Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/y2a-8wQ4GgvAvrwbSg1XpqqAiVY.roa
File: y2a-8wQ4GgvAvrwbSg1XpqqAiVY.roa (raw, json)
Hash identifier: 9goVdJKo/RcmUkZq8QS5SVjK/YWd6XMBSF8Y6a6unhk=
Subject key identifier: CB:66:BE:F3:04:38:1A:0B:C0:BE:BC:1B:4A:0D:57:A6:AA:80:89:56
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0195B4693C3CC0601CEE60920D799D54F6C6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/y2a-8wQ4GgvAvrwbSg1XpqqAiVY.roa
Signing time: Thu 20 Mar 2025 16:35:50 +0000
ROA not before: Thu 20 Mar 2025 16:35:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.8.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Mar 2025 19:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:69:3c:3c:c0:60:1c:ee:60:92:0d:79:9d:54:f6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 20 16:35:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb66bef304381a0bc0bebc1b4a0d57a6aa808956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:1f:5a:5b:10:77:48:d6:5c:ec:8e:8d:d7:
35:53:c7:81:0a:61:08:bb:7f:37:13:61:af:59:b9:
74:18:eb:c6:2c:14:75:e5:ef:98:f7:07:75:7e:7c:
03:2c:4e:07:db:c2:cc:fc:73:2c:4e:8a:39:67:4e:
a7:33:9e:3b:d3:66:a6:9a:2a:27:bb:90:8e:cd:2d:
3e:26:13:ca:a2:48:e9:d1:ef:3e:af:6c:d0:be:16:
25:43:73:b2:39:c6:3c:39:dc:a3:fb:d6:50:74:20:
f1:a1:a1:a2:fd:6e:b4:c7:93:f8:2a:4c:80:4b:a7:
16:ab:17:04:e5:50:58:c3:03:c1:df:21:9c:62:6a:
3b:d2:a8:db:af:5c:11:ae:ee:03:85:ff:63:1c:db:
66:73:62:1e:3c:3b:18:80:18:5a:a8:c1:5f:b6:7a:
23:41:1c:ec:d9:29:1c:b9:9f:9e:d3:b5:8a:ce:de:
26:e4:c0:17:c8:2f:1e:9e:f9:b7:5b:a1:1a:a0:56:
88:d8:11:9f:2e:ef:4e:bf:a1:e3:d3:ab:14:9a:7e:
0a:54:c7:97:ad:b5:8f:4e:ee:cf:51:68:39:18:d5:
4c:39:85:d1:3a:d9:3f:c9:f4:59:32:a1:58:da:1d:
5e:cc:76:f3:5d:10:17:d2:a9:e9:e8:ad:18:38:dc:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:66:BE:F3:04:38:1A:0B:C0:BE:BC:1B:4A:0D:57:A6:AA:80:89:56
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/y2a-8wQ4GgvAvrwbSg1XpqqAiVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
Signature Algorithm: sha256WithRSAEncryption
69:fb:4d:f9:6c:e3:34:87:1d:28:06:d5:c2:b2:9d:50:cc:9c:
3e:dc:ed:79:05:e8:7f:37:db:1a:8b:96:ad:1e:69:d4:97:c1:
9b:0a:49:71:f0:92:80:c6:86:8f:38:86:67:d3:ea:85:89:a1:
74:c3:df:4e:31:cc:60:9c:8d:ae:0b:8b:ab:5e:cd:56:c5:e1:
5c:af:e0:f6:53:00:ea:f4:c8:ff:09:38:10:27:26:e3:79:c3:
10:86:90:b9:4b:c3:b5:1a:c6:80:25:23:4d:99:aa:98:40:86:
93:34:87:57:a8:82:21:05:63:3a:1c:b5:4d:35:a7:28:90:cd:
b3:94:9f:3c:68:d0:a3:06:0e:04:01:0d:ab:2a:91:79:09:b5:
75:31:a1:8b:56:23:53:5c:2e:83:9c:3e:fa:6a:7b:59:88:cd:
12:b2:6f:c9:d4:a3:98:46:e5:ee:34:47:ab:09:84:ac:d1:b4:
8c:d3:cd:03:59:69:9f:df:1f:07:5d:ab:77:c9:bc:57:ad:e8:
86:99:34:4d:ae:23:b2:3b:f3:ab:3b:b9:7c:29:35:b9:75:d9:
84:c1:36:ac:0c:36:fd:ce:e8:1a:68:37:c5:69:b1:d3:74:92:
5a:d1:94:10:ad:e1:2e:a2:89:72:79:bc:2f:7e:bb:06:fc:ba:
29:b6:06:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:18:07 2025 by rpki-client