Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YeZ3WkFc3cj-7K8T9_q7tDQD0Eo.roa
File: YeZ3WkFc3cj-7K8T9_q7tDQD0Eo.roa (raw, json)
Hash identifier: A2ot+yvesVaJo1CftU9larC0AY22M79mp1iRyAsPHyA=
Subject key identifier: 61:E6:77:5A:41:5C:DD:C8:FE:EC:AF:13:F7:FA:BB:B4:34:03:D0:4A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194F12943F0C6AB0EB51A9B1BA4F97D7999
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YeZ3WkFc3cj-7K8T9_q7tDQD0Eo.roa
Signing time: Mon 10 Feb 2025 18:40:00 +0000
ROA not before: Mon 10 Feb 2025 18:40:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214998
IP address blocks: 93.88.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:29:43:f0:c6:ab:0e:b5:1a:9b:1b:a4:f9:7d:79:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 10 18:40:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61e6775a415cddc8feecaf13f7fabbb43403d04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:52:f4:84:29:eb:f8:b6:07:d0:ec:eb:2b:
d1:1e:ab:01:ce:dc:2b:b3:5f:95:4b:94:3f:1b:55:
ed:ac:a9:50:bf:c6:dd:7e:3e:b4:85:ff:b2:74:a5:
0a:87:2f:08:7e:bf:1c:e6:0d:32:ad:db:ac:8d:7a:
7f:c0:0a:a2:d7:63:28:53:8c:c5:ef:63:b1:b7:1e:
43:aa:9a:f7:d6:f9:62:20:98:51:92:a0:24:84:0c:
89:dc:02:83:6b:46:0c:43:9c:bb:85:c7:0a:56:08:
6b:30:03:f6:de:13:4d:7d:9a:f9:9c:70:9c:90:c7:
68:b9:7d:d9:80:a3:50:2f:49:82:dd:b5:c2:f2:a0:
3c:f6:5f:19:a8:ac:4d:d6:0c:c1:99:b8:2b:ef:bf:
ed:24:fd:b1:50:ff:20:9c:0d:c6:3b:34:45:b1:81:
1a:8c:9a:4c:19:c9:a1:21:51:17:fa:c0:06:3c:2d:
97:60:50:86:7e:7a:3a:fb:79:80:ad:e6:c2:59:7b:
a5:07:5e:75:b3:c0:2e:31:57:88:0f:68:e1:0e:25:
28:ea:fb:01:20:5e:33:1f:6a:b6:e6:a9:8c:f9:01:
b5:22:c6:7a:3e:4f:bb:62:f2:28:9c:45:de:53:70:
f6:c2:80:71:a9:52:11:8a:86:19:3a:ed:63:c2:1a:
83:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E6:77:5A:41:5C:DD:C8:FE:EC:AF:13:F7:FA:BB:B4:34:03:D0:4A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YeZ3WkFc3cj-7K8T9_q7tDQD0Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.204.0/22
Signature Algorithm: sha256WithRSAEncryption
12:43:f7:c8:4e:2a:39:f0:08:d4:3d:2c:0b:9d:93:d7:f5:97:
c7:42:b4:69:6d:04:34:7a:60:a9:30:d1:ff:9e:ae:1a:ac:ea:
6b:ad:aa:5c:63:e4:af:9b:ab:55:81:31:cf:ba:10:1a:4e:f6:
58:80:7e:a7:7e:8b:ad:62:94:47:b6:f5:38:5d:42:b8:63:fb:
0b:4d:29:fe:5b:b7:7f:c2:0d:0e:26:95:1b:3b:34:e3:39:a4:
74:7f:81:52:e2:e8:b2:d6:a8:50:1e:2d:96:92:7f:8e:61:0f:
d2:63:bb:84:55:20:ea:06:a1:8a:11:81:c6:75:87:20:87:c2:
bd:5c:45:97:76:44:a6:2e:34:1b:67:3d:2f:f1:be:0e:dc:5a:
f5:f6:4e:81:8d:ae:4a:48:ab:3b:d4:44:f6:03:57:f0:4e:26:
f4:bc:15:43:81:33:58:b9:1c:89:d8:4d:97:25:bc:7c:73:0f:
1e:ff:45:50:84:8f:01:31:a4:1a:a6:1a:74:a1:b4:09:cd:0e:
c2:9b:3d:4f:e6:05:aa:c5:8d:8e:d9:82:07:69:a5:15:0a:cc:
fb:ff:83:ba:62:7b:b6:94:ad:79:6e:60:44:f6:0b:d6:f2:fc:
50:a0:d3:70:10:5f:d4:4f:bf:ef:40:b1:8c:6d:be:04:2f:90:
2c:54:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:42:28 2025 by rpki-client