Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/YeJ1KZ9dKr1KinCuI_jB2bFjM_w.roa
File: YeJ1KZ9dKr1KinCuI_jB2bFjM_w.roa (raw, json)
Hash identifier: 2jVmOWF/cFHeeF5b5FSSNNEAkhLgNp9NfP6thsAlF7M=
Subject key identifier: 61:E2:75:29:9F:5D:2A:BD:4A:8A:70:AE:23:F8:C1:D9:B1:63:33:FC
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CD574C3009367020C4CB0971B8078D835
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/YeJ1KZ9dKr1KinCuI_jB2bFjM_w.roa
Signing time: Thu 04 Jan 2024 17:10:48 +0000
ROA not before: Thu 04 Jan 2024 17:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42926
IP address blocks: 45.8.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 14:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d5:74:c3:00:93:67:02:0c:4c:b0:97:1b:80:78:d8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 4 17:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61e275299f5d2abd4a8a70ae23f8c1d9b16333fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:40:a9:16:c9:09:97:b4:fe:80:f5:06:75:15:
07:54:9f:f1:72:af:93:fe:76:e9:60:1a:7f:03:ec:
75:17:04:24:b9:4c:2b:44:6d:2f:39:a6:5e:20:98:
35:54:19:57:ce:4f:b7:11:f8:4b:3a:6b:e2:21:de:
4c:c1:a4:33:1d:61:31:4d:1d:a3:09:41:e1:47:bd:
fe:bd:61:94:c0:e5:85:7a:f0:01:72:2c:d2:48:ea:
5b:d1:7b:f9:25:96:85:d5:66:52:15:5f:3c:35:94:
20:18:59:b1:94:98:0a:a5:64:7e:4b:ce:f4:38:de:
eb:20:77:61:a1:44:68:f2:00:f9:95:7f:77:c9:22:
59:66:ee:8b:e8:fd:4b:a6:42:11:f6:40:63:f4:36:
fa:47:13:52:c2:dd:3d:17:ee:13:65:81:c3:c8:55:
0b:30:5b:71:5c:9b:c4:1b:57:3f:e8:6f:9c:2f:ed:
6d:6d:1d:7f:78:62:1c:0f:69:e1:75:4d:e3:ab:94:
d3:47:5b:ed:ed:5d:66:d6:b7:38:73:89:4c:dc:a2:
9e:c1:72:7d:57:e4:b9:98:4d:aa:1a:0a:38:8b:c9:
c8:65:65:ec:4d:e9:24:8f:f8:92:aa:2d:10:f5:52:
9e:3f:be:82:c1:32:70:1b:bd:c3:55:60:d5:e8:67:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E2:75:29:9F:5D:2A:BD:4A:8A:70:AE:23:F8:C1:D9:B1:63:33:FC
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/YeJ1KZ9dKr1KinCuI_jB2bFjM_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
48:59:24:00:d4:dd:79:69:0d:fb:86:e6:ae:fa:c6:62:9d:3d:
d0:44:14:f5:da:a0:5f:13:cb:79:02:c0:05:4d:46:97:43:cb:
62:41:57:24:be:32:4c:11:8d:8b:5c:5c:b1:60:1c:1a:bd:0f:
3a:8d:2e:97:fa:3e:b9:3b:0f:32:2d:ed:a2:e4:32:2a:69:3d:
f6:9e:d2:65:a2:7f:a2:df:79:7c:33:7c:62:a7:f8:5f:2c:6a:
b1:f7:2c:63:81:ca:ad:b0:a5:16:fd:75:8e:88:80:e6:ff:26:
64:41:38:0d:87:7b:03:f1:ab:7d:a8:54:69:a8:3d:16:ec:af:
ac:da:e7:f6:78:e4:4f:bc:0b:f0:8a:12:ff:6d:45:6e:9a:59:
b2:de:96:c1:98:2b:19:7b:63:5a:f6:87:b9:f5:e0:fb:19:6b:
2c:98:a4:c1:3d:1b:65:ec:7b:2a:b0:96:21:63:c4:17:0e:50:
d5:e7:89:28:27:94:bc:f2:86:51:e0:1a:30:71:dd:a9:bc:e8:
55:22:6f:1b:5c:72:42:88:76:95:73:35:72:f2:34:db:8c:f9:
af:02:2e:e6:48:fc:90:9c:cf:82:a6:32:f1:3b:20:9e:54:43:
00:f1:fa:85:a2:f2:fd:ae:fc:73:06:06:a7:8a:d1:b5:c4:14:
63:cc:e5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:07:38 2025 by rpki-client