Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/Ye2g34-8QSrKCVw_VU9H_PaUK7A.roa
File: Ye2g34-8QSrKCVw_VU9H_PaUK7A.roa (raw, json)
Hash identifier: 4Po9MYXeKvj4243S6/flQZ5yoGlCI4F+OOE/a9HNaWs=
Subject key identifier: 61:ED:A0:DF:8F:BC:41:2A:CA:09:5C:3F:55:4F:47:FC:F6:94:2B:B0
Certificate issuer: /CN=85b7d5ccdaf03309749745764200a7272764730a
Certificate serial: 018CC56E5CF2FA6DBF903E4A46BF6C8AE0C3
Authority key identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/Ye2g34-8QSrKCVw_VU9H_PaUK7A.roa
Signing time: Mon 01 Jan 2024 14:29:53 +0000
ROA not before: Mon 01 Jan 2024 14:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48417
IP address blocks: 195.210.14.0/24 maxlen: 24
195.210.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:5c:f2:fa:6d:bf:90:3e:4a:46:bf:6c:8a:e0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b7d5ccdaf03309749745764200a7272764730a
Validity
Not Before: Jan 1 14:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61eda0df8fbc412aca095c3f554f47fcf6942bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f4:5f:b5:96:12:fa:ea:9b:d0:86:c1:db:c6:
23:b1:ce:44:f4:01:cb:a8:49:84:75:a1:b0:6d:ae:
06:7c:55:89:8c:41:e0:cb:82:a5:d4:4c:94:74:9c:
06:88:6e:f0:23:73:f4:1b:54:20:eb:1c:ec:e6:93:
c0:2a:c2:2a:ee:78:3b:cf:33:17:d5:d7:71:83:30:
bf:09:b5:89:96:c7:3f:e8:5c:95:bd:fa:4d:b4:08:
6f:54:1d:8a:98:51:ff:c8:5d:b3:9c:b7:8e:5f:b3:
65:8c:63:d1:18:fc:2e:42:a7:97:10:f2:00:4f:9c:
e4:90:b4:65:87:ba:a4:f9:b4:c2:6d:9d:97:7f:94:
d3:b0:f6:1b:3e:d2:10:ad:de:9b:9d:2a:65:06:e9:
3c:c7:b3:fe:84:7a:06:50:b3:e1:1d:d8:ae:70:1a:
07:39:60:e2:ef:7b:7c:2d:ce:87:78:19:2c:94:86:
d0:8d:29:a1:f6:39:37:8c:34:c5:32:f8:b6:bd:6e:
46:3b:53:14:8a:24:88:39:40:ea:db:5d:a6:a9:1d:
2d:2a:9b:12:ac:67:03:57:6e:e4:3a:ec:08:28:58:
03:f9:d2:43:1c:f8:f2:c1:b6:f2:da:2d:8a:8b:6a:
e8:2d:3a:73:b6:25:ec:0e:b4:f7:54:ff:15:77:89:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:ED:A0:DF:8F:BC:41:2A:CA:09:5C:3F:55:4F:47:FC:F6:94:2B:B0
X509v3 Authority Key Identifier:
keyid:85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/Ye2g34-8QSrKCVw_VU9H_PaUK7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.14.0/23
Signature Algorithm: sha256WithRSAEncryption
41:d3:bf:dd:12:5e:45:7a:2a:e0:ef:8f:75:f0:af:ca:2b:c8:
2b:1b:40:37:e7:43:7f:1e:76:ac:e7:03:bd:12:3e:08:2a:9d:
90:d9:fd:78:63:a2:d0:34:24:f2:72:d1:fd:bb:d5:32:94:f2:
ca:1c:8e:79:75:6e:8a:20:0e:15:76:79:98:0a:43:10:ae:58:
e9:2d:36:a3:6b:f8:b6:32:7a:19:38:a9:c1:6f:0c:75:23:2c:
ed:6c:8d:57:46:3a:39:50:88:8c:37:98:d8:82:d3:50:9e:31:
5a:c7:50:09:ca:0e:aa:f7:ec:a4:c9:cf:5d:77:1b:7b:70:4b:
d8:e9:08:42:b9:35:12:97:55:d6:c7:52:ff:87:ad:c8:64:21:
2d:39:82:5a:76:18:2a:08:a5:22:0b:09:8e:64:0d:55:7f:db:
a7:21:13:bd:ca:72:d7:75:a7:aa:0a:86:15:07:70:31:9a:de:
62:80:4e:72:ef:3d:e6:04:54:3c:55:2e:d0:93:9e:c6:c3:00:
26:5b:88:b7:68:c4:c0:b9:4f:6a:a4:9b:cd:66:02:1f:16:8a:
66:0a:31:e3:c0:4a:05:f5:d6:d4:6c:9c:38:fb:b8:9f:95:dc:
23:17:d0:f3:b3:c9:79:d6:22:59:f2:6b:a6:8f:d3:47:b4:f0:
e8:2f:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:33 2025 by rpki-client