Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/yWEWlF3BBkkts_U6X3Z9mfzR0lY.roa
File: yWEWlF3BBkkts_U6X3Z9mfzR0lY.roa (raw, json)
Hash identifier: MwImhofI/aI+hGFF4fJX17kr0UyP3XWyc75IImXUs4s=
Subject key identifier: C9:61:16:94:5D:C1:06:49:2D:B3:F5:3A:5F:76:7D:99:FC:D1:D2:56
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018CC9BCA9DA02F3416AC410B3EC8369BD28
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/yWEWlF3BBkkts_U6X3Z9mfzR0lY.roa
Signing time: Tue 02 Jan 2024 10:33:53 +0000
ROA not before: Tue 02 Jan 2024 10:33:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202189
IP address blocks: 145.15.244.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a9:da:02:f3:41:6a:c4:10:b3:ec:83:69:bd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 10:33:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c96116945dc106492db3f53a5f767d99fcd1d256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:6a:01:ae:28:46:82:f6:c4:cb:53:6b:70:
26:8a:a8:12:fa:65:f9:d7:f1:84:a9:0a:eb:62:6f:
61:f4:97:69:7c:8c:59:66:c2:36:b8:ba:b1:fa:f2:
20:c6:30:04:e6:db:43:61:06:21:63:1e:ed:18:79:
c4:9c:b1:0c:0f:af:93:83:38:1e:31:63:d6:2a:41:
b9:25:ba:17:65:3e:bc:71:3d:66:35:ed:53:2c:eb:
d7:3e:64:1a:0a:49:1b:3f:43:f6:0b:aa:9b:ec:b6:
66:e1:4d:fa:8f:66:a4:b0:de:c0:64:8c:2b:82:67:
1c:7e:f7:eb:a3:d1:16:d6:76:5a:8a:e1:53:ef:87:
e8:35:d0:bb:fb:e7:7a:c2:8f:da:4a:83:52:77:ce:
c9:82:b8:bc:fb:60:32:8b:24:74:a8:f9:6a:6c:c3:
34:49:5a:0c:9b:b4:55:c3:0a:8a:44:7b:a2:be:77:
94:56:1c:21:2d:02:82:80:93:78:f2:db:42:13:69:
74:b8:c2:35:67:95:45:8f:b8:8c:92:38:a3:d7:b7:
28:7c:7a:a1:e5:de:53:aa:05:70:7d:d1:ee:41:09:
d8:75:1b:35:7d:c5:45:91:62:f0:76:b0:9f:79:f5:
21:9d:e3:e2:c4:92:8a:84:61:57:b7:5c:bb:e6:e6:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:61:16:94:5D:C1:06:49:2D:B3:F5:3A:5F:76:7D:99:FC:D1:D2:56
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/yWEWlF3BBkkts_U6X3Z9mfzR0lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.15.244.0/22
Signature Algorithm: sha256WithRSAEncryption
21:9b:7f:f3:09:4b:49:df:0e:82:db:92:80:6e:f7:f5:8f:e3:
ce:03:6e:ac:f3:4b:0f:af:f8:71:7c:3b:22:da:48:8d:18:a0:
df:dd:19:9a:e0:60:bc:a0:13:be:50:a4:ba:4f:9e:2e:f6:0f:
2d:db:1d:ae:17:5e:1c:26:e1:52:aa:e6:b3:de:d4:a1:e9:0f:
a5:0d:3b:81:9e:02:ab:54:4a:9e:e7:2d:33:a7:62:6d:0d:08:
58:70:33:cd:c0:b8:bf:bc:ed:aa:fa:3a:59:3d:66:df:98:18:
4a:d5:6e:71:0d:73:9b:06:f1:62:79:d8:70:1b:75:94:b5:2f:
54:ad:ba:47:19:9f:2c:dd:96:d8:2a:bf:52:29:37:0b:9c:0d:
a5:a4:88:7f:49:de:a6:e7:db:31:b9:5b:40:8c:c1:1a:1d:a2:
a7:47:ac:2a:bc:5a:c1:83:e8:7a:ca:e2:ae:b5:d4:a9:aa:a5:
6a:82:52:9a:f1:c6:70:49:50:13:95:73:5d:62:19:3e:a4:3f:
48:f9:57:cd:9f:07:4a:01:66:da:c9:20:04:fd:62:36:87:bf:
cd:23:dd:c9:c2:bb:84:dd:30:08:4c:23:dc:c3:ef:e8:ad:27:
72:b6:f1:f6:34:ad:f0:cf:f2:ae:a6:e5:30:f8:10:48:b6:f3:
2d:86:68:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:09 2025 by rpki-client