Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nYa5D9XXhxxxtcy5FPz0zzTOz0o.roa
File: nYa5D9XXhxxxtcy5FPz0zzTOz0o.roa (raw, json)
Hash identifier: yRM09S5lOqlUlx57tZRtcBbHz15U7fNDc3U9UBTzQC8=
Subject key identifier: 9D:86:B9:0F:D5:D7:87:1C:71:B5:CC:B9:14:FC:F4:CF:34:CE:CF:4A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B55B582750997287886350B449EAA4
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nYa5D9XXhxxxtcy5FPz0zzTOz0o.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203879
IP address blocks: 81.18.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 10:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5b:58:27:50:99:72:87:88:63:50:b4:49:ea:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d86b90fd5d7871c71b5ccb914fcf4cf34cecf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:18:df:6a:fe:6d:0f:54:ff:b4:41:15:f3:85:
6f:46:4b:e6:d5:60:59:5c:c9:7b:4f:1d:14:ad:33:
d0:11:51:c0:cd:17:a9:bd:bd:a2:c2:af:7d:d6:f4:
d0:a2:2a:56:dc:23:55:e4:43:15:ad:07:f9:4c:25:
3a:11:a5:78:2c:a7:32:1b:2c:81:e9:57:cb:35:35:
57:b6:9c:da:e8:5d:0d:52:49:65:6c:fd:53:fb:2a:
65:fc:c9:ea:97:11:97:8c:a1:e9:d7:27:d2:5c:7c:
5b:f7:47:bd:16:ca:b0:91:c2:93:87:d4:14:89:af:
44:0b:28:c0:8a:c6:d6:3d:5f:11:24:5f:36:7a:9e:
86:29:6e:31:61:e0:37:32:cd:c5:b8:6c:74:b0:d4:
11:74:fc:fc:e8:74:d5:ff:7b:d3:cf:73:da:7d:85:
8b:d3:b5:30:b0:82:62:f6:53:82:57:b0:bc:34:ee:
d5:d6:b2:d9:4a:3f:83:70:cf:4f:e7:29:09:c9:d1:
a6:33:9f:c5:89:9b:55:6c:36:a5:52:36:16:f7:f5:
d5:03:11:8c:ed:62:57:86:6c:f1:ca:d7:23:21:f4:
e4:d0:7d:61:83:a9:ac:6c:08:07:ed:be:0b:1e:25:
43:05:00:fe:d0:ad:2c:fe:14:fb:74:1e:9f:23:3a:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:86:B9:0F:D5:D7:87:1C:71:B5:CC:B9:14:FC:F4:CF:34:CE:CF:4A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nYa5D9XXhxxxtcy5FPz0zzTOz0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.48.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f1:16:36:f7:53:21:60:d4:80:1f:66:fb:59:95:02:09:a8:
15:09:c7:56:17:91:53:8c:fc:6e:1a:8a:97:c1:91:3e:df:74:
0d:cf:69:33:0e:a7:e3:fd:83:d6:37:84:20:36:cd:a8:67:9d:
01:49:77:fa:2b:34:57:fb:3c:9a:bd:47:c6:4a:f0:3a:72:c9:
b8:9d:00:dd:33:05:04:fa:0c:be:22:3e:5d:5b:97:cc:ae:f7:
dd:d7:07:07:10:c9:03:83:0c:83:60:e2:88:40:23:3f:5d:13:
ca:ef:82:3f:fd:23:73:05:f0:39:b5:53:03:da:4b:d8:c6:1b:
e0:5e:5b:ef:df:0d:8c:cd:c9:4e:88:8e:85:57:98:e6:b9:c3:
08:0b:ae:a8:86:01:dd:6f:97:ec:6e:4e:26:88:db:14:4d:fe:
18:9a:ba:10:2d:46:d0:14:89:e5:ec:73:70:ba:59:a7:23:e3:
05:0f:7f:a9:0f:2c:9d:00:75:23:51:c4:49:0f:3f:74:ed:4b:
78:72:dc:48:15:6b:54:f6:12:10:07:25:0f:3f:05:4f:54:d5:
d5:01:44:99:ef:d0:7a:ed:6e:12:31:5e:31:03:51:b9:22:2c:
76:d8:c3:14:72:0c:40:b8:ab:d8:3f:a2:02:71:8c:75:4c:34:
03:13:b6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:33:21 2025 by rpki-client