Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YBQpv6TuY8rsMvwrxt-i1f006yY.roa
File: YBQpv6TuY8rsMvwrxt-i1f006yY.roa (raw, json)
Hash identifier: 4WUTn7buq+XsaGDRbcLRCpk/Pacy0DrfH1HbTyM0pBY=
Subject key identifier: 60:14:29:BF:A4:EE:63:CA:EC:32:FC:2B:C6:DF:A2:D5:FD:34:EB:26
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D22E333FDE473B91F615307DA8671D824
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YBQpv6TuY8rsMvwrxt-i1f006yY.roa
Signing time: Fri 19 Jan 2024 18:02:11 +0000
ROA not before: Fri 19 Jan 2024 18:02:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44208
IP address blocks: 31.170.48.0/20 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
94.74.187.0/24 maxlen: 24
94.74.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jan 2024 05:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:22:e3:33:fd:e4:73:b9:1f:61:53:07:da:86:71:d8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 19 18:02:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=601429bfa4ee63caec32fc2bc6dfa2d5fd34eb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:b7:05:2f:be:60:ce:8e:27:d1:6f:dd:bf:
79:58:89:8a:88:3a:96:bf:27:38:17:99:b8:1a:ff:
5c:75:4f:0b:84:d3:df:91:13:4e:05:dd:5f:54:ae:
83:87:a0:84:0f:29:27:77:79:97:ee:4a:59:ee:09:
13:e2:70:3a:db:77:19:e3:19:1e:59:29:a1:e3:57:
df:d5:8b:70:73:eb:23:b6:fa:35:67:b3:78:0b:da:
4f:5f:8f:0a:89:9d:7a:56:a5:36:37:4f:d0:d0:f9:
72:37:31:b4:cd:f6:08:98:01:8b:ac:85:f0:f9:b3:
19:a2:4d:c1:70:27:49:42:1f:6d:cc:79:d4:33:28:
8e:7a:67:87:de:b9:b2:b6:f3:fa:58:43:c0:c1:42:
bd:f4:a0:6c:2b:93:c4:47:23:d9:27:95:d8:f8:dd:
6c:fa:06:5f:8f:4c:ba:75:38:36:2a:c8:37:3c:a3:
1d:6b:fc:71:bb:cf:9a:65:ca:cd:52:5b:eb:78:fa:
61:f2:9c:d8:75:e0:8c:a8:71:6b:f1:ed:e4:2c:05:
0b:31:b5:3f:0e:2d:49:fe:23:79:25:f3:7a:6b:03:
0f:64:a1:c1:25:61:2c:76:b1:1f:3a:49:97:4f:ef:
9c:11:79:0a:a0:05:cb:3b:89:2f:b5:a8:e1:4d:a2:
18:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:14:29:BF:A4:EE:63:CA:EC:32:FC:2B:C6:DF:A2:D5:FD:34:EB:26
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YBQpv6TuY8rsMvwrxt-i1f006yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
Signature Algorithm: sha256WithRSAEncryption
89:5e:47:fb:8a:20:70:ae:9f:b3:23:2e:aa:0c:b8:bd:18:16:
77:fc:48:30:b0:cd:bc:c7:81:53:09:55:a0:85:62:8c:40:3e:
4c:b9:cb:c7:25:fc:29:b7:3d:ef:d2:85:5a:22:8e:0e:0d:2b:
1d:6e:df:32:de:a0:43:24:60:b9:04:b5:4f:5c:2a:e5:80:b3:
c4:0a:a1:2d:c3:d1:87:9e:34:b0:bf:3b:92:9a:53:f4:b0:6e:
ae:f2:de:b3:21:1d:3f:a8:58:7c:f7:d0:9e:fa:62:00:85:c0:
f7:63:cd:14:bf:e4:ea:bd:49:76:20:7f:55:c7:bd:76:04:52:
d4:d2:e6:33:0f:3a:94:b8:9e:cf:b5:75:3a:51:69:04:62:ac:
14:5c:e1:4d:cd:49:1c:83:4d:7f:45:25:04:40:78:c7:50:cb:
07:a3:41:e0:5c:4c:bc:29:cc:26:a8:94:da:6c:31:3f:90:55:
a7:17:7a:77:b3:f5:af:6d:bf:36:99:e9:24:45:08:4f:00:25:
16:bd:69:c5:9e:2a:d3:18:cc:8b:cc:61:e0:fa:fb:b4:82:4f:
47:b7:7d:ab:eb:6e:0d:71:52:e8:a2:6d:cf:e3:59:0d:ae:19:
5c:87:43:08:4c:26:bc:60:26:3c:59:fe:73:ce:dc:2f:1f:2a:
a2:6d:92:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:34 2025 by rpki-client