Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/Y0mq5ty634WAU1OuS1fxDvmHkEE.roa
File: Y0mq5ty634WAU1OuS1fxDvmHkEE.roa (raw, json)
Hash identifier: 6Qzmwma3aJTk2Codtz5yGxhaNNOBTPKFe0cvpvzowl8=
Subject key identifier: 63:49:AA:E6:DC:BA:DF:85:80:53:53:AE:4B:57:F1:0E:F9:87:90:41
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 018CC649F734196F766779ED2AEF4A68D1D6
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/Y0mq5ty634WAU1OuS1fxDvmHkEE.roa
Signing time: Mon 01 Jan 2024 18:29:45 +0000
ROA not before: Mon 01 Jan 2024 18:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208435
IP address blocks: 31.133.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:f7:34:19:6f:76:67:79:ed:2a:ef:4a:68:d1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 1 18:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6349aae6dcbadf85805353ae4b57f10ef9879041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1d:7a:25:43:98:7b:2d:ca:7b:b9:da:88:c2:
71:fb:d3:f0:c1:2a:04:f3:9f:52:ea:5a:72:53:21:
3a:d1:22:9a:f7:3e:27:6c:39:83:35:79:42:11:08:
3d:4e:2a:02:d4:b6:c7:ab:69:f2:9a:6c:1e:73:37:
5e:dd:33:5f:98:54:4a:b8:d0:51:7a:af:0a:50:64:
35:31:74:19:ae:14:d7:6b:5d:25:42:8d:4b:53:96:
7c:21:ae:5e:4c:53:81:6a:c0:b0:c4:9e:be:fa:02:
a9:c0:78:24:2a:44:78:0e:85:e0:c4:ce:f5:8b:e7:
56:4e:7c:c8:43:73:7c:ab:31:9d:43:1e:2e:da:3f:
ef:bd:33:d5:41:2c:a1:73:60:a8:bc:1e:20:fd:2c:
3a:72:ea:de:d5:d3:b9:ae:a6:8d:58:e4:40:39:24:
58:a0:dd:a5:cf:ef:1f:a7:de:8b:7d:2f:72:47:28:
a3:af:9d:4d:25:3a:1c:cb:ed:30:95:37:8f:1d:87:
33:aa:4e:f8:53:20:ea:e1:51:53:47:ea:83:75:17:
5d:0a:fa:9c:5c:71:60:3e:86:1f:69:01:37:ad:3b:
c0:9c:a6:e4:cb:de:3d:82:03:f6:4d:7c:c3:82:46:
fd:32:90:fc:76:f3:ad:38:28:b4:3f:c3:1c:af:81:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:49:AA:E6:DC:BA:DF:85:80:53:53:AE:4B:57:F1:0E:F9:87:90:41
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/Y0mq5ty634WAU1OuS1fxDvmHkEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:7a:ae:6c:aa:d0:66:74:58:57:ac:e2:3e:6a:fc:ec:77:a9:
90:7e:19:69:f9:98:95:0b:c1:d4:f2:25:b0:1f:e5:53:90:b8:
0e:7b:79:21:15:e5:d0:6c:a1:15:af:fe:03:99:cd:cc:5d:7a:
4a:d4:7a:39:4b:c8:a2:bf:c5:c9:3e:a3:8f:5b:97:43:7a:2d:
92:b2:e5:71:af:69:ef:81:ee:0f:f3:d2:54:d6:4a:8a:d2:3b:
8b:c1:34:2c:3c:9d:7c:8a:46:78:f3:01:09:07:08:5f:a5:aa:
97:f4:a3:d6:76:b3:bb:34:ca:8d:6f:a4:d9:9b:91:97:67:6e:
8a:9b:96:da:74:13:75:00:cb:e5:5d:26:1f:ad:57:bd:55:03:
4a:46:e2:b1:fe:4d:07:c6:55:83:af:d1:96:25:91:b6:3e:40:
a5:4b:cf:6d:57:57:77:0b:07:20:6c:d2:ae:eb:f2:85:b2:bd:
1f:4d:af:03:0c:ef:f8:df:16:57:53:21:e7:7c:7e:aa:8f:84:
45:4b:08:1b:bc:ac:71:b7:6f:1d:14:0a:a2:7f:05:8c:e9:28:
64:c2:df:51:6d:77:77:0c:82:d1:bf:0a:b7:6e:0d:7f:10:3e:
a5:2a:9e:49:20:3d:58:61:a5:c3:bc:49:08:fc:1b:d9:9b:24:
ae:b8:5f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:47 2025 by rpki-client