Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/YzWPr_JaXR9D9jKe8BOsjYEx290.roa
File: YzWPr_JaXR9D9jKe8BOsjYEx290.roa (raw, json)
Hash identifier: c+sIKf/DGcIbbQdBbvHcp1E89b+m9PZOrerLg5bBriQ=
Subject key identifier: 63:35:8F:AF:F2:5A:5D:1F:43:F6:32:9E:F0:13:AC:8D:81:31:DB:DD
Certificate issuer: /CN=7b8254253dc0213fe58a7aff4b82463e47978063
Certificate serial: 01958B097D9D2C0B292F61AC382FE9B14A94
Authority key identifier: 7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/YzWPr_JaXR9D9jKe8BOsjYEx290.roa
Signing time: Wed 12 Mar 2025 15:46:49 +0000
ROA not before: Wed 12 Mar 2025 15:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213118
IP address blocks: 79.142.34.0/23 maxlen: 23
79.142.40.0/23 maxlen: 23
94.154.125.0/24 maxlen: 24
2a11:fd40:1000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 20 Mar 2025 08:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:09:7d:9d:2c:0b:29:2f:61:ac:38:2f:e9:b1:4a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8254253dc0213fe58a7aff4b82463e47978063
Validity
Not Before: Mar 12 15:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63358faff25a5d1f43f6329ef013ac8d8131dbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:62:57:e9:0f:1b:e6:e6:0b:f4:45:16:b7:
28:c4:d9:f1:49:b9:f4:2a:06:25:17:5c:95:a7:11:
be:fc:52:44:ca:39:0d:f3:e5:97:16:9b:2c:1d:2b:
ec:ae:ad:05:c1:f2:dd:2e:e6:05:4a:d2:81:0f:14:
4b:d7:71:92:52:ed:65:27:40:65:a0:36:48:9c:02:
1f:13:3d:e6:aa:8c:0c:02:e6:cb:00:db:3b:7d:97:
c6:d0:72:03:a0:19:ba:7c:14:f7:04:54:46:e1:d5:
11:f0:3b:63:4b:d0:ff:b1:4b:6b:a9:ff:e5:1d:84:
bf:0c:fa:8e:cd:35:1c:64:6f:09:56:78:d9:cf:51:
88:17:cb:44:7e:54:ef:ea:67:50:f6:14:ab:d6:d1:
a9:47:5e:95:fe:0c:ad:e4:92:a3:06:d7:98:80:68:
63:3c:90:3e:c6:6a:8d:91:31:4f:5f:cb:e0:40:91:
eb:e9:ba:bd:37:8f:6c:46:06:31:c7:93:78:87:65:
92:4d:70:34:6a:93:19:e9:f0:32:5e:43:5a:2e:c3:
56:08:7b:9f:b1:95:79:cf:2d:e1:d9:6c:90:a6:ca:
56:ca:b8:65:13:4b:65:b8:2b:1b:1d:b5:a1:df:d3:
3a:b6:7c:4a:17:1f:f6:0b:a9:31:b2:bc:e4:ac:40:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:8F:AF:F2:5A:5D:1F:43:F6:32:9E:F0:13:AC:8D:81:31:DB:DD
X509v3 Authority Key Identifier:
keyid:7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/YzWPr_JaXR9D9jKe8BOsjYEx290.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.34.0/23
79.142.40.0/23
94.154.125.0/24
IPv6:
2a11:fd40:1000::/36
Signature Algorithm: sha256WithRSAEncryption
99:7f:85:41:99:18:bc:d3:0c:0e:26:49:5c:15:90:ee:84:f3:
13:05:66:d1:c8:0d:96:90:88:e8:56:5b:ac:9b:79:be:64:dc:
9b:3a:34:b1:2c:79:b0:7c:29:12:5c:6e:ae:9a:62:f1:b8:fd:
66:48:f0:af:75:fe:9d:b0:fa:10:60:ec:fa:96:5c:76:00:62:
b1:33:13:1a:ca:c4:25:c3:5a:0b:ca:25:32:60:83:6a:71:d4:
94:1c:25:4f:1d:c5:d7:b8:82:62:60:a2:03:47:55:8c:a4:9c:
49:96:60:e3:52:93:fb:55:24:c3:26:ad:71:0b:fc:8a:99:db:
b2:e2:b9:3c:65:36:5d:29:06:aa:d7:5b:2f:42:a4:f4:29:a1:
44:3b:a2:02:29:f8:66:c5:b3:96:b7:a8:af:77:76:d4:77:b9:
c0:09:a4:45:88:10:50:15:74:fb:02:49:6c:d2:3b:be:34:ec:
fd:df:a9:7f:55:63:0a:ee:9b:c5:68:49:af:d5:ab:ae:e6:c2:
68:ea:8a:ec:2f:44:ec:e6:f9:c2:ce:86:a2:52:1f:8c:3c:3d:
07:d7:c1:e3:07:9a:38:82:fd:22:ba:69:fb:f0:c2:14:01:5c:
7c:85:d2:2c:9d:d4:53:7d:4d:79:ba:0c:a9:4c:0d:2d:39:08:
a7:e5:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:25:43 2025 by rpki-client