Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/Ydg_ezHgx2GzliEIYpyG44UjlsU.roa
File: Ydg_ezHgx2GzliEIYpyG44UjlsU.roa (raw, json)
Hash identifier: 4RPlBldr5jSmU5a2KxGl3AGXaRuLWzf5akCanef6f7I=
Subject key identifier: 61:D8:3F:7B:31:E0:C7:61:B3:96:21:08:62:9C:86:E3:85:23:96:C5
Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial: 01948425553DA3AD8A10A40AB0C379328D66
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/Ydg_ezHgx2GzliEIYpyG44UjlsU.roa
Signing time: Mon 20 Jan 2025 14:37:06 +0000
ROA not before: Mon 20 Jan 2025 14:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9063
IP address blocks: 193.141.183.0/24 maxlen: 24
193.141.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 07:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:25:55:3d:a3:ad:8a:10:a4:0a:b0:c3:79:32:8d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Validity
Not Before: Jan 20 14:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61d83f7b31e0c761b3962108629c86e3852396c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:9d:ec:24:6e:51:bf:f7:7e:38:4c:a1:46:
ef:96:25:10:0f:7b:f8:79:a4:62:e4:5a:c3:b8:7f:
cd:bc:29:4e:47:fb:1a:38:67:f0:5b:09:89:f6:bb:
28:62:14:f3:62:56:c5:1d:c5:ff:8a:34:65:76:d5:
da:06:79:88:4a:4b:60:dc:d4:0a:98:75:e0:d4:f3:
bf:76:5f:9e:a4:54:cf:3f:73:8e:77:9c:5e:34:d1:
3b:42:49:87:d4:7e:32:0b:03:55:2e:11:2c:13:2d:
ee:f5:1b:39:67:07:13:3d:21:b5:ab:97:98:46:c9:
64:92:66:42:09:93:62:c4:5d:5a:ea:42:f6:f1:aa:
a3:9f:b0:cd:80:bc:ce:a0:8f:88:86:13:1b:3e:e4:
25:55:f9:df:6a:46:8c:ba:50:ee:b6:e5:a3:98:99:
c7:da:c8:fd:5e:93:bd:2c:f4:10:63:c7:f7:f4:29:
52:01:27:4f:b5:9a:e6:a2:28:e4:68:da:46:d8:3c:
68:4d:42:2f:2f:aa:db:18:43:d8:d7:c8:8c:23:8a:
87:68:aa:5f:98:e6:60:d7:33:04:ce:94:a0:51:1d:
9e:9f:4b:c4:18:7d:91:84:64:fc:7c:69:6a:fa:e3:
f7:27:f9:fe:e1:7c:c2:6f:20:94:18:ec:36:46:69:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D8:3F:7B:31:E0:C7:61:B3:96:21:08:62:9C:86:E3:85:23:96:C5
X509v3 Authority Key Identifier:
keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/Ydg_ezHgx2GzliEIYpyG44UjlsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.183.0/24
193.141.188.0/24
Signature Algorithm: sha256WithRSAEncryption
86:27:33:dc:da:ca:f0:43:35:86:b5:8f:4d:18:93:a5:1a:a8:
2a:ed:f7:8c:22:ef:57:b7:fd:1d:05:6e:9a:2c:1b:53:f2:63:
f5:cc:43:be:91:bb:5d:64:c1:bf:9f:32:ff:0d:7d:7c:bd:9e:
fa:64:1b:fc:76:10:09:79:1b:0c:54:39:6c:03:40:72:cb:dd:
65:c0:89:49:ee:db:2d:98:5f:b5:84:13:64:8b:f0:f2:3b:5b:
c2:5f:17:d7:11:92:5e:21:73:31:fd:26:2e:e3:94:da:f2:6d:
b0:bc:18:3c:ea:f5:b5:c5:5c:5d:e4:e0:df:56:d3:8f:9f:62:
61:9b:53:8d:31:b6:1a:17:d7:73:89:17:64:51:ed:a5:f9:fe:
ec:4e:a7:6e:ca:0c:65:92:bd:2d:02:8c:ea:87:dc:c8:46:dd:
f4:cf:68:b1:3d:2a:71:ee:34:5d:f1:67:86:36:88:fd:7e:fe:
0a:5a:08:e4:68:22:5a:ed:45:bf:1c:e7:56:dd:21:94:5f:41:
01:9f:a1:8e:51:94:6e:a4:cf:cd:33:6b:83:1d:b3:00:27:43:
d3:fb:9b:e4:fa:b5:6a:e5:9b:50:a1:94:95:d1:6b:70:a0:2d:
e6:32:c6:14:85:61:c0:ca:30:aa:23:eb:96:03:f0:0f:7a:8e:
a5:cc:1e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:22 2025 by rpki-client