Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/yxPYpnugJUz8XR9OcycTaUGiiaw.roa
File: yxPYpnugJUz8XR9OcycTaUGiiaw.roa (raw, json)
Hash identifier: ccZreOan+pb6Y8gBYnxcCrcII+hI1DUPhF+drqnVwLk=
Subject key identifier: CB:13:D8:A6:7B:A0:25:4C:FC:5D:1F:4E:73:27:13:69:41:A2:89:AC
Certificate issuer: /CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Certificate serial: 018CC3B73044451A3563307087F0608C4A68
Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/yxPYpnugJUz8XR9OcycTaUGiiaw.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43815
IP address blocks: 193.30.244.0/24 maxlen: 24
2001:678:8b0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:30:44:45:1a:35:63:30:70:87:f0:60:8c:4a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb13d8a67ba0254cfc5d1f4e7327136941a289ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:02:05:b8:1a:fb:75:59:af:e6:d5:dc:c1:88:
92:d4:64:34:25:e8:da:2f:4f:12:e3:1e:bc:48:b9:
6c:55:27:ec:e0:11:82:32:ad:8f:f1:3e:5d:33:94:
46:61:49:1a:82:b4:5f:45:9b:da:e5:72:d9:65:f2:
80:5a:7f:c2:c1:57:d4:df:93:9a:62:1d:a0:f5:22:
9a:21:3b:f2:d7:5f:eb:fe:28:7d:a5:ba:8a:73:e0:
48:8f:2a:03:b0:4f:87:86:3e:a8:0e:2d:a0:64:16:
41:f5:e8:3d:f6:4c:77:f2:bd:35:cb:61:64:26:02:
b7:9c:bc:ae:cd:0d:76:4c:09:f6:4e:98:c7:0d:9e:
50:67:c2:e1:da:a8:e8:7e:a4:f8:ad:eb:a3:25:9c:
7e:34:47:97:26:94:97:55:0e:b3:a2:53:e7:03:90:
03:53:39:05:28:55:e9:43:d5:d3:4d:30:ee:80:ac:
3a:12:1a:32:22:3f:bb:44:6f:75:7d:11:29:9c:b2:
0b:e9:ae:46:34:15:8a:e4:9c:53:b4:ec:e0:fa:3b:
ef:b7:f4:b4:73:78:a1:c9:92:94:4b:3a:9a:f8:b7:
01:ad:85:e8:6c:dd:1c:8c:fc:dc:2d:c5:91:49:00:
bb:e7:7a:7d:61:90:f7:20:f3:e8:99:51:18:23:01:
cb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:13:D8:A6:7B:A0:25:4C:FC:5D:1F:4E:73:27:13:69:41:A2:89:AC
X509v3 Authority Key Identifier:
keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/yxPYpnugJUz8XR9OcycTaUGiiaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.244.0/24
IPv6:
2001:678:8b0::/48
Signature Algorithm: sha256WithRSAEncryption
70:d7:a3:36:b5:f3:14:26:7e:16:04:26:cc:b7:04:19:3c:f5:
12:78:a8:3c:19:17:98:65:02:10:65:80:e5:69:d6:cc:25:5a:
44:10:a8:26:5c:9c:6d:4f:e9:00:48:ca:bd:cb:f0:20:28:49:
90:fe:04:77:5d:f4:67:e2:a7:a7:40:d6:1f:2b:e0:9d:57:af:
25:8f:bf:91:ec:e2:70:e8:8a:a6:e6:b8:29:f8:70:80:39:45:
54:c3:b2:35:b1:bd:50:02:f6:ae:56:7f:65:0d:f4:2c:d0:ae:
91:17:11:48:0c:17:2e:cd:b6:39:d8:29:68:78:76:df:43:93:
ef:7b:82:8a:98:65:cc:a8:ad:b7:f1:a4:42:d6:0a:b7:5b:be:
e3:ac:22:6e:41:ed:2a:41:90:88:33:fb:27:98:08:58:09:c7:
af:d4:58:9d:31:af:9c:88:a1:ba:bb:94:ec:43:9f:30:f3:c8:
3c:c5:7b:c3:d0:7e:24:7f:55:cd:ab:cd:6d:e0:61:8e:d0:41:
dd:3e:4c:c4:2c:19:63:c6:ca:49:94:b7:09:ed:e7:fe:9f:1f:
13:f4:1d:c2:bf:2c:c2:33:d1:07:5f:90:a9:16:c8:81:b7:f0:
0f:f2:53:5a:fb:01:29:b4:ae:08:7c:76:ef:6e:c4:0e:78:a7:
ec:b0:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:46 2025 by rpki-client