Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/YpyuhuImU7I9V8TK6ju-dr7F7Uo.roa
File: YpyuhuImU7I9V8TK6ju-dr7F7Uo.roa (raw, json)
Hash identifier: Tb9UkS8K2R0Vuwy/Ezh/Gw0haMGm1SBIO/g2Esj2n34=
Subject key identifier: 62:9C:AE:86:E2:26:53:B2:3D:57:C4:CA:EA:3B:BE:76:BE:C5:ED:4A
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018CC2DB14C81BEFD01EB5F7E11C9EF35083
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/YpyuhuImU7I9V8TK6ju-dr7F7Uo.roa
Signing time: Mon 01 Jan 2024 02:29:46 +0000
ROA not before: Mon 01 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50469
IP address blocks: 82.206.24.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 14:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:14:c8:1b:ef:d0:1e:b5:f7:e1:1c:9e:f3:50:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 1 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=629cae86e22653b23d57c4caea3bbe76bec5ed4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:53:94:91:11:18:cc:73:ce:08:e9:97:45:
02:29:48:f9:09:1b:3e:38:e8:3d:e8:ef:d2:d5:d9:
79:4c:5f:0d:da:c3:40:bf:6c:ea:f8:3f:9e:0e:d0:
1a:ff:f9:1b:a5:fb:d4:0e:da:9d:ca:2e:26:47:cb:
59:47:ca:16:98:e6:90:4d:a2:d2:70:dc:0d:c3:8d:
83:90:a2:03:e4:0f:13:dd:45:c6:44:60:2b:33:da:
5b:2b:49:58:69:b4:89:54:d8:25:f1:f7:5a:3f:ab:
62:0c:e4:fb:69:b2:59:26:ea:21:27:32:5c:2e:48:
85:ef:16:e0:37:2b:23:74:b0:0b:aa:a7:d8:76:e9:
71:77:1d:ae:1e:04:ab:1b:0b:45:0b:e4:d0:49:cd:
a7:e1:3e:57:b5:d5:0a:0c:fd:3e:a4:af:63:60:b4:
b9:97:a2:ed:95:b2:22:a2:ea:71:f8:cc:79:ff:04:
a2:98:b6:17:e2:41:e6:e1:0d:77:a5:8b:66:fb:05:
ef:71:3c:71:f1:f8:7a:d4:0d:45:50:10:52:e6:d0:
d0:75:72:65:3e:23:32:fa:6b:42:6b:d4:61:7b:74:
5a:40:40:2e:40:3c:79:09:ab:1f:dd:38:42:a2:9e:
5f:58:92:22:de:f8:3b:76:ed:55:87:69:2e:7e:7c:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9C:AE:86:E2:26:53:B2:3D:57:C4:CA:EA:3B:BE:76:BE:C5:ED:4A
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/YpyuhuImU7I9V8TK6ju-dr7F7Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:7c:47:51:15:76:62:b4:7a:4a:04:d5:8b:29:8d:0e:a4:5f:
a1:38:fe:68:81:54:6d:dd:46:ff:d7:33:eb:c3:00:fb:95:47:
f1:0e:e9:ba:c7:9c:f8:5e:13:dd:14:a5:b4:16:b6:74:72:b6:
ca:fb:cd:6b:0f:57:78:a3:06:b7:93:22:8a:b3:38:a8:06:87:
8f:16:d5:cf:45:77:95:8b:10:64:42:85:96:2e:ed:72:55:c4:
92:50:6d:6b:a2:75:9c:f5:78:02:aa:b3:42:ff:e5:11:c8:28:
19:88:04:ac:49:7e:45:d1:51:0a:d7:d3:14:e3:07:af:66:51:
bb:33:49:81:4d:b7:a0:00:61:70:2a:02:a4:17:3c:dd:d3:dc:
09:cd:96:22:00:b1:43:7b:85:b0:87:f7:c4:b2:c6:40:e3:08:
75:ae:69:4b:db:6c:cd:c0:14:15:a7:8a:9c:47:31:dc:70:4b:
71:d4:05:2d:dd:29:99:26:a4:9b:3e:d5:c2:42:f6:23:58:a6:
e6:62:c4:c3:ee:63:42:3f:0a:4b:6d:cb:7f:c7:78:03:9b:cf:
e7:e1:93:3a:38:28:88:5b:bb:a2:d0:aa:42:4a:f5:4e:71:a7:
2f:28:07:b4:64:7d:35:7a:17:74:11:cd:5e:12:35:0b:49:4b:
b9:fb:81:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2xTIG+/QHrX34Rye81CDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjQwMTAxMDIyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjljYWU4NmUyMjY1M2IyM2Q1N2M0Y2FlYTNiYmU3NmJlYzVlZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNtTlJERGMxzzgjpl0UCKUj5CRs+
OOg96O/S1dl5TF8N2sNAv2zq+D+eDtAa//kbpfvUDtqdyi4mR8tZR8oWmOaQTaLS
cNwNw42DkKID5A8T3UXGRGArM9pbK0lYabSJVNgl8fdaP6tiDOT7abJZJuohJzJc
LkiF7xbgNysjdLALqqfYdulxdx2uHgSrGwtFC+TQSc2n4T5XtdUKDP0+pK9jYLS5
l6LtlbIioupx+Mx5/wSimLYX4kHm4Q13pYtm+wXvcTxx8fh61A1FUBBS5tDQdXJl
PiMy+mtCa9Rhe3RaQEAuQDx5Casf3ThCop5fWJIi3vg7du1Vh2kufnxKdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGKcrobiJlOyPVfEyuo7vna+xe1KMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvWXB5dWh1SW1VN0k5VjhUSzZqdS1kcjdGN1VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUs4YMA0G
CSqGSIb3DQEBCwUAA4IBAQBufEdRFXZitHpKBNWLKY0OpF+hOP5ogVRt3Ub/1zPr
wwD7lUfxDum6x5z4XhPdFKW0FrZ0crbK+81rD1d4owa3kyKKszioBoePFtXPRXeV
ixBkQoWWLu1yVcSSUG1ronWc9XgCqrNC/+URyCgZiASsSX5F0VEK19MU4wevZlG7
M0mBTbegAGFwKgKkFzzd09wJzZYiALFDe4Wwh/fEssZA4wh1rmlL22zNwBQVp4qc
RzHccEtx1AUt3SmZJqSbPtXCQvYjWKbmYsTD7mNCPwpLbct/x3gDm8/n4ZM6OCiI
W7ui0KpCSvVOcacvKAe0ZH01ehd0Ec1eEjULSUu5+4Fn
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:39 2025 by rpki-client