Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/cYYb3MnRUJHfNlFEkUOluM9rCQk.roa
File: cYYb3MnRUJHfNlFEkUOluM9rCQk.roa (raw, json)
Hash identifier: DfTlQvr5873exBCzLT4kWKkfCt4KTeZBoWjoREZQBBE=
Subject key identifier: 71:86:1B:DC:C9:D1:50:91:DF:36:51:44:91:43:A5:B8:CF:6B:09:09
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 018CC424856ED7DB37A460EFDD8596DA0CA7
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/cYYb3MnRUJHfNlFEkUOluM9rCQk.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212939
IP address blocks: 195.238.247.0/24 maxlen: 24
103.215.220.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 05:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:85:6e:d7:db:37:a4:60:ef:dd:85:96:da:0c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71861bdcc9d15091df3651449143a5b8cf6b0909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a0:ff:56:18:e9:c2:30:97:f0:21:ed:3d:3a:
b8:70:f9:0a:2b:39:34:f3:30:5a:37:52:8f:be:3f:
88:78:70:b1:a2:a5:67:16:1b:9e:dd:fa:40:eb:10:
8d:15:7c:ba:d7:7b:2b:38:e1:b2:3d:47:cf:b1:b7:
43:13:cf:6c:10:6c:ee:3d:ea:0a:c8:e6:58:ee:62:
30:66:68:bf:4f:b1:cd:f5:3a:25:d4:6f:d7:d0:51:
34:b8:dd:a9:79:48:3c:64:69:2c:67:11:44:44:a8:
92:d2:97:0d:37:21:14:fe:22:18:6d:5d:66:24:bd:
df:3f:05:72:3e:1d:a7:89:c9:4d:75:b0:18:62:eb:
a5:18:99:7c:46:6e:b9:e1:cc:6f:c2:44:51:32:80:
46:27:82:96:8f:ff:32:d0:50:d4:1b:d6:78:a7:8d:
83:b9:c0:81:85:dc:97:f9:45:78:b8:ae:d2:09:19:
84:d6:df:76:27:77:4a:93:61:2a:69:9c:31:ac:86:
c9:2d:7f:ef:ea:10:68:d7:fd:2c:bd:34:8d:e5:58:
18:08:4e:0e:d7:0e:e8:4b:11:f0:7d:d1:94:95:bb:
f4:6f:9e:a3:a3:13:86:eb:de:3a:e7:8b:a8:18:6b:
35:e5:3d:41:ce:fb:dc:62:81:39:0c:13:5b:79:b6:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:86:1B:DC:C9:D1:50:91:DF:36:51:44:91:43:A5:B8:CF:6B:09:09
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/cYYb3MnRUJHfNlFEkUOluM9rCQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.220.0/24
195.238.231.0/24
195.238.247.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e5:95:e5:8d:52:92:aa:ca:f2:01:28:4b:b4:de:31:4a:58:
63:b8:b2:92:8c:a7:35:df:d8:61:82:20:8b:44:d1:ca:24:27:
12:dc:da:62:e2:e7:54:ed:83:c8:38:f9:ee:b3:59:a5:2f:a1:
f6:49:f0:45:93:7f:1c:75:00:5d:27:6b:be:35:1a:c4:66:ac:
c8:46:e9:2e:29:72:51:4c:f3:c9:fe:d9:83:e0:6b:6b:7c:1e:
af:36:e6:52:ab:27:49:69:1d:8b:e1:02:69:11:d5:56:46:3f:
e2:a8:69:10:e0:31:98:de:28:a1:8a:d3:46:9c:d7:87:0d:d5:
1f:04:3a:55:40:17:17:6e:d1:63:af:d8:79:5a:87:7f:05:99:
b2:3a:40:59:e5:be:5d:dc:08:dc:13:1b:53:9f:eb:f6:24:e0:
82:58:32:0f:b6:26:85:91:77:d1:6f:0e:d3:49:1d:3a:d7:5e:
be:6d:30:2f:cd:ea:7b:e0:ba:39:47:25:1f:d0:ea:99:14:18:
75:75:5a:fc:4e:9e:99:42:d7:63:31:d5:bd:73:fc:55:98:df:
76:89:e5:7d:ba:9d:87:87:a7:5b:83:63:06:0f:e1:dc:21:0b:
a5:a2:0b:03:e7:95:b1:9e:e4:fa:50:41:8e:7d:40:eb:46:d4:
37:2e:6a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:26 2025 by rpki-client