Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/YxeRA_mmgdX-94T-H91_wgBCjww.roa
File: YxeRA_mmgdX-94T-H91_wgBCjww.roa (raw, json)
Hash identifier: xxOf7VNdbdmDW5O0LqOw2yBRK0uyy8TEkmlSG0EbhwQ=
Subject key identifier: 63:17:91:03:F9:A6:81:D5:FE:F7:84:FE:1F:DD:7F:C2:00:42:8F:0C
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF8CC8EF9C7D4FBBBD3E72B117284A
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/YxeRA_mmgdX-94T-H91_wgBCjww.roa
Signing time: Tue 02 Jan 2024 06:32:22 +0000
ROA not before: Tue 02 Jan 2024 06:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210388
IP address blocks: 78.135.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8c:c8:ef:9c:7d:4f:bb:bd:3e:72:b1:17:28:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63179103f9a681d5fef784fe1fdd7fc200428f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:95:37:00:42:91:ae:8a:6c:91:3e:0f:2c:
ee:5b:ba:f7:78:1f:e2:9d:cc:26:52:e6:45:c6:09:
b9:7f:3e:f7:4f:11:19:5a:3c:24:f1:a3:a0:7d:38:
cd:f7:2f:ba:44:8e:52:d2:9f:ee:f5:a0:3d:b3:98:
8c:3a:13:3f:4f:c9:70:a8:03:19:29:bd:36:71:ba:
be:9a:c4:e7:b5:f8:12:59:b9:4c:de:10:ed:4c:17:
1a:d2:85:de:16:bb:e9:57:31:58:d7:27:bb:c6:8e:
a0:97:3e:e5:48:fc:1e:6a:e7:6c:54:ac:c6:67:db:
b4:ad:4a:b4:e0:e8:81:aa:82:38:80:fa:02:29:a7:
60:ee:b5:00:bc:a1:2a:33:37:b4:8c:f4:88:57:bd:
11:c2:4c:cd:ec:81:72:f4:3f:a9:62:eb:86:e0:27:
e4:76:10:c4:0f:7d:03:81:65:91:b2:90:6c:4b:40:
fb:3e:7e:b5:06:f6:7a:a0:51:13:77:7b:3b:fa:3c:
20:af:91:08:bb:4d:74:bd:fb:24:49:63:82:24:38:
81:25:50:70:93:ce:cb:30:5c:89:e7:41:ad:9f:98:
e3:0d:99:14:53:52:b4:f7:6d:4f:55:10:46:ab:7c:
a1:12:ad:1c:cd:29:fd:04:55:1d:d7:37:e4:30:93:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:17:91:03:F9:A6:81:D5:FE:F7:84:FE:1F:DD:7F:C2:00:42:8F:0C
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/YxeRA_mmgdX-94T-H91_wgBCjww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.105.0/24
Signature Algorithm: sha256WithRSAEncryption
66:67:e7:23:42:98:02:34:c6:54:f6:17:51:74:f5:43:0f:11:
d6:4b:9b:5f:4f:f4:3f:aa:d2:71:4d:0e:ff:b5:13:30:40:04:
b5:f3:42:dd:93:ae:e0:e0:88:88:d5:a8:96:80:8a:9c:66:dc:
c7:cd:45:43:c5:9a:90:28:7b:5b:66:6d:e7:43:ff:74:e0:d4:
3c:fe:cd:de:56:16:a4:4d:70:94:45:df:91:a2:42:2e:9f:6d:
36:ad:3d:47:ee:90:a5:15:50:5a:a2:ad:78:4f:d4:3a:cf:68:
d8:8e:af:d5:aa:f1:37:7e:d5:1e:52:52:c9:00:e9:cf:73:a2:
84:a5:d3:02:b0:7e:d3:f7:4c:89:4a:35:34:28:e6:59:9e:6e:
ff:7e:b2:b8:9d:73:9e:eb:8f:06:4b:d8:d2:e2:ef:f5:1c:45:
41:7b:03:53:db:b9:db:f4:78:3a:8a:9c:92:06:41:40:3f:bc:
2c:d2:3a:92:7a:ca:03:4b:8b:ba:14:3d:01:b4:18:c2:43:8b:
59:6e:cd:a1:d7:f3:39:60:d5:4a:28:27:ee:67:c0:c4:03:83:
ca:c1:59:d9:1a:9c:0f:0c:e7:ad:b2:38:65:43:30:b5:59:04:
ea:9b:06:b5:a1:19:49:f6:10:6f:ca:38:a6:22:7e:90:5e:1d:
a9:7a:28:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:59 2025 by rpki-client