Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/1-lI0xDkW04dlDAUSsNMF1ceC_uY.roa
File: 1-lI0xDkW04dlDAUSsNMF1ceC_uY.roa (raw, json)
Hash identifier: tYqr6nV0g/+hxfnKc5ezkQCkpGwo6dIGw5sszhJxto0=
Subject key identifier: FA:52:34:C4:39:16:D3:87:65:0C:05:12:B0:D3:05:D5:C7:82:FE:E6
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 018CC9BC9CB2040E420191503BE9DDE2D4A7
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/1-lI0xDkW04dlDAUSsNMF1ceC_uY.roa
Signing time: Tue 02 Jan 2024 10:33:50 +0000
ROA not before: Tue 02 Jan 2024 10:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201134
IP address blocks: 87.117.70.0/23 maxlen: 24
185.82.130.0/23 maxlen: 23
185.82.128.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:9c:b2:04:0e:42:01:91:50:3b:e9:dd:e2:d4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Jan 2 10:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa5234c43916d387650c0512b0d305d5c782fee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:f4:c2:77:7c:6a:1e:0c:19:0e:e9:88:55:
e5:59:e5:74:e4:e6:7f:ac:9c:27:df:2b:1c:9f:7b:
24:45:7a:c7:3b:2b:ce:e1:cf:bd:25:3c:65:21:25:
15:f8:a9:32:41:08:06:6d:21:65:26:e1:b0:6f:2a:
f7:b2:ba:76:b8:38:31:b0:c9:09:32:f4:89:3d:93:
65:d7:29:23:f7:df:18:3c:66:72:b1:98:e1:be:e3:
74:57:8a:24:b0:f5:44:1f:db:26:b6:54:f7:9e:2e:
84:0b:bf:4f:83:87:fe:ee:d2:d4:d9:6c:d0:d7:70:
5b:51:40:6c:cb:d5:75:51:50:8c:e0:0f:c4:b7:09:
f4:aa:37:cc:aa:4c:ba:3e:e1:d3:ff:fa:55:cc:07:
56:af:93:c2:9f:86:1d:16:3f:39:5f:c3:ec:83:74:
17:e4:ba:dc:c9:1e:4e:e2:f3:6f:63:61:bf:29:1b:
bf:ff:2c:24:56:e1:8e:1f:d1:72:fd:58:f8:22:1f:
1c:8b:15:4e:45:88:83:f2:bc:bd:b4:3f:49:99:be:
41:ba:7e:68:bb:c9:c5:82:65:23:c8:a8:33:a3:4e:
46:f8:23:0f:c6:1a:33:0d:f3:a8:00:41:66:e5:04:
ee:c0:c9:68:9f:3b:0f:35:d6:fd:1e:00:0a:5b:38:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:52:34:C4:39:16:D3:87:65:0C:05:12:B0:D3:05:D5:C7:82:FE:E6
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/1-lI0xDkW04dlDAUSsNMF1ceC_uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.117.70.0/23
185.82.128.0/22
Signature Algorithm: sha256WithRSAEncryption
42:91:fc:3d:98:3a:04:a7:be:3a:8f:34:67:a7:94:59:2d:84:
86:47:d6:c8:58:ea:88:d5:c7:64:c5:3c:97:8e:1f:8d:3e:e9:
ba:43:18:1c:15:e3:ea:83:13:75:87:f9:f8:e2:67:7a:dc:81:
9f:25:f9:32:12:30:3c:e4:bf:84:51:08:1d:fe:95:28:30:7e:
86:9f:6a:e2:0e:eb:50:77:7f:eb:e7:10:79:98:64:0d:64:3f:
59:00:10:61:99:1d:67:94:90:96:39:f5:c6:82:53:e7:72:0c:
8a:22:24:9a:e9:c6:fc:b0:e5:b7:02:f3:7b:29:fc:d4:5b:f5:
67:5a:c7:5d:99:30:df:80:4e:f5:58:f2:74:d6:c2:11:ee:f8:
7c:29:c9:13:9e:3e:1c:2d:f7:cf:b7:1f:d5:1d:76:03:54:ed:
d3:e3:f3:c6:09:a9:a5:2b:f2:74:42:43:b6:17:98:08:52:df:
cf:46:8e:b1:f7:19:59:2f:b7:6f:0a:23:39:43:ab:e3:60:d4:
c6:41:d8:33:55:ca:f4:43:be:13:13:73:72:22:31:1a:c0:6a:
6d:f8:dd:b4:91:01:f4:37:e1:b6:14:f9:36:90:32:95:69:ee:
2d:4c:cd:38:df:70:bf:0c:fa:76:a1:8b:c0:b8:b3:b8:4e:f8:
29:29:9a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:24 2025 by rpki-client