Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/ygyAFqRFMyqVLCmNVs-rCG22LNc.roa
File: ygyAFqRFMyqVLCmNVs-rCG22LNc.roa (raw, json)
Hash identifier: 2beML5PrK1TWh2+DfxGOU2mAfLj8dYcPgpf842lMFyM=
Subject key identifier: CA:0C:80:16:A4:45:33:2A:95:2C:29:8D:56:CF:AB:08:6D:B6:2C:D7
Certificate issuer: /CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Certificate serial: 018CCA29F6F96118D2CC765F58AA3626F6B7
Authority key identifier: 37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/ygyAFqRFMyqVLCmNVs-rCG22LNc.roa
Signing time: Tue 02 Jan 2024 12:33:16 +0000
ROA not before: Tue 02 Jan 2024 12:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198386
IP address blocks: 147.78.62.0/24 maxlen: 24
147.78.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f6:f9:61:18:d2:cc:76:5f:58:aa:36:26:f6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Validity
Not Before: Jan 2 12:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca0c8016a445332a952c298d56cfab086db62cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:dd:d2:01:bb:7e:e4:f3:97:ff:71:1b:26:
ea:a5:a7:69:9a:8d:39:00:e1:2d:0d:02:aa:3c:4f:
22:a6:68:01:30:cd:f4:49:cf:b0:58:96:df:34:50:
5d:41:8f:50:8e:7f:ee:b9:bb:8c:fd:31:69:81:07:
53:f4:f6:8c:28:bb:67:d6:4e:80:39:01:b5:89:bb:
e7:bc:b9:c8:f5:8c:4d:70:28:cc:45:b5:08:40:26:
41:75:92:19:af:b8:13:d9:c9:a0:0e:77:43:e1:b3:
f9:93:1d:ae:7b:95:e7:69:94:b6:3b:5e:b9:60:c9:
46:23:0a:e1:c7:a0:14:8e:df:ef:b1:00:e3:17:5c:
45:9d:a6:d2:5a:27:db:8f:b0:f2:42:30:cf:a4:5e:
2d:7a:82:38:3e:00:59:79:18:a1:bb:d9:c1:99:8b:
3e:97:56:8b:7c:2e:1d:4e:7b:16:75:18:24:5d:c0:
3a:cb:c1:2d:13:ae:56:39:06:d8:1d:25:e5:80:32:
17:85:26:1e:6d:07:21:fa:a6:5d:8c:9f:09:80:87:
4b:37:95:7b:f6:fa:bd:6e:fa:40:3a:4f:19:7d:fc:
bd:15:c2:12:19:64:5f:59:f9:9f:aa:75:84:07:96:
20:1f:38:dd:12:7d:c5:dc:71:16:b1:89:6e:64:d9:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0C:80:16:A4:45:33:2A:95:2C:29:8D:56:CF:AB:08:6D:B6:2C:D7
X509v3 Authority Key Identifier:
keyid:37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/ygyAFqRFMyqVLCmNVs-rCG22LNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.62.0/23
Signature Algorithm: sha256WithRSAEncryption
83:b7:8e:a2:99:c5:74:a9:ec:7b:e7:f7:0e:42:c5:1c:6c:ca:
7e:66:4f:8d:0e:f0:70:9c:ef:73:62:41:4c:dc:ed:ea:c8:f0:
3b:1a:a0:ad:4b:e5:05:ee:54:cf:6c:1e:d1:70:51:00:33:ec:
c3:db:59:cc:ba:6a:70:0f:19:2f:ff:2a:83:f2:5a:71:fc:b8:
0e:af:7c:5e:c1:f0:71:1c:80:50:4b:c1:cf:d7:44:3d:9f:d6:
19:8b:73:10:4f:18:94:f8:23:88:3a:c2:b6:3d:0b:ff:37:fe:
5b:74:11:e6:48:9d:4a:d1:8b:ee:df:ce:74:61:be:1d:74:93:
65:c8:d2:4a:88:63:7b:79:9e:02:ad:b7:f5:5a:2e:66:bc:83:
47:fa:66:3b:08:08:8f:c6:eb:b5:a0:cf:a1:31:c2:e0:32:5d:
b6:a6:b0:06:79:10:96:ca:f6:69:37:27:7c:9c:d6:a9:89:ab:
d8:32:c1:4d:ce:aa:41:68:fd:7d:70:d1:85:b8:3e:ed:0b:11:
e0:9b:a3:27:a9:00:f3:7b:ed:88:8e:b2:2e:ef:d2:df:5d:75:
a9:e8:3a:19:99:e2:13:30:a4:fe:fc:67:a6:47:37:45:cf:8d:
ff:ad:82:4b:d3:21:da:e4:02:ff:41:98:6f:d5:50:a0:b1:e1:
39:7b:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:41 2025 by rpki-client