5:
f9:50:dc:51:d9:de:81:47:eb:51:c8:6d:ea:7c:5b:
33:78:c6:5d:17:68:37:6c:8a:8f:88:2a:f5:bb:42:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B1:16:90:FA:FE:A0:EE:D4:61:BB:69:73:B0:99:8B:1F:45:A6:16
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/rbEWkPr-oO7UYbtpc7CZix9FphY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.252.0/22
91.217.6.0/23
109.74.28.0/22
Signature Algorithm: sha256WithRSAEncryption
12:96:91:d2:57:d2:a6:8d:39:52:a4:41:31:e9:ff:c6:74:13:
a9:29:2c:36:a3:d3:87:21:5c:e8:2f:2d:ad:16:8c:dc:d9:fa:
9b:b7:bb:23:98:c0:cb:96:88:67:fa:25:e9:77:67:f1:5c:3b:
08:91:36:1e:12:e9:f0:55:fa:e7:0f:c8:ff:18:aa:0f:17:5f:
41:cc:d2:5b:2e:ec:37:d8:59:2c:46:fd:26:74:2d:0e:60:d0:
d0:c4:12:0c:75:76:0e:cd:a9:13:13:26:8f:2a:ee:e2:64:6c:
25:c6:9d:cc:3b:6f:82:5e:de:9e:96:85:86:b8:0c:52:78:3a:
eb:55:8e:01:6b:b2:c4:a6:0c:0b:45:69:6f:f6:b8:3a:35:e6:
a4:ee:cd:cc:ca:52:ef:83:e6:85:93:82:32:2e:8b:79:4e:3c:
95:d0:12:46:54:7d:c7:cc:aa:ec:98:d9:8e:b2:ce:6b:c1:e6:
ff:38:94:5e:a6:01:15:9b:fb:97:1f:3b:47:c1:52:16:da:63:
34:b5:3a:f8:44:58:19:f2:09:31:ed:dc:46:0d:08:0a:c9:d3:
99:d5:24:45:64:ea:9c:8c:5d:3b:1b:d4:06:30:2e:54:d5:77:
11:a8:d7:c4:93:65:41:75:a8:ac:3f:40:33:d6:c7:a7:b1:e9:
99:b1:83:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:51 2025 by rpki-client