Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/xYnY2-hnpNtKyNPFTRKK4yR2j5s.roa
File: xYnY2-hnpNtKyNPFTRKK4yR2j5s.roa (raw, json)
Hash identifier: 4FRtUWow3ISIgDi/vY3V190xL4awRVdCOYGb5NKU18E=
Subject key identifier: C5:89:D8:DB:E8:67:A4:DB:4A:C8:D3:C5:4D:12:8A:E3:24:76:8F:9B
Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial: 019373D2B97752C6222AF9A4C4E93CEBA5BF
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/xYnY2-hnpNtKyNPFTRKK4yR2j5s.roa
Signing time: Thu 28 Nov 2024 17:30:09 +0000
ROA not before: Thu 28 Nov 2024 17:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51330
IP address blocks: 93.95.30.0/24 maxlen: 24
185.192.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:d2:b9:77:52:c6:22:2a:f9:a4:c4:e9:3c:eb:a5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Validity
Not Before: Nov 28 17:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c589d8dbe867a4db4ac8d3c54d128ae324768f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2e:f9:43:f7:51:ec:50:61:d7:ef:bb:54:6d:
04:07:94:63:80:c6:8b:9d:b9:07:6b:b8:f5:3e:f0:
f0:84:1d:69:d2:11:11:d5:1c:86:6c:5f:a3:bb:a2:
60:9e:57:27:fc:0f:8d:f8:8c:e5:7c:a6:40:d9:d0:
42:c9:98:01:25:c7:d9:d8:56:66:dc:2d:63:d4:7b:
ab:68:71:74:e2:68:ab:75:35:24:fa:5d:8f:1f:53:
c5:62:87:94:e9:97:54:18:15:a0:c9:fa:c2:56:cf:
c5:db:86:d8:e8:fd:a2:cb:32:e4:b9:b5:97:a2:a5:
63:4c:14:32:75:ef:60:34:ca:ac:12:81:ec:73:d0:
e8:1d:9e:72:94:b4:14:6e:5d:80:13:5f:f1:27:76:
4e:79:20:54:95:94:0e:6c:04:a5:ac:8b:71:7a:19:
4f:75:18:94:7d:2c:50:fe:37:a0:75:bc:8b:2b:ae:
97:92:2f:42:f8:8f:b8:77:f1:93:2c:6e:b8:6b:c0:
cf:e9:74:7b:69:8d:be:53:58:dd:87:a1:dd:27:5c:
1f:7d:84:72:53:86:af:45:01:c6:df:68:ff:ad:93:
f2:bc:a4:c8:02:87:37:83:47:05:b1:aa:2d:3e:e1:
91:9e:2d:c6:89:44:08:19:9f:5b:65:fd:22:78:d6:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:89:D8:DB:E8:67:A4:DB:4A:C8:D3:C5:4D:12:8A:E3:24:76:8F:9B
X509v3 Authority Key Identifier:
keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/xYnY2-hnpNtKyNPFTRKK4yR2j5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.30.0/24
185.192.181.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c4:aa:c0:31:4a:0d:4e:bb:2f:0a:9f:88:1b:4a:bf:17:0f:
0d:df:84:fb:1e:b7:ac:94:f1:8a:fd:61:2e:47:9b:9c:82:1e:
b4:d5:1b:a6:d7:87:aa:8e:09:97:f4:8c:3d:02:f6:8e:e3:1a:
ef:0d:7a:e4:3f:34:9e:d8:dd:fb:57:b3:d1:7b:ac:ef:ea:81:
c7:4a:95:47:b3:cb:16:ba:7b:f7:ea:85:b9:bd:fd:a2:11:b7:
ce:b7:18:5f:e0:a1:8f:0a:d1:81:e9:bc:30:49:99:60:45:b5:
1c:5e:4f:26:7e:4b:ec:09:a7:33:0e:45:f5:01:59:58:26:e3:
44:36:0d:42:de:9c:27:d3:93:7c:61:54:ff:a8:ad:13:bd:b9:
ca:17:75:00:9f:af:96:d8:36:9a:c1:17:86:57:66:fc:37:82:
ed:89:a5:2b:05:b5:17:48:fb:a8:5a:55:97:b1:00:a3:ce:be:
0b:18:2d:4c:ff:73:d5:77:5a:6b:73:d9:87:21:d0:d3:d1:66:
5d:b1:4d:b4:8a:26:86:3a:6b:b3:82:5c:5a:fb:22:69:df:08:
33:a2:ee:b5:45:d8:0f:e1:1f:ef:42:7c:2c:03:70:43:aa:3c:
94:90:bc:9b:74:9d:a7:8d:6e:da:96:b8:6e:1a:0f:63:8f:e3:
5f:ca:f7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:40:58 2025 by rpki-client