Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YV9PrV7d8dUoiZpRfsdNJ1jslGM.roa
File: YV9PrV7d8dUoiZpRfsdNJ1jslGM.roa (raw, json)
Hash identifier: tUpnODsRalsdYBqCRI2WA0JO/NgTQEU1lfdsLfj+tJo=
Subject key identifier: 61:5F:4F:AD:5E:DD:F1:D5:28:89:9A:51:7E:C7:4D:27:58:EC:94:63
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193CF50DA2FC873AEA76AF8CEC6D6AC600A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YV9PrV7d8dUoiZpRfsdNJ1jslGM.roa
Signing time: Mon 16 Dec 2024 11:53:22 +0000
ROA not before: Mon 16 Dec 2024 11:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48614
IP address blocks: 212.192.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:50:da:2f:c8:73:ae:a7:6a:f8:ce:c6:d6:ac:60:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 16 11:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=615f4fad5eddf1d528899a517ec74d2758ec9463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:0e:0f:2a:63:0f:f6:bf:fc:3f:b3:c4:5f:
cf:e5:cb:64:6a:cf:82:ae:93:b3:88:37:e2:26:e4:
5d:54:bf:15:97:06:e7:73:97:00:78:40:06:a7:fc:
da:82:4c:82:1f:c6:45:f4:11:6f:62:3b:23:84:5a:
15:4d:de:fc:22:7e:d5:1c:e1:5d:5d:4d:07:b3:9f:
f2:d2:dd:31:e4:ae:5e:5a:88:b4:c7:8e:37:4d:22:
d5:d1:9a:b5:79:57:5f:8d:b7:43:f1:8a:ee:a7:4e:
ed:a1:0b:dc:43:14:d2:0f:f2:e2:fc:d7:ab:d2:95:
92:66:16:00:3a:4d:9d:c6:c0:b2:45:8a:b2:59:20:
48:55:f7:3c:ee:74:0d:85:2b:9b:a4:d0:aa:40:6f:
2f:18:c0:65:0a:57:c6:53:39:5e:fc:4c:e2:81:77:
c9:40:02:e5:c8:f8:a9:6a:d4:66:b7:f3:bf:5a:54:
51:bf:f6:ae:4a:ff:b9:60:a3:6e:4e:c7:bf:fa:20:
3b:83:96:1e:0c:80:56:35:d3:a8:84:47:71:82:39:
2e:56:26:83:21:48:37:8e:78:7f:7a:af:0e:d1:57:
0f:53:08:0d:7f:c8:18:07:eb:43:ea:1a:55:45:eb:
71:cb:be:2d:01:2b:8b:a3:15:51:97:82:a7:c2:30:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5F:4F:AD:5E:DD:F1:D5:28:89:9A:51:7E:C7:4D:27:58:EC:94:63
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YV9PrV7d8dUoiZpRfsdNJ1jslGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.24.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:ec:da:b4:7e:fc:f3:18:6a:07:c8:83:a2:b5:62:b1:02:dc:
55:ea:d3:98:95:ac:bb:b0:dc:48:c3:9d:0a:72:4e:42:86:9e:
80:b6:b3:1c:8f:dd:4d:9c:89:52:69:7d:89:f6:be:67:13:e5:
00:19:a4:cb:16:c0:de:ff:0b:b9:28:96:47:11:99:f3:6f:b7:
38:70:a1:44:d3:fb:72:09:d2:28:60:6a:22:69:1e:e0:23:a2:
1d:af:5f:de:22:74:03:a3:41:97:e1:87:7c:11:13:cb:23:ac:
2b:2c:0a:68:fd:0e:7a:69:0b:37:f1:85:9e:8a:df:7c:18:2b:
4e:f3:60:09:81:1a:42:f3:62:7d:8c:11:90:ac:3b:29:21:e5:
4f:da:3e:2d:43:85:73:8b:54:6a:f9:aa:3c:23:53:44:c2:79:
8d:40:8b:01:63:c8:a6:8b:32:b8:de:ac:ae:9a:a8:fb:ab:4c:
34:8b:77:5f:7b:8f:b9:6e:b2:c2:63:5f:fe:56:7e:81:15:76:
f6:a1:44:ef:20:c6:49:38:65:1d:4c:99:a4:05:bf:26:86:f1:
14:f4:0d:19:97:20:db:12:c0:30:fe:e5:21:43:76:ba:5f:42:
ce:ea:43:c7:09:db:5a:78:88:86:04:a8:94:51:c3:02:63:a1:
53:4b:33:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:20 2025 by rpki-client