Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Yv7t3JcMlnLq6LmhF7HwnRYSWKk.roa
File: Yv7t3JcMlnLq6LmhF7HwnRYSWKk.roa (raw, json)
Hash identifier: l7wdE+sV0g9cjTrlw7G2ssjLOZesCabZWTcJYBa/3fo=
Subject key identifier: 62:FE:ED:DC:97:0C:96:72:EA:E8:B9:A1:17:B1:F0:9D:16:12:58:A9
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01942B537C348643AB32A1679A3E55365887
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Yv7t3JcMlnLq6LmhF7HwnRYSWKk.roa
Signing time: Fri 03 Jan 2025 08:41:18 +0000
ROA not before: Fri 03 Jan 2025 08:41:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.212.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 07:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:53:7c:34:86:43:ab:32:a1:67:9a:3e:55:36:58:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 3 08:41:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62feeddc970c9672eae8b9a117b1f09d161258a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5d:ef:0a:8f:52:e4:ea:3d:b0:6b:44:a0:0a:
53:a2:e4:2b:e7:d5:22:35:e7:e1:69:68:17:03:5f:
cd:34:44:0c:a1:a1:9a:35:4a:ab:b2:ec:d7:29:ac:
fb:e5:ec:46:00:e5:18:4b:67:1c:d6:f8:33:b1:ae:
57:91:8c:bf:ec:c9:9a:df:28:06:84:79:63:e8:1d:
c7:fb:bd:d6:0f:02:91:ed:98:73:21:94:b2:1e:21:
b5:83:db:d5:02:03:34:94:52:a6:98:ab:1c:07:1e:
6f:a2:ec:16:59:b9:6f:ab:ca:28:10:09:96:29:54:
7f:ed:13:d6:96:92:0f:9c:6b:dd:98:be:e4:4f:3a:
69:04:58:87:10:ff:82:b7:8a:4f:ca:ae:e8:61:ab:
b1:31:19:fb:07:e5:09:e8:2a:41:f0:51:7d:2a:59:
81:9f:fe:1e:5c:33:e1:38:fe:10:e5:d4:e6:c5:43:
9f:cd:e0:11:dc:cc:81:de:28:1a:98:91:2f:c8:31:
9c:a5:b7:a4:73:c3:d7:e9:40:43:34:77:cc:d1:54:
f5:61:72:19:24:ad:7d:97:e4:c5:4d:a1:83:91:f8:
55:fd:3d:d1:a2:b4:44:de:04:19:e1:2d:65:ab:da:
7f:7b:32:86:48:e2:8f:ff:7a:40:db:89:06:20:b0:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FE:ED:DC:97:0C:96:72:EA:E8:B9:A1:17:B1:F0:9D:16:12:58:A9
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Yv7t3JcMlnLq6LmhF7HwnRYSWKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.207.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f9:1d:28:56:df:9e:4e:90:7d:65:37:25:e1:34:cd:c5:8c:
38:8d:20:89:1c:a6:aa:d0:b7:08:38:fc:6f:58:82:2f:05:0e:
8d:a3:5d:f2:af:b8:38:bb:30:34:99:b3:70:6d:4d:3a:12:11:
32:8a:5f:65:6e:ce:4f:13:36:25:73:10:b0:fc:3a:18:b9:a1:
5d:59:99:ff:ff:24:ea:c2:5b:15:86:8b:d3:80:50:1a:26:79:
d6:89:b6:82:79:17:b5:a0:bb:fa:2e:d2:34:dd:20:05:90:43:
32:77:ab:a9:9d:a5:ed:03:d9:38:ae:06:a3:b0:66:ef:b9:26:
6a:6b:ce:1e:9f:17:19:c8:35:d4:58:97:e2:11:04:b2:3a:df:
f2:79:69:97:84:16:19:7b:66:99:3c:e4:1c:e8:c2:81:93:0b:
e0:58:2f:14:5f:15:7d:6a:ca:0d:9c:05:2b:17:89:c6:9d:a1:
c5:50:56:ad:bf:b6:e2:8e:d4:a6:4d:3d:74:12:27:9b:1a:08:
18:4d:d6:bf:1e:bc:b1:38:fd:e2:e3:51:e6:a6:d2:78:0a:0d:
1a:b3:e8:82:0d:04:b7:3d:ab:4b:f0:ec:e8:0b:b5:3f:d3:0a:
43:48:e4:e3:6b:f0:99:cd:3a:59:2a:ab:dc:a3:58:98:a6:e9:
3e:8f:b0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:58:32 2025 by rpki-client