Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/YXBUVHdtAloNdDE0rvkOLPiqxpQ.roa
File: YXBUVHdtAloNdDE0rvkOLPiqxpQ.roa (raw, json)
Hash identifier: dxMEAgHH6GC8XJSg5/kTRWK8sAkhOVdQoZ+el0M1sh4=
Subject key identifier: 61:70:54:54:77:6D:02:5A:0D:74:31:34:AE:F9:0E:2C:F8:AA:C6:94
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0193BF84F775AB0A2D072A41FE6DFA50940D
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/YXBUVHdtAloNdDE0rvkOLPiqxpQ.roa
Signing time: Fri 13 Dec 2024 10:16:22 +0000
ROA not before: Fri 13 Dec 2024 10:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141968
IP address blocks: 109.105.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:84:f7:75:ab:0a:2d:07:2a:41:fe:6d:fa:50:94:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Dec 13 10:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61705454776d025a0d743134aef90e2cf8aac694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:44:98:3f:13:ba:36:c2:9d:8e:4f:94:07:
f6:99:35:12:66:14:60:99:02:0e:2e:d2:18:7a:69:
77:92:64:db:d8:d9:37:21:42:ba:cb:71:1c:c1:2e:
96:0f:ee:b7:18:be:8f:6e:3d:dc:fc:32:6c:0c:e7:
54:86:09:fd:d7:94:47:47:9f:fd:77:1d:bf:0b:7e:
c8:4c:05:18:15:0f:47:35:7e:d7:d5:a0:7c:a9:5d:
e2:c2:37:1e:07:3c:28:e4:f0:39:ea:43:2d:fe:2f:
c7:c7:4c:76:96:0e:d0:9a:61:29:45:05:fb:62:f0:
84:cc:bf:62:59:e3:33:3b:49:5d:72:7c:c3:54:a4:
b0:1b:2e:72:f0:70:6b:b9:2f:fb:b7:aa:ba:54:d1:
02:60:6e:67:b3:99:a6:8a:25:bb:f2:de:65:ac:1a:
56:44:4a:f7:e4:7b:c9:5d:1e:b6:3a:36:0b:20:05:
6c:96:a2:25:ca:58:45:e4:37:b2:81:9b:9d:9a:d5:
33:78:35:6a:79:f1:62:3e:e2:8b:6a:da:67:cf:49:
6d:d6:ec:5c:7d:3f:21:05:d7:f2:52:f5:55:8e:d3:
71:eb:fd:b2:f5:8d:db:76:60:88:30:15:2a:34:99:
ec:fa:1b:74:65:61:f7:81:48:bb:55:8b:dc:f5:3f:
19:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:70:54:54:77:6D:02:5A:0D:74:31:34:AE:F9:0E:2C:F8:AA:C6:94
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/YXBUVHdtAloNdDE0rvkOLPiqxpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.194.0/24
Signature Algorithm: sha256WithRSAEncryption
81:9c:c9:46:f3:06:5d:48:da:99:38:bc:08:d9:b0:27:0e:65:
c8:f2:17:b2:42:af:8e:3c:da:64:50:77:dd:c5:66:d3:d5:e9:
71:91:2d:87:93:96:75:42:4d:95:8f:2b:5a:e3:0f:80:ef:37:
60:de:ee:81:32:8b:df:f8:48:db:d9:ff:e5:77:af:e7:02:8d:
68:fa:bc:7b:bf:63:de:68:2c:b7:1f:75:0a:d6:d7:5f:1c:9f:
ac:a8:53:4e:a3:9d:16:df:f6:09:ab:5a:0f:e6:a1:e7:c7:c4:
7f:88:4a:70:c0:58:e2:4d:4f:85:6f:5f:1b:72:a1:ed:14:16:
3a:68:a1:87:86:c1:25:e8:3d:b4:96:8b:65:a7:6b:b8:67:8b:
f7:16:6a:ba:02:ae:56:50:bf:a3:cf:98:99:13:bd:08:c4:96:
30:17:ff:6f:ea:21:c4:49:41:a6:8f:7e:97:fb:aa:35:61:20:
91:4a:9d:af:7c:50:70:03:b8:5e:1e:27:17:a0:cd:1a:b9:79:
80:d4:11:3b:3c:af:4b:c8:8f:5c:b3:95:a6:5d:74:93:5c:1f:
21:82:3a:22:4c:4b:1e:97:ad:f8:99:06:7e:3a:5e:88:60:6c:
d0:6e:cc:5f:72:16:0d:9a:c7:23:1f:c6:6e:3c:ed:db:9c:fb:
55:82:10:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:06:24 2025 by rpki-client