Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Ykxu62F04CN7gAlG2Dabd08jzZ0.roa
File: Ykxu62F04CN7gAlG2Dabd08jzZ0.roa (raw, json)
Hash identifier: sjZuOQFH+yG1LkkRo7THcNEUNmGmOGf0jBak7asYZU8=
Subject key identifier: 62:4C:6E:EB:61:74:E0:23:7B:80:09:46:D8:36:9B:77:4F:23:CD:9D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01932678C8E10FDDE05E09ACCBF8E2AC2C86
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Ykxu62F04CN7gAlG2Dabd08jzZ0.roa
Signing time: Wed 13 Nov 2024 17:01:10 +0000
ROA not before: Wed 13 Nov 2024 17:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213910
IP address blocks: 81.181.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:26:78:c8:e1:0f:dd:e0:5e:09:ac:cb:f8:e2:ac:2c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Nov 13 17:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=624c6eeb6174e0237b800946d8369b774f23cd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:9f:3e:4f:46:6f:85:2e:16:36:a5:f8:18:
e5:cf:29:45:89:9b:f7:fd:3e:94:fd:45:a5:76:d6:
85:5d:30:48:a7:bc:64:74:9f:07:92:1e:f9:f9:38:
0c:06:01:dc:f7:d8:0e:55:0f:1f:90:61:86:9d:4f:
c6:7e:12:c0:65:41:df:a6:3e:94:a7:85:e3:21:32:
e4:4d:4c:a0:fc:3c:97:fc:69:89:53:91:46:dc:cb:
b8:55:11:d1:12:16:89:94:78:44:e8:dd:46:ee:d6:
55:2e:bb:07:5e:31:db:f4:8a:f5:a8:6c:c5:57:d3:
1a:69:ce:6e:74:eb:5e:66:6b:9c:6d:cc:7d:d2:7a:
d0:6e:dc:43:30:0b:2b:60:bf:de:6b:24:f1:5e:70:
46:46:70:a4:0f:37:11:aa:04:ae:aa:30:98:e2:f8:
f2:4c:1f:37:9f:bf:53:fb:96:00:c0:7f:bf:f4:cb:
81:a3:88:e4:d5:49:18:00:f2:55:6f:7e:21:5e:16:
6f:9a:a4:57:bd:b8:fb:7a:d3:a8:a1:4f:08:a6:f4:
5c:97:12:21:05:9d:83:6c:39:8f:7d:17:0a:71:9f:
a9:aa:4f:58:41:91:ad:93:cb:74:e7:4d:1c:77:b3:
b8:7b:77:5a:39:25:e1:f7:7c:ba:e0:66:6c:1e:5e:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4C:6E:EB:61:74:E0:23:7B:80:09:46:D8:36:9B:77:4F:23:CD:9D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Ykxu62F04CN7gAlG2Dabd08jzZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:aa:11:79:a1:08:a5:42:70:05:3c:95:3c:1c:bb:58:cd:9b:
eb:c2:04:9b:79:a9:68:93:eb:46:b8:34:e7:39:a6:25:6b:8e:
80:b3:5d:f7:d6:90:11:af:83:f7:4c:66:26:dd:99:f4:ad:d9:
c2:fb:1b:8e:f7:70:37:7a:71:de:9d:d3:43:38:d4:2a:07:61:
4e:1a:11:39:b8:4a:06:2b:54:e7:92:49:37:68:8b:e6:4e:a7:
e6:82:e8:c5:a8:0d:0e:5e:d2:28:64:c0:fa:60:81:21:a5:9f:
32:0f:c5:fb:60:f2:40:3b:5a:2f:89:65:c0:0b:ed:d5:5c:4b:
01:90:be:e6:6b:3c:1f:a8:0a:5c:25:85:ea:a1:c5:4d:1f:18:
9e:d6:78:f3:8b:6f:2d:55:a5:8d:f4:d1:15:ce:b3:07:23:94:
77:c5:4a:4c:d7:8f:25:aa:ac:44:bc:18:6e:a2:c2:9f:1c:02:
09:b7:73:cd:8e:01:f7:80:ee:ea:f0:ae:e6:ad:b7:80:b3:24:
55:3b:81:5a:55:16:d3:f4:79:cb:b7:83:88:9c:53:35:87:8b:
82:1b:96:94:24:53:3f:1e:d8:04:24:3b:7b:9f:fa:51:0d:bc:
e5:8c:a7:9a:41:83:bf:a6:6b:4e:93:51:bd:69:92:1d:dc:7a:
73:3d:f2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:30 2025 by rpki-client