Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_yoJWlMYXkCiyFIbbtLERHlf4Sg.roa
File: _yoJWlMYXkCiyFIbbtLERHlf4Sg.roa (raw, json)
Hash identifier: SLG+kIVxYrG+oC09uVLIMRkx9YUKYkrEMvZiHds/rxs=
Subject key identifier: FF:2A:09:5A:53:18:5E:40:A2:C8:52:1B:6E:D2:C4:44:79:5F:E1:28
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0194047F9AFDD9A9C477302AD633A91EC6DD
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_yoJWlMYXkCiyFIbbtLERHlf4Sg.roa
Signing time: Thu 26 Dec 2024 19:44:19 +0000
ROA not before: Thu 26 Dec 2024 19:44:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34872
IP address blocks: 45.154.97.0/24 maxlen: 24
62.3.50.0/24 maxlen: 24
194.28.98.0/23 maxlen: 24
2a0c:b640::/32 maxlen: 48
2a0c:b641::/44 maxlen: 48
2a0c:b641:10::/44 maxlen: 48
2a0c:b641:50::/44 maxlen: 48
2a0c:b641:60::/44 maxlen: 48
2a0c:b641:530::/44 maxlen: 48
2a0c:b641:540::/44 maxlen: 48
2a0c:b641:70f::/48 maxlen: 48
2a0c:b641:820::/44 maxlen: 48
2a0d:ef07::/32 maxlen: 48
2a0f:8400::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:04:7f:9a:fd:d9:a9:c4:77:30:2a:d6:33:a9:1e:c6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Dec 26 19:44:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff2a095a53185e40a2c8521b6ed2c444795fe128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:f9:2d:9a:16:96:c0:59:0e:f9:4f:ff:a3:
3b:f7:f2:61:34:46:85:f3:0c:42:92:e8:a5:d8:0d:
33:44:c2:84:26:bf:60:cd:96:c4:de:1c:14:60:07:
97:cb:46:60:f0:59:1f:d3:16:a1:e1:1a:3c:79:41:
18:45:5e:f9:f1:ab:57:9f:cc:c2:8f:9d:bd:b7:dd:
de:97:a9:a2:b4:b9:a8:86:3c:c2:a2:eb:6a:25:cb:
35:5a:57:5f:b4:22:fc:b3:e1:74:e2:ef:98:b9:27:
ae:2c:84:9e:d5:d2:31:23:13:12:8e:22:c8:38:40:
6f:23:26:62:7d:1b:30:d3:90:cd:75:f7:4e:a6:5a:
27:e4:ce:a4:90:7d:f7:17:c0:f9:9c:ae:be:74:a3:
e9:b2:10:45:fe:0d:88:d6:10:db:a0:68:1f:8c:13:
30:6d:1c:a6:8f:24:3c:1f:62:0e:c4:0f:65:8a:dd:
9e:8a:ab:31:04:46:cf:96:26:af:fd:e9:65:a1:d6:
e4:24:8c:52:1c:bf:a9:9f:9c:a1:2b:77:82:ad:e8:
fe:65:c4:1e:cc:26:e9:19:8c:8d:51:2c:01:72:29:
6d:23:d7:1c:4e:e1:46:aa:d0:6d:51:eb:e4:25:bb:
58:04:23:78:2b:77:1e:09:31:a4:30:4e:7a:13:00:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2A:09:5A:53:18:5E:40:A2:C8:52:1B:6E:D2:C4:44:79:5F:E1:28
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_yoJWlMYXkCiyFIbbtLERHlf4Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.97.0/24
62.3.50.0/24
194.28.98.0/23
IPv6:
2a0c:b640::-2a0c:b641:1f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:50::-2a0c:b641:6f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:530::-2a0c:b641:54f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:70f::/48
2a0c:b641:820::/44
2a0d:ef07::/32
2a0f:8400::/32
Signature Algorithm: sha256WithRSAEncryption
3d:c0:4f:98:99:85:9f:db:69:9d:a2:cb:0b:b2:9c:a9:1c:86:
02:37:97:37:fd:96:48:90:bc:da:9d:8c:88:6d:cf:22:c3:9b:
75:35:c6:87:39:bc:4e:c6:f3:ca:b8:e6:b9:4a:28:68:50:b3:
09:83:1d:29:ed:2d:c2:a8:bf:bd:51:d5:3f:49:a1:24:84:44:
5c:42:78:65:09:fd:2a:36:c5:db:52:a5:e4:cd:75:8f:64:0a:
e8:30:15:97:a6:db:fc:f7:7e:c5:a5:7c:41:12:49:a4:83:18:
7f:4e:7a:19:dd:b9:01:5e:69:85:bd:67:bc:2b:2a:95:f9:7e:
04:91:68:4f:55:27:5c:54:ab:75:78:1d:e2:23:c1:7f:4b:ae:
c1:ab:44:c0:ac:8b:2a:b3:0f:ad:bd:b4:e9:e3:23:11:60:07:
93:ca:36:80:ca:1d:7c:aa:5c:f6:dd:f7:5a:eb:cf:4d:41:9f:
d6:a6:5d:36:d8:99:d6:ab:cc:fc:fa:a5:3e:18:36:22:3a:99:
88:ad:3f:2f:1b:c7:2e:55:20:9b:37:6e:24:5d:06:3c:fc:b9:
90:95:71:fe:04:1b:19:c5:ad:bf:a8:59:f9:d6:76:1f:a9:f0:
a1:ce:84:ab:cd:63:0b:b9:3d:c3:c4:22:02:6c:33:f4:76:f2:
10:3b:5e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:39:01 2025 by rpki-client