Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/yuVy_6fx_yc1RtFwsDRFDCJ4hrc.roa
File: yuVy_6fx_yc1RtFwsDRFDCJ4hrc.roa (raw, json)
Hash identifier: UtKnoJeAxXvEUErMEI9dMkT0lIGel+ZWv95o34wozb8=
Subject key identifier: CA:E5:72:FF:A7:F1:FF:27:35:46:D1:70:B0:34:45:0C:22:78:86:B7
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018D2626296E20B6F01B959309E03F834673
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/yuVy_6fx_yc1RtFwsDRFDCJ4hrc.roa
Signing time: Sat 20 Jan 2024 09:14:11 +0000
ROA not before: Sat 20 Jan 2024 09:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 195.225.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 19:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:26:26:29:6e:20:b6:f0:1b:95:93:09:e0:3f:83:46:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jan 20 09:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cae572ffa7f1ff273546d170b034450c227886b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6a:ce:b6:6f:57:95:22:66:79:20:d9:e1:ce:
7e:90:61:ad:19:b8:a1:96:97:7c:e5:db:49:c5:b9:
c8:33:4f:0e:d1:a5:3c:a4:fd:c3:ee:35:e1:ea:14:
46:e9:ec:a5:dc:ad:43:3b:ff:56:5c:30:e1:cb:e1:
72:ee:cd:82:ab:d9:8c:25:4c:cc:00:1a:fa:70:27:
ec:3e:45:e9:48:e9:63:59:8c:e9:28:c5:72:d1:48:
6b:40:f4:25:7b:e8:40:23:11:d2:9e:d7:d3:0a:96:
51:71:02:bd:95:bf:a8:c6:0a:11:09:87:3d:33:9c:
4f:95:8e:17:c2:2c:ac:5e:ef:eb:64:d6:4a:9e:32:
44:1f:c2:74:eb:c6:e6:4f:7c:51:57:c2:b1:3f:05:
1e:4f:a5:49:b3:f1:9c:dc:b6:65:3b:b4:b9:6b:57:
99:68:e1:eb:a6:1e:58:b7:65:68:e2:8a:3a:14:4e:
99:61:25:62:fd:08:04:dc:37:4c:46:08:7f:ef:09:
b8:1d:9b:aa:9d:29:bd:7c:38:cd:45:a6:a4:30:9f:
49:18:ba:f6:43:e0:43:1c:c9:ff:8a:3d:37:ea:59:
9c:56:cd:7d:5a:f5:7a:67:70:1f:6c:48:f4:64:fd:
57:65:23:b9:a7:b5:d8:d4:de:b0:58:47:1e:4a:9e:
d6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E5:72:FF:A7:F1:FF:27:35:46:D1:70:B0:34:45:0C:22:78:86:B7
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/yuVy_6fx_yc1RtFwsDRFDCJ4hrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.96.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2b:d4:86:ee:40:21:e2:67:15:10:88:a9:9a:75:6f:a6:6e:
25:eb:de:dc:5c:af:43:2f:e9:6e:3b:d9:d4:9f:92:61:ac:d3:
9f:da:9b:57:e8:39:f8:02:70:e4:64:f0:a4:e7:f8:45:ae:0b:
eb:f6:93:79:a1:16:b0:91:c1:00:39:06:af:9e:e4:f4:64:5c:
2d:49:81:c0:ae:26:ba:69:77:80:18:a1:89:79:96:27:ba:4d:
1d:13:81:68:5e:f3:d2:e5:5a:5f:47:4e:54:0e:85:b7:40:f4:
76:c9:29:4c:ea:7c:91:ab:d2:1f:1d:7d:54:99:d4:31:49:23:
bb:e1:6d:c5:29:9c:81:a1:d5:73:6b:87:66:15:25:9d:af:45:
b6:74:72:f0:fa:dd:e8:41:34:75:7c:72:d7:23:f2:c9:93:58:
3d:d4:ef:85:a8:28:c9:39:9c:ea:59:78:be:06:cb:65:83:e7:
fe:60:0d:d4:42:e4:72:e7:eb:59:6d:a1:27:00:2f:d3:f3:d6:
c4:fa:2e:03:23:85:2d:f5:25:d9:ed:df:07:77:78:c5:b7:ec:
b8:5f:8d:7e:de:7a:d5:7f:ac:67:8d:0e:63:49:a3:ff:31:f4:
ec:c7:6f:44:97:e1:e2:4f:cb:f7:bf:09:71:a0:18:b6:36:5c:
85:6c:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 21 19:56:22 2024 by rpki-client on console-ams.rpki-client.org