Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/YBdtlS2M5o6usMYoxzo3Mv_QPcg.roa
File: YBdtlS2M5o6usMYoxzo3Mv_QPcg.roa (raw, json)
Hash identifier: PncSN+TQz73XR1vCpTYtjTbLfeaLhteHjUTIjMbVcG8=
Subject key identifier: 60:17:6D:95:2D:8C:E6:8E:AE:B0:C6:28:C7:3A:37:32:FF:D0:3D:C8
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 018CC94AA65F2B0DB1FDDAC8D383C8BB3F5E
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/YBdtlS2M5o6usMYoxzo3Mv_QPcg.roa
Signing time: Tue 02 Jan 2024 08:29:21 +0000
ROA not before: Tue 02 Jan 2024 08:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197972
IP address blocks: 82.144.95.0/24 maxlen: 29
82.144.95.16/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:a6:5f:2b:0d:b1:fd:da:c8:d3:83:c8:bb:3f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Jan 2 08:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60176d952d8ce68eaeb0c628c73a3732ffd03dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:be:51:52:7d:b9:f8:07:9e:b9:3c:6a:fd:3e:
55:52:af:e6:e7:77:fd:8e:ff:cf:ca:ae:b0:2e:6c:
06:74:2e:a6:14:c2:18:ce:89:7f:aa:08:77:8a:fa:
fd:26:f2:db:cd:5c:67:fe:0b:b9:12:2a:36:ef:f1:
72:ea:1d:75:9f:44:8a:a1:07:95:33:e6:31:04:fa:
0a:2b:7c:cc:e6:a2:3e:49:a0:da:94:1f:90:57:e7:
65:52:dd:74:16:b2:65:75:3c:79:7d:84:3f:85:8b:
27:f0:e2:22:32:e0:58:9e:40:fc:4c:c4:c4:e7:02:
47:03:fe:3c:d7:d0:62:16:e3:3b:4f:c8:ec:b1:df:
80:80:9a:18:c3:04:ae:c7:6d:d3:c4:ae:4a:8e:1d:
f6:42:cd:42:bb:c0:64:93:04:ba:a1:1f:c9:31:a9:
f2:57:bf:0a:03:60:8e:d5:be:ff:4f:10:a9:0d:db:
67:99:fa:3d:8c:e8:ad:1e:fd:99:56:06:e7:14:0c:
26:87:45:fc:4c:ba:f2:67:bf:27:a2:e0:03:0c:04:
02:03:78:9c:2a:93:8b:d5:8a:f8:5d:5f:f7:19:70:
f1:6e:50:fe:d2:82:73:3d:e6:b0:44:3b:4a:7d:c3:
1b:6c:ac:e2:89:68:51:2e:38:36:d3:cd:97:9c:7c:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:17:6D:95:2D:8C:E6:8E:AE:B0:C6:28:C7:3A:37:32:FF:D0:3D:C8
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/YBdtlS2M5o6usMYoxzo3Mv_QPcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.95.0/24
Signature Algorithm: sha256WithRSAEncryption
82:50:1b:3c:24:e0:de:6f:51:bb:06:3d:bb:0f:c8:7e:6f:2c:
54:04:7e:04:9f:99:85:7b:72:d6:2b:80:f0:16:2f:21:fa:b1:
4b:32:16:f7:58:b5:ac:c5:52:ea:07:e0:15:56:1d:06:6b:16:
79:48:a1:7d:49:b8:ac:72:bd:04:05:e3:24:66:12:19:f0:f2:
07:44:d4:4b:32:b8:ca:9d:61:07:ff:5e:d0:33:fa:a2:71:04:
ae:52:4e:b4:95:ba:64:69:4e:7d:79:1a:93:a2:b7:7d:70:82:
11:5f:a6:c1:b6:01:31:13:2c:6e:f7:6e:5f:07:cd:bc:cc:b7:
5f:b1:19:a3:6f:f7:4e:00:c8:95:e1:2f:d9:8b:e1:19:54:be:
53:71:3c:59:08:06:92:b0:1c:ca:b4:3d:60:df:99:7e:ae:42:
06:5e:fc:55:61:07:a8:9a:4d:ad:ec:12:96:44:1f:e3:30:bd:
db:36:cd:b1:9e:18:80:96:2b:1d:06:3b:ad:d6:36:f8:b5:10:
40:4f:60:f4:dd:f2:25:e4:6f:75:85:9c:c2:24:63:46:ef:9d:
37:c8:1b:00:2d:fd:fb:3c:52:f2:52:db:e9:60:80:b8:59:87:
d3:0b:29:2b:b5:ae:36:e2:80:6d:8e:a5:2b:92:37:bc:8f:18:
6d:d8:b0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:40 2025 by rpki-client