Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/Y3XlyHdkRp3ODCVW44wISO56i-8.roa
File: Y3XlyHdkRp3ODCVW44wISO56i-8.roa (raw, json)
Hash identifier: KVmLb8hpYoOrtWMWIZ46hJ1THDYpPvwcsv0MPAQdyW0=
Subject key identifier: 63:75:E5:C8:77:64:46:9D:CE:0C:25:56:E3:8C:08:48:EE:7A:8B:EF
Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial: 0193E86E90C83899A1EE9C227E50AB76F76C
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/Y3XlyHdkRp3ODCVW44wISO56i-8.roa
Signing time: Sat 21 Dec 2024 08:56:20 +0000
ROA not before: Sat 21 Dec 2024 08:56:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39011
IP address blocks: 194.102.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e8:6e:90:c8:38:99:a1:ee:9c:22:7e:50:ab:76:f7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Validity
Not Before: Dec 21 08:56:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6375e5c87764469dce0c2556e38c0848ee7a8bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:e9:bb:6e:97:a2:de:b8:e2:25:d7:de:34:
8f:32:38:ef:5e:68:ca:5c:3e:e8:df:7b:26:a5:30:
cc:f9:07:8c:93:a1:32:e8:09:71:e0:5f:d1:f7:ee:
bb:3b:46:d5:ef:d2:c0:83:e2:fe:27:79:1c:06:b8:
51:c1:ea:ad:ff:15:bf:fe:05:c4:dc:76:03:41:7b:
34:ff:27:20:1b:e1:da:83:d3:10:b8:a5:35:d4:f6:
2f:1e:6a:d0:b2:9b:f3:5f:46:fe:c8:fd:3a:7d:7a:
be:71:0d:1e:07:f8:5a:4b:cb:8c:fd:56:43:5d:b0:
f2:48:0f:dc:34:19:34:4f:f7:59:41:9d:93:9d:d5:
6e:0b:64:6b:2b:96:a6:da:97:19:2f:7d:40:a6:ea:
f6:d0:85:e4:ee:f4:2d:d3:d6:75:b4:c0:ca:72:ae:
c7:5f:ee:95:02:c8:73:60:75:62:61:f7:d3:25:d0:
e7:74:ae:55:08:9c:6a:fc:84:72:a6:1b:fb:e2:7f:
01:b6:9c:46:af:20:3d:04:30:f5:7b:eb:4f:cc:18:
b6:88:07:a2:b1:c3:a8:2c:6d:29:7c:ad:2b:c1:46:
3c:34:bf:21:d6:c8:e5:4c:77:73:76:42:5d:9c:f9:
36:6b:16:1d:19:a3:6e:ce:73:d0:05:64:80:1e:21:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:75:E5:C8:77:64:46:9D:CE:0C:25:56:E3:8C:08:48:EE:7A:8B:EF
X509v3 Authority Key Identifier:
keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/Y3XlyHdkRp3ODCVW44wISO56i-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.204.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f6:c9:8f:1c:ab:00:c0:7f:5c:6f:2e:bf:6e:28:f8:d8:76:
f9:79:96:6f:fc:fd:96:0c:39:83:d3:07:0c:9b:a4:e9:aa:12:
40:21:21:7b:57:f2:3c:4b:30:2e:e6:a1:e9:d9:55:79:29:c4:
0d:9b:38:26:52:3c:26:6d:cb:5f:27:d8:fe:07:af:26:7b:22:
b2:ae:fc:87:c5:68:a6:1a:12:77:ea:bd:e6:82:25:4b:07:3f:
03:3a:ea:0d:de:08:ca:23:6e:c8:c1:22:dd:81:00:af:e7:52:
cc:2a:d8:ed:2f:ae:b7:e7:29:2a:6e:3f:00:67:7a:43:3b:c8:
25:59:7f:04:7b:4e:23:03:fd:d8:59:26:9f:a3:af:ab:fd:ec:
c4:1e:74:f6:ab:84:00:69:c1:c5:f4:dc:f5:a4:3d:aa:01:6c:
73:d3:83:2a:a7:a2:6a:00:55:96:86:55:99:b4:ca:52:f1:21:
9b:00:f2:f1:ab:a9:bc:dd:07:73:45:cb:a6:44:3d:88:32:b8:
17:ce:dd:db:25:c3:87:56:50:c0:68:85:96:94:a6:e5:fe:2c:
2c:b6:c7:e0:ed:2a:03:4a:af:18:bd:2c:e9:56:f1:b3:94:89:
be:9a:2e:30:bb:67:87:c9:71:77:51:79:8f:77:a2:5f:07:9b:
69:1f:76:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:30:21 2025 by rpki-client