Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/YJUZ9PSEu2qV7CTNV6D35RDbPP8.roa
File: YJUZ9PSEu2qV7CTNV6D35RDbPP8.roa (raw, json)
Hash identifier: mwRZJ1eVxcP4S3pphzkwfpvMWwtYo7aserrrfj3BB6s=
Subject key identifier: 60:95:19:F4:F4:84:BB:6A:95:EC:24:CD:57:A0:F7:E5:10:DB:3C:FF
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 0191450A8C7832395BA25ED06B2C2B622990
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/YJUZ9PSEu2qV7CTNV6D35RDbPP8.roa
Signing time: Mon 12 Aug 2024 05:23:24 +0000
ROA not before: Mon 12 Aug 2024 05:23:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212939
IP address blocks: 103.215.220.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
195.238.240.0/24 maxlen: 24
195.238.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:0a:8c:78:32:39:5b:a2:5e:d0:6b:2c:2b:62:29:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Aug 12 05:23:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=609519f4f484bb6a95ec24cd57a0f7e510db3cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:fa:8c:5b:3d:24:92:17:e4:84:7e:68:e1:
37:6e:e6:da:a7:6d:ee:60:c7:8d:11:33:3b:db:4b:
b7:52:32:2c:51:93:00:88:e8:62:02:70:de:ce:f0:
6c:6d:6c:2b:76:0d:1a:34:23:68:62:98:c4:8b:b0:
9d:ef:07:4c:b1:c3:55:1f:2f:c5:02:ca:d0:ff:db:
5b:23:65:cc:b8:06:89:00:cc:04:5b:a2:6f:20:bc:
14:f0:de:8f:6a:a2:95:cc:de:7c:c4:bb:a7:28:0c:
98:a4:93:78:57:fd:70:3c:36:05:95:36:70:99:11:
da:63:f1:ff:c1:86:16:62:b4:5d:8b:07:96:6f:4c:
18:24:e5:09:f7:6b:e6:4b:71:4e:3d:9b:ec:89:8e:
5f:95:9b:32:c8:aa:93:3c:0a:3d:08:52:f9:d0:fe:
cc:fb:22:7d:c8:4c:c7:48:d7:fe:9b:3f:19:56:24:
87:5a:b7:1d:31:82:ce:db:e3:86:d5:c5:d6:30:b0:
71:59:bc:e3:77:82:4c:0e:b0:a6:60:11:cd:1c:31:
20:89:26:05:ad:49:21:e3:6b:28:3b:6d:1a:07:c5:
42:fd:e7:02:14:72:f3:12:f6:0f:e4:6c:e8:76:33:
1b:3f:6b:96:7d:a5:50:1f:5a:ef:6b:55:bd:a2:90:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:19:F4:F4:84:BB:6A:95:EC:24:CD:57:A0:F7:E5:10:DB:3C:FF
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/YJUZ9PSEu2qV7CTNV6D35RDbPP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.220.0/24
195.238.231.0/24
195.238.240.0/24
195.238.247.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d6:dc:3c:05:20:9c:2e:3a:46:c0:31:1c:9d:7d:bc:ba:88:
21:68:5e:ac:b5:e9:7c:50:43:78:5a:2b:8d:ad:e8:a8:7b:82:
75:42:d6:82:fb:fb:bf:70:f3:51:e6:25:9b:42:fa:57:7a:cb:
8f:a9:23:c7:38:5e:97:09:e2:f3:37:6a:85:5e:ac:8d:f5:92:
70:c4:cf:4e:d3:56:d5:4d:e7:e1:fc:94:8d:1b:27:e2:1a:54:
6e:b1:c1:dd:ba:4d:89:74:29:56:4c:e9:01:1e:d5:90:66:34:
3a:38:b0:48:3e:2f:bd:20:f2:6c:f4:02:ff:3c:57:c8:b6:86:
a6:87:7c:84:76:a1:b7:26:60:4b:dc:3c:62:f8:d6:63:88:c2:
8c:71:f3:af:0e:a1:4c:bc:9d:ac:93:b1:8a:9d:24:ae:33:dd:
2a:01:1a:ff:eb:25:ae:36:7f:8b:c5:44:f1:3c:69:af:d2:3c:
d1:0f:e3:8c:65:a7:54:19:9d:0e:ba:89:ae:50:69:dd:4f:07:
0c:84:74:d4:17:70:0e:dc:3d:44:3e:f7:b4:dc:6a:0f:46:bb:
c0:4c:7b:ee:54:9c:16:b4:df:95:45:e9:10:9e:fd:37:d3:4a:
f0:eb:a6:5c:66:4e:62:11:0f:05:80:f9:da:60:5b:ad:85:88:
36:1b:fc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:13 2025 by rpki-client