Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/yS3dyuy-i9M_1GgVSSMJdTvHZCo.roa
File: yS3dyuy-i9M_1GgVSSMJdTvHZCo.roa (raw, json)
Hash identifier: WLpX0JuBXQCnTDNMthXEHBHfXUVirDPJnIjAlDxq2qs=
Subject key identifier: C9:2D:DD:CA:EC:BE:8B:D3:3F:D4:68:15:49:23:09:75:3B:C7:64:2A
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA8EC5452122984F3A54EF4B308429
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/yS3dyuy-i9M_1GgVSSMJdTvHZCo.roa
Signing time: Wed 01 Jan 2025 03:48:21 +0000
ROA not before: Wed 01 Jan 2025 03:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 37.230.130.0/24 maxlen: 24
188.72.82.0/24 maxlen: 24
188.72.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 13:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8e:c5:45:21:22:98:4f:3a:54:ef:4b:30:84:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c92dddcaecbe8bd33fd46815492309753bc7642a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:cf:46:b5:79:3a:0c:23:6a:df:9d:36:83:
68:54:43:40:a5:0c:0a:21:d9:27:9e:89:22:91:24:
74:ea:e1:8a:5b:09:a6:b3:c7:28:5b:68:27:1f:a5:
ed:ba:10:b0:24:90:31:b6:16:d6:93:00:40:86:d7:
14:43:be:76:08:3a:3b:62:6f:d2:1b:37:84:7c:c5:
1b:52:35:48:da:eb:f3:9b:9d:59:b0:66:07:24:52:
95:31:f9:ae:f2:ff:16:6b:89:38:67:1e:62:61:b0:
3f:c6:bf:9b:2d:6c:c8:78:52:1f:63:50:93:cb:94:
9d:80:6d:0a:3b:2c:da:bb:d5:ff:9f:27:90:a1:03:
e4:16:bb:e1:87:5c:a4:a5:49:d0:b2:b6:1d:97:26:
84:2a:50:c2:ce:6e:86:48:bb:ca:05:8e:0b:ca:0e:
bb:68:49:50:88:14:31:60:07:27:5d:0d:75:02:31:
ad:d6:9c:1f:d7:fc:bb:14:f0:82:02:42:04:ed:dd:
d2:d4:ae:07:10:c2:02:96:45:6d:f8:0c:ca:99:97:
32:3c:f5:9d:ed:ea:7f:c6:b4:a8:c7:2f:d4:89:cd:
8b:00:70:2a:21:d0:c9:25:03:8c:34:b3:c0:ff:be:
7d:c7:3a:35:c8:5b:52:b9:ae:39:d9:30:b0:15:e4:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2D:DD:CA:EC:BE:8B:D3:3F:D4:68:15:49:23:09:75:3B:C7:64:2A
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/yS3dyuy-i9M_1GgVSSMJdTvHZCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.130.0/24
188.72.82.0/24
188.72.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:47:dd:c8:0c:9b:df:4c:54:af:4d:c6:87:9a:d7:21:b1:34:
05:5e:05:ea:da:ba:f9:fa:17:f8:b2:62:a6:ff:d7:dc:4c:6d:
bf:07:44:62:2c:af:3f:a9:e9:05:ce:0e:33:e9:36:4b:ad:c6:
80:cf:c0:ec:fd:e3:fd:41:cc:7a:35:e5:48:f2:ff:98:f0:3a:
e0:b0:8d:3a:33:67:a7:03:4b:a9:c7:4f:98:26:46:25:91:fb:
99:3d:59:67:b3:5d:4c:f6:4f:21:37:cb:e1:85:c1:8f:d1:0e:
b2:e9:4b:0c:7a:42:15:6e:0a:91:1d:59:40:e2:e8:23:32:12:
f0:03:f9:2a:c7:bf:de:57:b8:8a:92:2c:24:a6:f0:e5:dc:a1:
a5:d0:f3:36:af:f3:e7:0b:85:c9:5c:5d:fb:7c:c5:44:da:a2:
96:c6:58:49:1e:6a:b0:e8:65:cb:40:f6:cd:c1:90:07:58:84:
f2:7e:6f:c5:da:67:6f:3e:82:2b:2b:1f:49:3d:b7:31:08:0a:
15:a6:24:86:50:e7:61:8c:8b:6d:94:e0:d8:88:be:9b:d9:e5:
3a:3e:d8:6c:44:96:b0:a6:31:aa:aa:cf:2e:16:1e:93:05:c9:
2e:04:8a:a5:b7:52:e3:22:4b:a5:d5:93:64:ac:d7:a9:9b:d1:
7d:92:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:07:13 2025 by rpki-client