Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/79anOeYe-yebAO-fH-cMiQkz40Y.roa
File: 79anOeYe-yebAO-fH-cMiQkz40Y.roa (raw, json)
Hash identifier: d20MGTtZf8+JgdmQoi4sFFK17QGc07XojgSz9ZqR2Y8=
Subject key identifier: EF:D6:A7:39:E6:1E:FB:27:9B:00:EF:9F:1F:E7:0C:89:09:33:E3:46
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019449996CDCD90316422413D95609307E82
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/79anOeYe-yebAO-fH-cMiQkz40Y.roa
Signing time: Thu 09 Jan 2025 05:46:19 +0000
ROA not before: Thu 09 Jan 2025 05:46:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48753
IP address blocks: 194.102.104.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 09:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:49:99:6c:dc:d9:03:16:42:24:13:d9:56:09:30:7e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 9 05:46:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efd6a739e61efb279b00ef9f1fe70c890933e346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:80:62:f8:61:58:2b:ca:3b:0c:02:81:60:c4:
0b:18:50:cf:7f:c6:98:75:9f:a0:c1:44:ab:e2:3b:
29:a4:c6:ff:4c:32:a5:29:8c:65:45:98:9c:d5:fe:
fa:6a:5f:e6:19:3e:bd:d6:e1:69:04:a9:67:7c:67:
d3:65:fc:82:5c:5a:12:e3:93:b7:91:8d:1b:a2:4d:
ad:e8:0d:61:14:cf:2c:15:ee:1f:b0:c6:48:17:57:
dc:9b:4e:d5:40:20:75:05:3c:c2:8d:19:3d:3a:65:
4f:65:79:a2:34:66:02:a7:2d:51:5c:00:54:58:6b:
1e:08:db:f9:43:34:c1:32:31:42:5d:65:0c:d6:b1:
d5:31:45:c4:4c:6a:ac:3a:f6:16:5b:9f:00:9f:1b:
1b:f9:c2:98:d5:ff:35:40:21:f6:f7:85:73:fb:dd:
d0:97:cf:81:4f:78:a8:55:50:57:06:39:d1:cc:96:
4e:9b:ab:87:dc:c7:ff:49:97:71:e5:d7:78:42:01:
8d:90:a1:ab:fe:1e:db:84:43:08:53:d5:7c:b9:45:
45:e7:81:fa:8b:5b:c7:bf:1e:b7:b2:54:26:e6:0e:
48:3e:f4:75:ba:8c:8b:d7:cb:e7:5b:7d:64:af:9e:
5f:68:4c:d8:a7:63:0c:e5:36:cb:33:0a:6b:80:c7:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D6:A7:39:E6:1E:FB:27:9B:00:EF:9F:1F:E7:0C:89:09:33:E3:46
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/79anOeYe-yebAO-fH-cMiQkz40Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.104.0/24
217.156.66.0/23
Signature Algorithm: sha256WithRSAEncryption
74:17:79:a9:8f:26:77:dc:52:d7:11:4c:b7:6d:a0:d1:19:ef:
b0:ff:6b:04:7f:69:f3:22:c6:2b:d7:80:69:ea:82:d4:81:88:
82:ac:f2:19:94:3a:57:3f:ea:ee:f1:6a:2f:54:b1:35:56:fe:
91:82:6b:17:18:aa:41:af:fb:57:76:b7:6e:89:8f:50:e3:9b:
01:78:50:85:53:0b:50:5b:5c:13:ee:5e:6f:1d:54:6f:4b:b2:
bb:22:ba:84:32:38:db:86:aa:5f:b0:50:9f:01:8e:20:85:87:
26:a7:c5:e2:2c:a8:58:93:9f:61:dc:c4:98:fb:a6:d0:58:d4:
4c:b3:89:e7:ca:de:7f:74:56:80:cb:45:ab:52:ec:df:32:25:
62:0b:b4:7f:1b:4f:d6:b9:11:75:35:c7:54:3a:c4:f5:f4:b8:
16:32:89:90:fd:06:d0:10:ca:57:e4:ae:98:8a:35:45:57:3b:
50:76:d7:ac:bd:4a:dd:b9:d5:a5:4f:76:25:27:a8:4c:a5:d1:
27:85:92:43:3c:eb:5c:a5:25:5a:16:5d:08:f2:f2:c7:5a:31:
dd:75:3a:e4:58:e6:4f:33:8c:a1:2c:fb:8f:ba:23:38:07:bf:
27:73:02:5c:b2:bc:49:34:f1:8b:54:49:a6:74:40:c1:73:5b:
8d:33:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:39 2025 by rpki-client