Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/YFpTzbdahNIjIhW0WUE8tDsg0Zc.roa
File: YFpTzbdahNIjIhW0WUE8tDsg0Zc.roa (raw, json)
Hash identifier: OprTvWEJr5fTT1U7nlN5AwJl1BhfMB+0QQXewnAwVwY=
Subject key identifier: 60:5A:53:CD:B7:5A:84:D2:23:22:15:B4:59:41:3C:B4:3B:20:D1:97
Certificate issuer: /CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Certificate serial: 0194252186C8720E9D79768B7B3676613330
Authority key identifier: 2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/YFpTzbdahNIjIhW0WUE8tDsg0Zc.roa
Signing time: Thu 02 Jan 2025 03:49:01 +0000
ROA not before: Thu 02 Jan 2025 03:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204457
IP address blocks: 195.170.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 07:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:86:c8:72:0e:9d:79:76:8b:7b:36:76:61:33:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Validity
Not Before: Jan 2 03:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=605a53cdb75a84d2232215b459413cb43b20d197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:ce:34:50:e2:d0:25:3d:10:a6:df:d8:f5:
13:0e:5b:91:51:26:37:7e:75:2e:ac:b9:55:8c:68:
1c:3f:29:bf:ff:48:65:b7:e2:08:7b:5c:2a:0e:48:
97:ec:34:59:cc:50:07:16:4d:25:eb:64:2a:f1:0a:
c9:40:e1:3a:a6:5e:20:43:0d:93:eb:e1:79:59:a0:
cb:43:f5:89:5c:52:98:ab:ae:13:3c:2e:30:bd:ff:
d8:a6:bc:de:03:da:48:c5:0c:30:5a:fc:e2:ea:40:
c9:4b:7b:44:db:19:83:fa:3c:06:46:c6:4e:08:ff:
f8:e4:5e:e6:47:fe:ae:7a:77:5f:95:2e:f7:c4:7c:
29:69:51:c5:c8:b2:04:2e:6c:38:da:c1:24:fd:84:
fa:e4:28:84:db:05:67:56:74:c5:a8:af:58:e5:f2:
79:21:81:30:78:7c:15:7a:67:15:7e:98:f3:8d:4f:
8d:63:e0:53:aa:c5:20:f1:d1:89:33:c7:13:65:2a:
da:85:fb:43:4e:b5:b8:62:cb:07:bc:36:a7:c6:f2:
41:39:52:a8:a6:1f:c0:b6:25:f6:a1:26:f9:08:ac:
38:0d:a0:38:e3:e0:c8:b0:cc:f6:4b:15:ae:d4:8c:
1d:59:d6:45:a2:12:fc:00:11:3d:78:2d:d1:9a:13:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5A:53:CD:B7:5A:84:D2:23:22:15:B4:59:41:3C:B4:3B:20:D1:97
X509v3 Authority Key Identifier:
keyid:2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/YFpTzbdahNIjIhW0WUE8tDsg0Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.186.0/24
Signature Algorithm: sha256WithRSAEncryption
84:2e:54:37:e3:1f:19:0e:c7:94:af:4b:67:4e:ba:2c:60:c8:
2d:c6:49:71:c0:5c:6c:28:f1:f6:5c:87:2e:53:db:38:cd:cd:
fb:18:af:53:80:51:9c:68:18:7d:f2:d8:ad:26:e9:ff:80:09:
ad:16:7c:1b:64:cb:a5:28:62:69:5c:ec:bb:f2:e1:fe:2b:a8:
6e:78:d2:78:a6:00:cf:e0:d4:9f:92:92:39:9f:7c:1e:6b:20:
5d:8f:52:75:10:3b:98:6d:00:0d:5c:c5:23:47:da:17:36:8d:
33:b8:1c:4a:9e:67:54:f1:58:fb:f3:2d:07:a2:82:8b:0e:da:
59:f8:1f:28:36:cc:e2:ec:da:15:81:db:0e:f5:c0:a4:71:7e:
d1:19:0c:9e:08:c9:a3:26:c5:fd:50:bb:67:98:fd:28:f6:bc:
52:49:10:5c:b6:24:59:e3:17:20:a4:2e:81:9c:92:90:94:d6:
0b:45:bc:3a:04:df:82:67:68:15:2e:4b:34:fa:54:c8:17:4f:
92:6c:02:f2:75:6d:b4:f2:0f:f6:ef:0d:9b:5b:90:5f:da:df:
b5:f4:68:49:51:7d:96:c1:45:8e:fe:98:f9:30:26:5a:5a:c7:
2a:72:c3:94:2e:94:70:72:4e:51:c3:1f:9d:ef:11:e2:4e:69:
0b:eb:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:26 2025 by rpki-client