Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/YjxYKPjpSXybuyZz6aWVXyJ7bqY.roa
File: YjxYKPjpSXybuyZz6aWVXyJ7bqY.roa (raw, json)
Hash identifier: xfHsit1joTJesuZl+QMs3rCXCVOS2fBdUhmG6Up4HmI=
Subject key identifier: 62:3C:58:28:F8:E9:49:7C:9B:BB:26:73:E9:A5:95:5F:22:7B:6E:A6
Certificate issuer: /CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Certificate serial: 018F2E9A1C51B4D2094007ECA5F666E25C47
Authority key identifier: 1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/YjxYKPjpSXybuyZz6aWVXyJ7bqY.roa
Signing time: Tue 30 Apr 2024 10:43:22 +0000
ROA not before: Tue 30 Apr 2024 10:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41476
IP address blocks: 79.171.4.0/24 maxlen: 24
79.171.5.0/24 maxlen: 24
193.164.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:9a:1c:51:b4:d2:09:40:07:ec:a5:f6:66:e2:5c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Validity
Not Before: Apr 30 10:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=623c5828f8e9497c9bbb2673e9a5955f227b6ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:c3:99:67:fa:79:fb:b8:1b:4d:91:01:55:
b1:13:fc:4c:90:84:34:25:d4:a9:01:02:03:7e:ef:
4b:35:ef:d9:35:89:85:ee:c1:f4:25:63:9f:c8:58:
70:fa:3a:dd:84:d8:c0:91:8d:78:3e:bb:84:33:d7:
02:29:67:e6:9c:17:65:7b:f4:4e:43:4f:35:72:9e:
17:fc:75:78:e7:ec:32:b6:64:ac:be:67:f9:72:60:
e7:87:15:88:f6:67:76:da:12:75:e0:a8:16:77:ee:
f9:11:a9:cb:86:f2:65:b3:6e:35:7f:38:91:59:9d:
d3:4b:80:5b:3b:97:ba:62:2c:ee:c5:b8:2a:5d:32:
99:e2:56:c4:09:d8:c9:f6:33:08:b2:7f:13:4e:74:
a8:8d:7d:95:a4:66:f4:89:a2:09:78:40:7c:ce:6b:
e5:43:24:e6:4e:3b:29:6e:43:5f:0b:6a:87:07:48:
fc:22:c0:f8:01:e6:74:6d:86:1c:19:eb:85:75:0a:
8e:ea:d7:22:b3:96:20:f1:17:fb:97:dc:ba:0f:95:
bf:82:a8:4a:6b:51:3d:b5:02:ae:5f:ae:59:ef:1e:
37:d4:80:e8:71:71:18:26:8e:9f:7a:48:8d:f6:3e:
91:bf:fd:90:c5:ec:2c:84:a9:df:8d:8a:3c:69:02:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3C:58:28:F8:E9:49:7C:9B:BB:26:73:E9:A5:95:5F:22:7B:6E:A6
X509v3 Authority Key Identifier:
keyid:1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/YjxYKPjpSXybuyZz6aWVXyJ7bqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.4.0/23
193.164.142.0/24
Signature Algorithm: sha256WithRSAEncryption
02:60:1e:c6:65:0e:58:0b:97:6f:e2:8d:4e:3c:23:ae:9c:9e:
ee:09:49:d3:40:53:b1:d2:6d:11:ee:76:d8:65:a5:45:87:1f:
24:0e:d4:c3:03:10:97:8d:9e:e7:fb:d0:b9:ec:c1:00:13:39:
34:41:79:be:79:eb:aa:f9:03:96:c7:78:0b:a5:72:e8:c3:34:
4a:4d:d2:49:7e:dc:6a:54:1d:92:bf:01:6e:41:3b:18:1b:93:
ba:15:7c:c3:73:f6:f4:a7:c5:b6:81:9c:0f:9e:4c:63:2d:be:
ea:30:26:0e:a5:cc:d9:eb:32:f0:61:28:7a:c1:9c:52:b5:2d:
f3:c9:51:78:30:6f:16:d9:fb:7e:ce:2c:4a:b6:4d:60:02:be:
76:97:d7:98:81:36:93:c2:f6:e1:b9:a5:a3:68:88:a5:bb:8d:
e3:0a:ec:56:7c:d7:f4:66:6c:7a:d6:a9:61:53:db:99:a9:e5:
d0:51:d6:46:f0:e9:72:fb:8a:79:7b:63:db:68:7d:e0:20:d6:
93:f9:c1:5c:07:f6:23:5a:df:5a:49:47:18:d7:ef:03:5e:91:
e9:cb:38:e8:2b:f6:ad:40:46:7d:52:c6:ef:66:da:ac:db:6f:
73:e3:75:5d:e9:47:a7:ea:78:14:2b:f4:4f:e6:47:2a:9d:01:
b1:ea:67:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY8umhxRtNIJQAfspfZm4lxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZDVkMTc0Y2JiNDZhYWY4NjU1NWI4MGUxNzczMzMxYjg3
MGI1NjgwHhcNMjQwNDMwMTA0MzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjNjNTgyOGY4ZTk0OTdjOWJiYjI2NzNlOWE1OTU1ZjIyN2I2ZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQjDmWf6efu4G02RAVWxE/xMkIQ0
JdSpAQIDfu9LNe/ZNYmF7sH0JWOfyFhw+jrdhNjAkY14PruEM9cCKWfmnBdle/RO
Q081cp4X/HV45+wytmSsvmf5cmDnhxWI9md22hJ14KgWd+75EanLhvJls241fziR
WZ3TS4BbO5e6YizuxbgqXTKZ4lbECdjJ9jMIsn8TTnSojX2VpGb0iaIJeEB8zmvl
QyTmTjspbkNfC2qHB0j8IsD4AeZ0bYYcGeuFdQqO6tcis5Yg8Rf7l9y6D5W/gqhK
a1E9tQKuX65Z7x431IDocXEYJo6fekiN9j6Rv/2QxewshKnfjYo8aQL96QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGI8WCj46Ul8m7smc+mllV8ie26mMB8GA1UdIwQY
MBaAFBrV0XTLtGqvhlVbgOF3MzG4cLVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RYUmRNdTBhcS1HVlZ1QTRYY3pNYmh3dFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jNmI5MDYtOTE1MC00NDNkLWJhMzAt
NzM5YzE5OGM1MTNmLzEvWWp4WUtQanBTWHlidXlaejZhV1ZYeUo3YnFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jNmI5MDYtOTE1MC00NDNkLWJhMzAtNzM5YzE5OGM1MTNm
LzEvR3RYUmRNdTBhcS1HVlZ1QTRYY3pNYmh3dFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBT6sEAwQA
waSOMA0GCSqGSIb3DQEBCwUAA4IBAQACYB7GZQ5YC5dv4o1OPCOunJ7uCUnTQFOx
0m0R7nbYZaVFhx8kDtTDAxCXjZ7n+9C57MEAEzk0QXm+eeuq+QOWx3gLpXLowzRK
TdJJftxqVB2SvwFuQTsYG5O6FXzDc/b0p8W2gZwPnkxjLb7qMCYOpczZ6zLwYSh6
wZxStS3zyVF4MG8W2ft+zixKtk1gAr52l9eYgTaTwvbhuaWjaIilu43jCuxWfNf0
Zmx61qlhU9uZqeXQUdZG8Oly+4p5e2PbaH3gINaT+cFcB/YjWt9aSUcY1+8DXpHp
yzjoK/atQEZ9UsbvZtqs229z43Vd6Uen6ngUK/RP5kcqnQGx6mdH
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:08 2025 by rpki-client