Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/PiIYyFf58wkPCh3lOVNYEfuB8Tg.roa
File: PiIYyFf58wkPCh3lOVNYEfuB8Tg.roa (raw, json)
Hash identifier: 09Bk7lJURyrRrlgiw5NUmefeHzuCGTGQf3tx/Ec7fvs=
Subject key identifier: 3E:22:18:C8:57:F9:F3:09:0F:0A:1D:E5:39:53:58:11:FB:81:F1:38
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 018CC26D7F1E6355D2D33BA7D2AAA34F032E
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/PiIYyFf58wkPCh3lOVNYEfuB8Tg.roa
Signing time: Mon 01 Jan 2024 00:30:04 +0000
ROA not before: Mon 01 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207645
IP address blocks: 193.28.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7f:1e:63:55:d2:d3:3b:a7:d2:aa:a3:4f:03:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Jan 1 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e2218c857f9f3090f0a1de539535811fb81f138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:80:68:db:37:4e:80:7b:be:9c:2c:94:63:
77:88:21:8b:04:3d:b4:94:88:a2:b2:e1:c4:c2:29:
d9:c2:0e:d2:b1:92:fa:80:c0:03:42:04:d7:fd:46:
aa:bc:c6:03:d7:db:7c:9b:06:26:cd:e9:80:41:52:
4a:51:0c:ed:c7:e0:db:f8:19:62:d8:1f:83:3e:5a:
65:a4:0e:c8:fb:66:a7:d9:d4:27:a8:d6:85:fb:62:
e0:cf:39:80:67:72:1a:6e:65:7c:37:7a:7e:ea:08:
4e:b0:e1:c0:dc:00:84:08:e4:d5:8d:83:aa:9b:3d:
0f:a7:0f:da:a4:0e:32:39:bd:23:d7:31:18:d3:32:
77:62:1f:fd:2c:67:80:35:9b:5b:34:42:43:30:9b:
1f:04:ed:f8:d8:e9:85:41:b2:25:2a:f6:39:f9:b0:
a3:fc:51:35:73:a3:ea:f6:9f:cf:84:85:e0:73:76:
16:dd:56:db:56:fa:63:d7:9f:9c:7c:60:49:a2:ed:
b5:41:c7:b8:84:22:a3:03:7c:28:41:86:32:e2:bb:
25:5e:75:f6:c6:e2:55:bb:df:37:c3:23:b1:50:e4:
a1:80:35:9d:b2:26:90:8a:19:98:3a:56:db:58:fc:
bc:64:57:0f:1b:e8:54:da:52:4b:c7:51:31:cc:9a:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:22:18:C8:57:F9:F3:09:0F:0A:1D:E5:39:53:58:11:FB:81:F1:38
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/PiIYyFf58wkPCh3lOVNYEfuB8Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:df:bd:65:86:b5:43:8c:77:e6:6e:e9:24:27:7c:5c:df:ea:
c2:77:29:a2:6d:ed:47:5b:11:cc:8a:cf:17:6b:da:a4:e8:55:
12:3a:4e:61:03:21:2e:19:05:39:3c:21:55:08:ba:b4:74:11:
ac:58:3f:21:ba:df:e1:38:a1:f7:4b:c8:af:ed:b7:81:68:6c:
cd:fe:7d:de:cf:23:b2:93:77:62:ac:19:6c:fd:1f:5b:e7:05:
0d:d9:a6:bb:ce:e5:29:14:fc:72:9b:53:8a:b5:f7:33:7f:da:
7b:48:e5:3b:ce:de:49:1a:ae:da:c5:75:62:8d:19:e3:9c:d2:
aa:ee:ea:d2:51:31:33:c1:46:b5:f4:8f:47:68:04:6d:b5:b1:
cd:b5:11:91:7c:5c:f6:2f:f6:1e:9e:e9:77:b7:b1:8e:6d:9e:
d4:c1:e0:84:ea:15:c0:9f:a5:66:f9:45:3e:d9:02:ef:5b:d3:
3b:32:61:db:88:07:77:46:ca:45:e9:4f:41:8e:1d:0f:24:db:
57:7c:75:c2:1e:51:cc:cb:2c:b4:97:b3:d7:92:16:eb:c9:00:
12:6f:50:ae:33:3d:b3:2c:22:34:85:24:a8:c8:b6:b5:61:9d:
3a:76:a4:17:16:9d:05:56:66:16:22:b4:07:20:ec:d4:aa:2c:
68:18:42:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:58 2025 by rpki-client