Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YAa8t5m50SvpgiFII1uL1m9zdOE.roa
File: YAa8t5m50SvpgiFII1uL1m9zdOE.roa (raw, json)
Hash identifier: OesFiNTjGcXiLULLwL5FNxFI1/AD4eS0NBE1vmN1CIk=
Subject key identifier: 60:06:BC:B7:99:B9:D1:2B:E9:82:21:48:23:5B:8B:D6:6F:73:74:E1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01948C89294F8FB3CA700F1F909E37E0D51B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YAa8t5m50SvpgiFII1uL1m9zdOE.roa
Signing time: Wed 22 Jan 2025 05:43:06 +0000
ROA not before: Wed 22 Jan 2025 05:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 91.208.61.0/24 maxlen: 24
212.192.16.0/23 maxlen: 23
212.192.18.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 14 Feb 2025 09:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8c:89:29:4f:8f:b3:ca:70:0f:1f:90:9e:37:e0:d5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 22 05:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6006bcb799b9d12be9822148235b8bd66f7374e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:1b:81:cc:ad:f6:e0:83:8d:2a:e4:7f:81:
d1:50:3c:d7:40:88:5d:07:8b:e1:d7:b6:60:6f:64:
e0:81:0e:c9:28:aa:c6:24:1c:1f:a4:2c:63:1f:ae:
e8:2b:ba:53:e1:e1:63:e8:11:12:b2:47:55:f9:df:
f3:80:a9:bf:f3:14:c2:b7:17:3b:c9:d3:bd:af:9a:
51:94:69:51:ae:6b:99:c0:30:79:34:f8:9d:8c:6d:
6c:9a:91:1a:92:ba:58:f5:30:8f:b2:9b:9f:7b:19:
d3:a2:7e:9a:5a:ee:c7:8a:7b:7e:01:b4:04:02:10:
01:09:43:3d:f7:e7:a1:09:c5:c1:e6:cb:b4:6e:25:
be:b4:97:d5:65:fa:e2:d0:31:a0:4a:67:aa:9f:24:
4e:39:6b:cd:27:c0:ee:e5:ae:5b:bb:17:12:96:23:
df:44:ff:bb:d7:af:c1:95:a3:b8:f0:3a:d8:c3:42:
74:88:61:ac:37:2f:8e:ec:25:dd:51:73:f2:b2:34:
18:84:67:a2:3f:88:0c:94:65:04:bf:7e:2a:b7:a0:
17:bc:a2:34:65:18:7c:44:52:58:ad:28:c5:84:46:
67:27:65:0d:56:19:6b:0b:4e:1c:de:77:d3:ed:e2:
23:4b:da:bc:c2:8d:f8:4c:e8:40:73:2a:e5:23:fe:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:06:BC:B7:99:B9:D1:2B:E9:82:21:48:23:5B:8B:D6:6F:73:74:E1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YAa8t5m50SvpgiFII1uL1m9zdOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.61.0/24
212.192.16.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:38:8f:b3:e8:74:f5:f4:f6:16:bd:7a:3e:c7:78:06:e6:41:
8b:c0:27:74:8b:93:6d:ce:c8:40:4b:0a:72:2e:38:1c:80:dc:
64:0a:5d:17:66:9a:61:9e:c0:70:82:d8:20:e7:59:60:a7:eb:
1e:4d:2b:54:ff:8c:12:fd:97:4c:c7:50:9f:f7:32:c3:93:f4:
43:1f:dc:a7:14:ba:79:a1:32:af:02:0f:7f:19:c1:52:5a:54:
83:88:7e:06:ad:17:ff:ca:87:a6:f9:df:16:09:0b:2c:5b:df:
89:56:c6:63:86:65:c3:94:d1:ab:7b:20:2f:f9:cf:17:b4:5d:
a9:44:f8:03:03:03:28:09:32:24:58:c6:94:54:33:58:e6:e0:
ef:04:ea:4f:eb:19:22:d0:08:20:46:b7:37:0d:02:e4:72:5e:
93:d8:da:9a:4c:ce:e2:97:95:9c:65:3d:3d:1a:ce:ed:8e:e7:
bf:97:6f:2f:e4:22:bd:7d:af:95:62:99:17:df:d2:33:cf:b6:
28:55:5b:5b:3a:8f:d0:aa:9b:bd:1b:10:b0:21:42:22:66:0b:
ba:58:77:70:d9:ec:98:be:b1:e5:4b:6f:f4:dc:da:36:3a:72:
8b:eb:dc:17:b3:ac:ae:f6:bf:79:65:a5:21:57:6d:4e:bf:45:
dc:7c:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:20 2025 by rpki-client