Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/YujHXcpupxynSn4WmE6Tn05GxL8.roa
File: YujHXcpupxynSn4WmE6Tn05GxL8.roa (raw, json)
Hash identifier: jfW6qQuCrswQPtD4ulwejgn2I1x2mZZM7cStA7ClYko=
Subject key identifier: 62:E8:C7:5D:CA:6E:A7:1C:A7:4A:7E:16:98:4E:93:9F:4E:46:C4:BF
Certificate issuer: /CN=b154b4611b8ce8287275bc47a69afa378b4140bf
Certificate serial: 019386C8D92100AD4CA3D413D984A84A64E5
Authority key identifier: B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/YujHXcpupxynSn4WmE6Tn05GxL8.roa
Signing time: Mon 02 Dec 2024 09:52:09 +0000
ROA not before: Mon 02 Dec 2024 09:52:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214683
IP address blocks: 176.112.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:c8:d9:21:00:ad:4c:a3:d4:13:d9:84:a8:4a:64:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b154b4611b8ce8287275bc47a69afa378b4140bf
Validity
Not Before: Dec 2 09:52:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62e8c75dca6ea71ca74a7e16984e939f4e46c4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:bf:5e:a9:6b:ce:d0:3c:07:5e:34:f6:c5:
7a:b9:2a:89:29:98:27:1d:a9:7e:88:ee:77:64:0e:
c0:66:33:73:56:3d:a5:6a:45:8a:f5:b6:b8:8d:15:
27:42:2c:03:5d:fb:47:19:14:f3:e5:5a:7f:fb:19:
54:fc:28:58:59:0a:9d:4c:4b:2f:c1:fd:92:ce:06:
5e:82:3f:7d:48:f7:3c:f7:b1:d9:98:d0:fe:e1:1b:
64:10:51:98:01:1d:aa:b3:ff:1e:d8:da:d3:c1:08:
26:87:c2:ad:60:0a:53:56:a5:95:19:c2:12:db:f6:
e0:34:43:c1:55:12:da:d7:96:5a:88:73:34:b3:db:
63:69:13:59:2b:68:65:56:14:40:8b:d8:9b:1e:74:
f8:11:3f:c6:2d:a3:f5:b4:83:da:1a:24:4b:9b:d3:
13:f4:35:0b:80:47:bc:29:87:cd:9c:d1:c4:60:95:
14:94:53:93:91:88:91:66:1b:f1:09:de:e5:d1:fd:
a7:80:82:b3:6b:31:fd:47:6b:aa:55:b3:9d:d1:1a:
38:bd:df:70:74:9d:bc:bd:b5:31:b4:18:27:c6:51:
6a:72:9b:f6:96:2b:0d:e9:e4:69:8f:d3:17:5a:d1:
6c:81:85:d4:9a:4e:79:44:73:17:82:52:a1:d8:02:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E8:C7:5D:CA:6E:A7:1C:A7:4A:7E:16:98:4E:93:9F:4E:46:C4:BF
X509v3 Authority Key Identifier:
keyid:B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/YujHXcpupxynSn4WmE6Tn05GxL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.112.91.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:33:1b:51:a6:2a:eb:60:9c:07:cc:17:38:fc:a6:62:49:21:
a3:21:b5:9f:ad:1d:09:e8:22:fe:0f:cf:15:0e:5c:7d:9b:b5:
c2:7d:21:e8:7f:8e:24:7e:b5:69:7d:4f:d6:65:0b:a9:df:b3:
74:6b:84:67:2a:19:44:98:b5:66:05:20:41:29:ad:0c:8d:9e:
c6:d3:aa:f0:98:87:35:03:b2:c5:56:b0:f2:0b:99:2b:2a:18:
0e:ad:59:1b:b2:96:70:ac:30:fa:16:19:a1:e5:fe:ec:f1:88:
93:1d:ed:60:0b:4b:2b:dc:c1:a6:04:f7:91:21:ee:1e:cd:b6:
94:41:df:a7:22:b0:8c:16:4b:0c:7c:de:f4:f0:e2:e5:73:eb:
9c:f7:e6:c5:08:fa:cb:cb:d0:13:2b:89:e8:8c:a5:9d:26:67:
04:43:e9:8a:5b:4e:11:8e:f3:f7:9b:f2:32:10:24:75:1d:a7:
18:9b:7d:60:97:dd:f2:4d:27:44:3d:b9:9f:b0:bf:98:01:0c:
a9:1a:20:c7:09:34:6e:b1:2d:fe:fe:89:0e:59:c4:6b:a3:91:
ca:8c:18:0d:63:e7:82:f4:da:ca:cd:e4:58:c1:de:f5:e1:00:
16:b1:97:ef:c6:a8:be:c5:20:e4:5a:d1:90:cf:43:d6:0b:3e:
6f:e8:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:39:15 2025 by rpki-client