Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/YP3KwGEp4OHehKjZFim5d6Ir4Zs.roa
File: YP3KwGEp4OHehKjZFim5d6Ir4Zs.roa (raw, json)
Hash identifier: gY2jh53p9w5duXBJWb31Oq9l2EMTRINY9ybVIKPJEFo=
Subject key identifier: 60:FD:CA:C0:61:29:E0:E1:DE:84:A8:D9:16:29:B9:77:A2:2B:E1:9B
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0192BD746DAFC6E87DAEA31E95515BF3DA46
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/YP3KwGEp4OHehKjZFim5d6Ir4Zs.roa
Signing time: Thu 24 Oct 2024 07:36:16 +0000
ROA not before: Thu 24 Oct 2024 07:36:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15974
IP address blocks: 83.234.164.0/22 maxlen: 32
93.157.208.0/21 maxlen: 32
185.44.120.0/22 maxlen: 32
193.22.6.0/24 maxlen: 32
213.80.128.0/17 maxlen: 32
217.23.64.0/19 maxlen: 32
2a02:e840::/32 maxlen: 128
2a02:e841::/32 maxlen: 128
2a02:e842::/32 maxlen: 128
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bd:74:6d:af:c6:e8:7d:ae:a3:1e:95:51:5b:f3:da:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Oct 24 07:36:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60fdcac06129e0e1de84a8d91629b977a22be19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:d5:69:3a:10:6c:60:37:3b:2e:39:da:c7:
25:1a:18:08:0f:a9:58:3a:8c:a7:5c:ad:d0:ee:c3:
93:7a:35:ef:fd:59:ba:5c:7a:07:81:da:e1:56:5f:
7e:28:1f:f6:bf:b7:f2:8a:6f:d0:d4:91:6c:1d:5f:
fa:d4:db:fa:60:e5:c1:18:23:b2:86:81:79:c3:c7:
cc:f3:0b:8d:d8:54:06:2a:fc:c8:65:f3:ec:c9:e1:
70:39:30:22:81:0e:64:bc:19:0a:71:c7:da:bb:a4:
89:8d:15:9e:93:ac:22:f4:c6:e8:15:02:ba:99:b8:
c5:ba:6f:a1:18:be:40:bd:22:49:d1:8f:09:bd:de:
69:f5:0c:87:c8:22:5b:73:ef:9f:f4:26:dc:9a:0a:
f4:31:d3:99:fa:39:ca:78:a5:87:40:1a:95:92:90:
07:8c:fd:ca:ab:11:01:e4:d6:a7:01:d5:7f:ab:c0:
07:b8:f2:1e:76:93:fc:d9:18:72:98:a3:47:ba:1e:
48:1f:05:41:ce:22:f7:82:32:5f:6a:4e:a9:d9:7b:
eb:f6:4c:bd:d9:9d:1b:4f:f4:96:89:f4:96:33:1f:
86:8f:71:c4:ed:30:4a:76:2a:ba:16:bd:6b:e0:62:
56:9d:47:ef:4d:30:8c:9d:2b:d5:d3:fd:69:1d:42:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FD:CA:C0:61:29:E0:E1:DE:84:A8:D9:16:29:B9:77:A2:2B:E1:9B
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/YP3KwGEp4OHehKjZFim5d6Ir4Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.234.164.0/22
93.157.208.0/21
185.44.120.0/22
193.22.6.0/24
213.80.128.0/17
217.23.64.0/19
IPv6:
2a02:e840::-2a02:e842:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d9:29:49:1e:f5:8f:d9:ed:c7:39:02:35:ff:99:d6:0a:20:67:
49:10:5a:28:6d:f0:d7:64:50:27:04:2b:92:86:65:b7:9a:0b:
ec:57:73:ae:ca:38:c8:01:22:9f:4c:66:e6:29:ed:a4:bf:4a:
74:82:41:a7:38:40:2c:92:ef:68:b8:b2:d0:82:80:d5:d6:22:
a5:86:ca:95:98:42:0d:00:e4:e9:7e:90:8d:30:31:d8:47:ad:
24:06:f6:b9:60:3a:e3:ec:a2:2b:71:b4:5a:49:9e:57:32:0f:
74:60:5a:17:f6:91:be:d4:69:81:74:b6:bb:be:14:88:f7:2d:
b1:59:78:5c:30:48:16:8a:48:8d:45:d4:10:ad:0c:0b:95:d8:
5e:02:57:54:21:fa:a5:3f:90:33:35:69:a6:88:61:08:44:f8:
fc:b3:43:af:1d:3d:ef:c0:59:12:89:de:84:90:0f:0f:af:d1:
8c:2f:dd:5e:28:b8:75:e5:0e:2f:44:d4:82:22:b1:14:e3:f4:
9e:d9:58:da:97:e7:47:66:1a:0c:04:24:55:34:7c:6d:f0:e6:
6a:09:c8:45:34:07:5b:c1:bf:35:db:91:71:b8:4b:a6:16:17:
de:cb:b5:0f:9a:f4:d1:c2:ca:78:af:2f:4c:a8:82:99:37:0e:
7a:71:9a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:12 2025 by rpki-client