Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/Ywh2-3KIoOsu5EdBQ5QNJs0HDqw.roa
File: Ywh2-3KIoOsu5EdBQ5QNJs0HDqw.roa (raw, json)
Hash identifier: yY7zjKPTo3zmJ1WuCe9EEHgZ0/LrVMCUBOoAIdt35aM=
Subject key identifier: 63:08:76:FB:72:88:A0:EB:2E:E4:47:41:43:94:0D:26:CD:07:0E:AC
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 018CC5010A9BAF659AD03561F6F6BC892B81
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/Ywh2-3KIoOsu5EdBQ5QNJs0HDqw.roa
Signing time: Mon 01 Jan 2024 12:30:28 +0000
ROA not before: Mon 01 Jan 2024 12:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210353
IP address blocks: 195.114.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0a:9b:af:65:9a:d0:35:61:f6:f6:bc:89:2b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 12:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=630876fb7288a0eb2ee4474143940d26cd070eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d6:b6:84:9f:f3:48:c8:bc:84:11:e9:2a:9b:
e7:45:4e:91:a7:71:e2:76:15:47:ee:cd:0c:64:94:
db:1b:1b:f5:7c:53:a3:74:36:72:69:2f:24:7a:1c:
c1:91:7f:e0:48:06:54:43:aa:95:a0:48:63:70:10:
d7:95:23:ee:55:7b:dc:01:da:8d:49:20:8c:b3:4d:
9d:33:e8:23:a5:78:d9:82:4f:98:d4:23:1b:3b:ec:
4a:ec:a9:5f:7a:3c:f0:06:9a:a7:f8:4f:73:42:3e:
4a:31:85:a0:5e:f7:29:7f:cb:1f:8f:8c:35:67:28:
f3:c1:29:91:9b:ba:a3:01:84:91:a7:e8:1c:4d:f1:
b9:db:77:59:42:30:ed:fa:c7:0a:75:07:41:45:d2:
a4:c9:72:58:72:e9:87:01:f0:7b:4c:e5:b6:76:7c:
ed:56:a1:bc:98:d3:3b:4e:fe:7f:58:d5:7f:e9:ca:
db:c2:a4:5b:4b:ba:46:1c:cd:24:92:f4:35:56:6f:
7a:85:57:35:d0:9c:dc:39:dc:07:df:36:5b:ef:fa:
63:79:70:98:00:30:12:90:16:d6:cb:a2:2c:d3:dd:
83:c0:09:c3:5f:f1:b6:59:4f:ec:40:61:ea:6b:21:
af:fc:d7:2a:38:d7:27:4d:47:d5:1c:53:a1:19:ae:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:08:76:FB:72:88:A0:EB:2E:E4:47:41:43:94:0D:26:CD:07:0E:AC
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/Ywh2-3KIoOsu5EdBQ5QNJs0HDqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.130.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:b2:cd:4d:6f:3c:dd:a1:d6:84:05:4a:f5:40:d5:2a:9e:5b:
a5:e5:a8:c0:94:94:63:f1:74:85:d7:94:48:ce:94:0c:0c:d4:
ba:37:a3:66:3c:79:a7:f6:6b:a4:17:ad:98:ed:14:e7:d6:fb:
90:50:a5:2f:55:d5:04:3d:3d:b6:72:8a:ba:7e:35:66:62:22:
27:a8:e8:be:8b:f3:9a:da:3e:f4:f5:fe:39:9e:2f:d7:5a:77:
cd:36:a8:8e:cb:d8:43:41:7a:ec:3a:fb:ee:16:0e:6d:0c:c9:
a4:33:60:36:8d:72:b2:9f:77:33:14:19:fd:27:a2:4c:11:65:
72:59:15:e7:74:4e:c8:2c:65:9d:7c:90:5a:0a:c2:65:7d:17:
e6:8c:dc:e3:78:5d:90:c8:76:10:8f:01:f5:30:9c:da:d9:eb:
fe:ae:ee:0e:d6:52:a4:38:76:15:f8:a6:c9:33:64:e4:b9:b6:
30:3c:8a:04:b0:20:82:4e:86:64:a2:ff:b9:7b:97:4c:66:80:
09:e6:98:17:a5:ef:2b:59:cf:c1:82:2f:9f:e4:e4:f5:00:07:
47:47:f1:b3:88:20:c0:99:05:d7:3a:60:70:7f:08:15:99:8c:
8a:e9:6d:5e:69:b3:59:fd:4d:7b:44:55:a9:35:c3:89:07:e9:
d3:c7:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:26 2025 by rpki-client