Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/yCgpSRO73WP_A6FJlD6wnznge7E.roa
File: yCgpSRO73WP_A6FJlD6wnznge7E.roa (raw, json)
Hash identifier: 3VdggeZ33SaN5nNJgt6xh7aPgFlQj6IrVVv/8XoLBlw=
Subject key identifier: C8:28:29:49:13:BB:DD:63:FF:03:A1:49:94:3E:B0:9F:39:E0:7B:B1
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01954CE794496A619D9957B0DD92AF9BBAB2
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/yCgpSRO73WP_A6FJlD6wnznge7E.roa
Signing time: Fri 28 Feb 2025 14:13:20 +0000
ROA not before: Fri 28 Feb 2025 14:13:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.65.114.0/24 maxlen: 24
188.209.131.0/24 maxlen: 24
188.209.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 19:38:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:e7:94:49:6a:61:9d:99:57:b0:dd:92:af:9b:ba:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Feb 28 14:13:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c828294913bbdd63ff03a149943eb09f39e07bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:18:41:a4:62:95:21:74:46:bf:ef:b0:b2:
ae:97:52:27:c7:19:f1:82:c0:cf:3f:18:c5:46:5d:
21:b7:46:d6:af:d7:e7:00:32:ee:bb:18:6f:44:6f:
40:75:41:a7:7e:f9:dc:08:4f:41:6e:3b:f6:48:9a:
86:5c:89:dd:a6:46:8b:71:77:40:e6:ab:09:d3:bd:
a5:4b:62:c0:bd:cb:d3:2f:46:64:ce:d5:5b:fc:7c:
e0:81:c0:48:be:31:a6:30:35:67:ac:1a:af:3c:d7:
47:91:54:18:14:31:b4:06:24:57:8c:c5:b7:3a:1e:
f8:94:ee:6e:b5:7d:64:6d:0a:c8:17:4b:d7:cc:9e:
90:5f:19:f8:61:6d:92:27:03:e8:f1:64:ce:8c:88:
7e:d6:d5:32:19:38:58:f9:7f:11:11:85:84:69:b3:
17:96:05:1f:b4:e3:8e:18:21:a6:d4:03:c0:f7:4d:
16:6e:1e:e1:0b:ed:fe:93:0d:3a:bf:a9:52:c6:99:
05:3f:d7:96:3f:18:f5:2f:b8:02:7b:cf:dd:91:38:
e4:34:6c:85:e6:2a:ce:68:23:35:e5:c5:b6:85:e8:
52:6e:ce:48:e9:a4:bd:e7:61:13:ab:16:6e:94:b6:
98:59:2c:15:61:b2:7b:fe:d8:cb:54:7b:50:9b:cb:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:28:29:49:13:BB:DD:63:FF:03:A1:49:94:3E:B0:9F:39:E0:7B:B1
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/yCgpSRO73WP_A6FJlD6wnznge7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.114.0/24
188.209.131.0/24
188.209.139.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f1:d2:24:2c:0a:bd:b1:2d:e2:ac:2b:98:43:18:39:fa:1e:
e9:af:3e:0a:f3:89:52:43:65:90:17:d6:ee:e1:97:3b:bd:f9:
3f:95:76:39:55:d5:b8:c3:0b:f2:ad:85:61:28:44:0a:71:7f:
2e:a4:3e:d2:e6:a4:bb:d0:7d:a9:bf:f8:69:94:82:d3:b6:4a:
e6:f4:a6:23:8b:2f:0a:79:a5:02:e5:7f:b7:73:e9:eb:5a:2a:
1f:0f:70:20:12:8f:05:fd:28:a7:df:79:d3:95:ce:67:83:83:
59:e3:79:20:1c:9e:79:d0:68:98:70:55:86:e9:b2:a1:ec:a5:
61:b8:f7:0e:ef:70:53:b9:c3:c2:b3:10:c8:ff:ec:d7:72:e7:
15:fc:ec:0d:d0:1d:38:15:b1:6c:e0:9d:f8:df:9f:03:92:12:
69:1d:5c:ad:91:2d:5c:ad:1d:a4:a8:4b:47:81:cb:d2:7c:3b:
91:39:13:3e:b2:77:df:fa:14:b7:a8:b9:07:a2:24:47:56:bc:
b7:0a:8c:ad:dc:1a:66:e0:76:68:11:b0:00:5b:3f:a2:01:f8:
c6:eb:19:14:40:72:6e:f4:15:e1:40:08:66:72:c7:35:af:42:
f4:a4:a1:1b:7e:57:b6:5c:1f:8c:58:0d:c8:04:17:8d:f8:35:
63:2f:c2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:43:31 2025 by rpki-client