Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/YfCrsCo7hLklKAnfgqknjALZdw4.roa
File: YfCrsCo7hLklKAnfgqknjALZdw4.roa (raw, json)
Hash identifier: AXdfPrvD70vSm0bp+lWbVjQAkjHNxNzP1qFwXtsCXPY=
Subject key identifier: 61:F0:AB:B0:2A:3B:84:B9:25:28:09:DF:82:A9:27:8C:02:D9:77:0E
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 018EF77FB76CA02F444B56B92DE0F9E290B5
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/YfCrsCo7hLklKAnfgqknjALZdw4.roa
Signing time: Fri 19 Apr 2024 17:55:25 +0000
ROA not before: Fri 19 Apr 2024 17:55:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204650
IP address blocks: 45.144.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Aug 2024 08:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f7:7f:b7:6c:a0:2f:44:4b:56:b9:2d:e0:f9:e2:90:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Apr 19 17:55:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61f0abb02a3b84b9252809df82a9278c02d9770e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:9a:8b:a2:bf:18:5e:3f:2e:f2:a5:16:01:
34:3a:a6:8b:b1:33:eb:cd:e6:af:fe:75:65:9d:0c:
4f:31:73:1b:ea:5d:90:38:7d:b4:ae:61:de:70:7c:
e7:78:7a:5e:5f:31:c4:1e:23:1a:b9:eb:c5:73:8b:
c1:db:a9:17:17:b5:57:ef:b8:67:7e:a3:2a:68:6c:
3e:3d:7d:a6:7e:17:f3:12:31:32:85:ec:bd:46:06:
f5:19:c7:33:37:98:e9:ed:33:86:a6:b6:0c:cc:3f:
b7:43:a1:2a:e3:d2:f6:47:8d:7b:d7:26:c9:c6:64:
62:55:f1:74:11:e0:4e:32:c7:e9:d1:28:0a:81:05:
42:d9:8d:a4:03:ff:86:ee:92:01:e3:f0:66:3e:5f:
d4:3f:a2:68:d1:21:cb:17:37:c2:ee:cb:07:95:97:
07:99:3f:d4:99:34:1b:60:45:65:3f:49:02:3f:df:
8a:71:e1:13:41:e4:b1:00:e2:3d:02:8b:54:39:f9:
fe:c1:30:34:02:c4:c6:7e:33:9b:b7:04:05:c1:bc:
12:b5:5a:87:5b:09:06:f2:33:16:56:1c:63:0f:24:
df:4e:eb:36:20:32:3e:a7:2b:32:78:26:89:f8:ed:
f3:60:a3:22:2d:87:25:8f:67:e7:6a:a5:77:df:b7:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F0:AB:B0:2A:3B:84:B9:25:28:09:DF:82:A9:27:8C:02:D9:77:0E
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/YfCrsCo7hLklKAnfgqknjALZdw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.18.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c6:18:74:48:73:f4:9b:34:7a:13:70:f0:56:27:a5:0f:bb:
ba:0e:b3:8a:98:ae:b7:64:d1:2c:e2:92:d4:09:6e:10:8e:9c:
81:4d:da:3c:de:8c:43:a6:67:26:11:c5:3d:d9:bb:63:51:0d:
05:2d:24:b0:b0:06:14:6d:64:3c:76:8e:9d:3d:5c:7a:e7:2b:
26:fa:c0:31:cc:c5:be:64:91:ba:f1:11:bd:02:60:a1:74:13:
f6:94:1d:70:96:af:86:84:ae:af:5a:05:64:71:35:6e:4b:7d:
70:52:5c:a7:4d:ff:b6:78:87:12:51:d0:b4:98:50:a9:9a:63:
99:43:da:97:2d:11:96:5a:1e:71:f9:f8:e3:d8:c3:bc:73:97:
ae:72:9a:23:6e:1a:7f:d8:1b:4b:de:7f:0d:f6:f1:c7:4c:bc:
02:cb:d6:31:52:a6:7f:61:cc:3a:1d:5d:11:72:06:1d:e4:ea:
34:51:09:36:51:bd:f5:d9:0b:22:0c:1f:62:80:86:bb:40:2a:
4f:38:c7:bc:92:ad:11:16:a3:d4:4b:57:1d:66:7c:23:57:fd:
30:b5:cc:2d:15:13:ed:02:e8:d6:bd:c2:80:ae:aa:b7:e7:ed:
ed:af:fb:56:45:80:90:ab:fa:56:ef:9c:2e:32:a5:0e:ad:82:
b4:9f:50:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:16 2025 by rpki-client