Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YzbeoVagmhBmLtneEKqhCl-RS0M.roa
File: YzbeoVagmhBmLtneEKqhCl-RS0M.roa (raw, json)
Hash identifier: P8dwrsXT9OE3IwH1A3EoT/R36OV/PwsfY3IT3eLXXqQ=
Subject key identifier: 63:36:DE:A1:56:A0:9A:10:66:2E:D9:DE:10:AA:A1:0A:5F:91:4B:43
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428276A9DE95B49539B61F20D38315191
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YzbeoVagmhBmLtneEKqhCl-RS0M.roa
Signing time: Thu 02 Jan 2025 17:54:19 +0000
ROA not before: Thu 02 Jan 2025 17:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211557
IP address blocks: 93.113.57.0/24 maxlen: 24
188.240.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 12:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:6a:9d:e9:5b:49:53:9b:61:f2:0d:38:31:51:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6336dea156a09a10662ed9de10aaa10a5f914b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:8b:7f:96:82:9c:95:37:75:a5:78:9a:98:
52:47:6d:cc:01:ed:72:d3:92:a1:98:0a:8d:f5:d6:
d6:7b:af:a2:4d:d4:88:ac:f3:2f:d2:ff:1f:c5:a3:
75:32:b9:b8:76:50:d9:e3:80:97:41:b0:b7:e9:00:
0d:1f:bb:07:c9:cf:2c:65:dc:98:22:37:59:51:12:
56:d2:43:b0:7e:e2:18:14:5e:9d:5a:7b:cf:f0:3a:
18:ca:d4:2c:66:17:06:69:f4:1b:ad:7b:47:53:50:
2b:cb:03:41:2e:dd:25:32:6a:94:79:3e:a2:31:84:
bf:aa:a0:3d:ba:f2:e1:17:95:b1:b2:65:f8:77:07:
4b:78:5b:3e:ad:82:55:f6:b5:66:76:41:54:ec:8e:
2d:29:b7:e0:c7:22:29:61:88:3d:0f:cd:11:15:83:
bf:78:fd:68:4a:48:42:46:64:7f:4f:a1:5d:17:95:
1d:b1:eb:2c:04:4e:f1:79:a8:17:7b:77:f2:f7:ec:
fc:41:41:a0:b3:e1:8d:a4:66:5a:78:37:70:cd:b9:
67:c4:0a:70:00:58:83:07:76:bc:0e:4e:e4:fa:11:
58:45:15:5d:05:aa:71:9b:a2:47:ee:66:ee:4e:b3:
56:e4:9f:f5:de:c7:70:51:3f:ef:77:ff:0c:a7:30:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:36:DE:A1:56:A0:9A:10:66:2E:D9:DE:10:AA:A1:0A:5F:91:4B:43
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YzbeoVagmhBmLtneEKqhCl-RS0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.57.0/24
188.240.81.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ea:2c:fd:24:49:68:70:ef:50:8f:76:e1:2c:3c:75:cf:fe:
89:25:48:7a:b1:a9:aa:5d:79:11:21:b8:34:05:95:fb:9f:36:
ff:2c:a0:62:c9:ed:8c:e6:99:80:f0:28:de:49:b9:eb:4a:1e:
f3:b6:59:bb:17:27:a0:93:d7:83:ab:84:ed:86:cc:b0:e5:9e:
da:cc:cb:c3:f4:a0:94:e0:39:95:b6:0e:86:6e:1c:9a:2c:ca:
59:e8:88:24:c0:eb:65:cd:84:91:9a:fb:f6:01:f6:ad:b0:8a:
b6:69:4e:19:7c:18:ff:96:e9:50:b5:d4:a6:83:ac:a6:5b:fd:
61:e2:8f:64:f6:08:69:b4:4a:35:d6:ee:91:9a:55:8b:42:67:
aa:09:f6:12:62:1b:21:c7:73:d5:2f:a9:3d:40:3d:ff:3e:e3:
c6:f4:f7:e1:99:f6:be:4f:e7:e7:a7:8b:8c:d8:98:c8:87:2c:
53:9c:3e:d0:2d:ff:ce:d9:f5:b1:27:5e:1a:4e:3c:d5:04:76:
3b:62:d6:a9:08:b8:24:c8:5b:95:8d:5d:d3:0b:86:4a:f0:03:
78:e8:88:71:6d:8d:98:6c:ed:d1:f7:8c:ba:47:10:bd:7f:cf:
ae:11:c9:e0:67:6b:28:fb:96:dd:18:73:99:ee:b8:3a:9e:b4:
da:c7:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:49:10 2025 by rpki-client