Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/YYYbJcJANux22A7XJ0cCTAzlSDI.roa
File: YYYbJcJANux22A7XJ0cCTAzlSDI.roa (raw, json)
Hash identifier: OdYsp6IHsod+6pyChK61PphcMztuc1DykuaWDFDK4QA=
Subject key identifier: 61:86:1B:25:C2:40:36:EC:76:D8:0E:D7:27:47:02:4C:0C:E5:48:32
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 0193FD178C12E9012DBC0D0D40D59D463204
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/YYYbJcJANux22A7XJ0cCTAzlSDI.roa
Signing time: Wed 25 Dec 2024 09:13:19 +0000
ROA not before: Wed 25 Dec 2024 09:13:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 45.143.28.0/24 maxlen: 24
45.143.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fd:17:8c:12:e9:01:2d:bc:0d:0d:40:d5:9d:46:32:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Dec 25 09:13:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61861b25c24036ec76d80ed72747024c0ce54832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:18:22:78:68:cd:1a:6e:fc:c3:9d:ad:79:c6:
bb:46:82:d2:08:03:da:f5:dd:b3:21:57:74:10:bd:
e7:9c:2e:07:e3:cd:5c:84:f9:1e:b6:d9:c4:20:7f:
8e:b1:38:bb:b9:00:14:2e:98:c2:fb:df:95:ef:dc:
e5:40:df:c7:e8:ce:91:c7:27:53:77:fa:d8:c1:ca:
fc:6e:1f:c3:3b:b7:ac:6c:55:49:cf:21:b2:0b:b5:
3d:0c:12:35:65:ff:49:b4:3f:48:96:35:29:d2:60:
06:b9:d5:28:40:46:94:97:7c:87:a8:8a:42:e4:33:
cf:de:89:97:dc:3e:bb:54:4b:4e:80:b8:2b:a8:02:
c4:34:6b:18:e9:be:ca:42:e2:ca:dc:6f:b9:4e:18:
e3:f5:7f:7e:80:9a:9e:30:ba:38:2a:3c:a3:42:d2:
d2:63:a8:51:65:86:26:1d:83:43:d3:3c:90:e3:54:
81:8b:c3:be:be:11:f2:12:44:00:56:f9:f6:e9:69:
af:f0:44:af:df:3d:cc:68:f9:5c:f2:50:3d:3f:a8:
6a:0d:52:f9:bd:77:5a:a2:ab:ba:8f:ed:49:27:e5:
5c:96:b9:01:7a:d6:0a:d9:26:49:57:54:db:62:35:
25:a5:76:6e:4f:fd:66:68:16:ff:36:e1:88:47:09:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:86:1B:25:C2:40:36:EC:76:D8:0E:D7:27:47:02:4C:0C:E5:48:32
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/YYYbJcJANux22A7XJ0cCTAzlSDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.28.0/24
45.143.31.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:80:45:e7:06:74:5b:b5:b4:fb:f8:e6:3f:1b:33:28:45:4a:
9c:97:4a:29:ac:67:4e:9d:5c:f3:27:86:dc:68:ec:eb:54:d7:
cf:a7:e8:5d:ed:97:95:48:2a:e3:f8:43:e8:54:7f:ca:15:e7:
f1:fa:f8:ac:d9:72:6b:59:54:d8:95:a6:2d:7f:83:87:dd:eb:
09:ca:ca:63:5d:0c:33:cc:f6:65:fa:e8:58:ab:3e:12:82:ca:
08:6c:03:09:01:81:46:df:7f:cf:22:c0:9d:f7:65:e2:0f:81:
0f:af:66:78:6c:6f:1a:26:f9:0d:48:65:c1:ea:9a:22:c9:e6:
6b:5e:1c:52:d6:a6:ea:c6:fd:f9:cd:16:87:e6:a5:13:6d:8a:
57:78:d7:bb:fd:de:de:04:98:e1:d7:19:f0:8e:80:79:1e:a6:
11:60:9b:9a:f6:62:8a:19:cf:2c:89:20:6f:e3:23:2b:d5:68:
de:5a:47:08:a7:ee:55:09:2a:74:89:ad:a6:b1:60:cf:49:f6:
05:4a:e2:53:9e:b0:78:16:65:f3:cc:d0:c3:28:70:6e:24:87:
bc:d2:cb:4b:0e:65:f6:6c:15:16:e4:1c:91:ba:83:b9:ee:46:
34:3a:fe:66:c7:ec:47:8a:b1:df:bb:74:f9:9f:5a:af:07:23:
4b:b5:82:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:12:44 2025 by rpki-client