Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/yLnEYwIDvwJjkrBiCuNL7swwnGA.roa
File: yLnEYwIDvwJjkrBiCuNL7swwnGA.roa (raw, json)
Hash identifier: uPX7slyONsz8+eqtHK90Wj6pkuN5Ov2JpMT9k0yHIaA=
Subject key identifier: C8:B9:C4:63:02:03:BF:02:63:92:B0:62:0A:E3:4B:EE:CC:30:9C:60
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 0196115BC82B3101CCF97946D2C1B8D76A98
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/yLnEYwIDvwJjkrBiCuNL7swwnGA.roa
Signing time: Mon 07 Apr 2025 17:45:49 +0000
ROA not before: Mon 07 Apr 2025 17:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 92.119.60.0/24 maxlen: 24
92.119.61.0/24 maxlen: 24
92.119.62.0/24 maxlen: 24
92.119.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 17:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:5b:c8:2b:31:01:cc:f9:79:46:d2:c1:b8:d7:6a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Apr 7 17:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8b9c4630203bf026392b0620ae34beecc309c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:69:0b:03:a9:4d:42:07:8c:29:d6:a6:c6:
02:53:df:7d:ac:81:4a:97:27:dd:3e:ff:9c:0d:be:
4a:bb:f2:e6:49:67:34:b0:d2:3f:26:ae:43:4b:cb:
80:92:54:e4:fa:02:58:6a:92:79:79:26:fd:e7:ec:
1a:1c:22:fe:24:06:df:e4:84:22:10:53:d1:c5:86:
22:67:c9:d0:9f:0a:97:42:e9:4a:f5:e7:a0:75:da:
15:99:78:a7:21:87:7d:3c:45:99:28:b4:9e:a0:0b:
3f:08:c6:a2:d0:fc:ed:22:2b:f0:a4:2c:e8:fa:3a:
2b:53:a4:44:9f:58:3b:bf:f3:76:79:81:50:69:a1:
2a:04:2b:0b:46:6c:de:c2:f6:aa:93:98:05:91:dc:
8b:5a:ec:43:c1:6e:e9:ac:28:16:21:89:6d:dd:8d:
d2:1c:0a:99:98:09:da:dc:8d:08:b6:7c:ef:77:6d:
2e:eb:70:6f:ba:29:8f:ef:0f:5b:ff:06:51:01:57:
cc:fa:5b:20:f6:cf:85:c7:ea:19:7a:eb:52:6a:43:
92:0f:af:cc:2c:1e:65:0a:ad:ac:aa:ed:a3:66:bb:
a9:83:33:f1:47:7b:65:f5:bd:67:00:a8:5b:91:ba:
c5:ec:c3:ca:9c:a9:da:e9:8a:39:29:cd:d7:cb:ab:
e1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B9:C4:63:02:03:BF:02:63:92:B0:62:0A:E3:4B:EE:CC:30:9C:60
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/yLnEYwIDvwJjkrBiCuNL7swwnGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.60.0/22
Signature Algorithm: sha256WithRSAEncryption
36:ff:51:20:ab:f3:69:50:42:68:d9:77:ab:9d:5c:2a:0d:93:
23:42:71:8a:b7:2f:f6:5e:92:53:aa:a4:b1:42:c1:88:5b:d3:
f3:ba:be:ec:0b:ba:b5:4b:1c:fd:1d:1e:9c:fc:5c:bb:07:07:
fd:cc:30:da:33:f6:4e:be:01:eb:de:7c:ab:2b:1c:1c:21:dd:
16:1b:38:ea:8a:66:fa:ba:d7:f1:8e:b2:34:69:98:37:4d:43:
b7:ed:a1:9f:30:c7:69:19:47:ef:51:be:42:e2:25:f2:9a:2e:
7b:e6:1e:37:2f:33:e7:aa:a3:bb:4a:dd:ec:67:27:44:38:69:
c0:af:37:75:51:f7:cb:7c:64:67:80:4f:8f:f8:f0:b0:36:13:
1e:19:d4:61:6e:e5:2b:3c:ec:11:ad:33:53:8f:c7:be:32:8b:
4b:db:89:77:c7:f8:4f:a0:45:39:5e:be:0a:ec:d0:52:d7:bc:
96:53:09:0e:51:88:8a:10:dd:b4:57:b2:1c:c3:1e:13:86:08:
6d:0b:08:bd:b2:42:a4:55:12:e9:51:11:9f:54:84:ca:93:16:
1f:b6:d6:6b:7d:04:cf:4d:c0:5e:5c:1f:93:f3:7d:96:97:24:
2b:66:9c:2d:03:cf:de:ec:e3:74:32:10:e5:22:be:ca:1c:46:
e7:07:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:10:12 2025 by rpki-client