Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0YyPyemPrrbbR6YB_gakOoaalIU.roa
File: 0YyPyemPrrbbR6YB_gakOoaalIU.roa (raw, json)
Hash identifier: SL6t5YbojFPiVVBLMBq4bXNHgs+Lv/LMavDx6I2SCX4=
Subject key identifier: D1:8C:8F:C9:E9:8F:AE:B6:DB:47:A6:01:FE:06:A4:3A:86:9A:94:85
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F977016516C01A62F3C17A388EDC8
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0YyPyemPrrbbR6YB_gakOoaalIU.roa
Signing time: Tue 02 Jan 2024 04:30:05 +0000
ROA not before: Tue 02 Jan 2024 04:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211527
IP address blocks: 213.175.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:97:70:16:51:6c:01:a6:2f:3c:17:a3:88:ed:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d18c8fc9e98faeb6db47a601fe06a43a869a9485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:1e:6b:cb:cb:0a:84:3c:62:e4:cd:fa:a8:
c7:0e:77:cb:8d:05:d8:6a:bc:5f:b3:e4:51:fa:5f:
5d:02:05:1a:fa:6f:1e:2e:22:1d:59:22:ff:80:c3:
77:92:1b:31:03:eb:0f:67:99:46:9e:82:44:8e:cd:
ec:5f:84:37:f6:34:ce:39:7c:ab:b3:f0:71:37:2d:
4c:82:0d:0a:08:95:39:e7:ea:c1:4c:7b:9d:c2:36:
0f:b0:4b:bd:fb:49:97:94:d4:fb:ca:bd:66:47:c7:
4b:d8:9d:ef:17:3f:26:42:f6:fd:63:c2:74:de:90:
5a:ca:dd:19:a3:c4:36:76:ad:c5:71:20:50:5b:30:
23:4e:e5:2e:8e:4b:c8:09:bf:73:3b:b2:06:83:8b:
c0:5e:da:a6:05:a0:46:3b:4b:f0:d5:a9:8d:b5:52:
6a:c1:bd:45:fd:80:47:61:64:0f:ae:38:51:70:1d:
f3:9e:38:9c:8e:f2:d2:68:b8:fd:b1:fa:36:d1:61:
11:5e:82:9a:10:64:b9:7d:6e:3d:f6:cf:a4:7d:dc:
bf:3b:ad:b5:0f:f4:58:90:76:b0:54:4c:03:a7:79:
4c:74:2e:7c:e1:74:e0:c3:25:06:40:ab:16:d9:a2:
a2:57:98:74:cb:72:16:71:2d:77:32:14:e7:e3:35:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8C:8F:C9:E9:8F:AE:B6:DB:47:A6:01:FE:06:A4:3A:86:9A:94:85
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0YyPyemPrrbbR6YB_gakOoaalIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.68.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0e:f2:70:2e:1e:fb:69:16:dd:30:4e:50:4a:b6:67:8c:68:
7f:5e:11:5a:44:3f:63:7b:57:72:90:83:44:97:20:7a:90:b4:
67:89:cc:4e:8d:46:29:12:14:8c:09:bd:0a:a4:ac:7e:2b:2c:
86:be:b9:7e:2c:ba:db:e1:84:fe:e5:4b:ad:00:4c:40:c3:c3:
1a:de:50:99:80:5a:84:04:ac:51:d4:67:f8:f0:05:ea:fc:82:
73:b3:4e:de:bf:86:67:c1:65:a3:84:84:d0:f3:58:b4:9a:5e:
90:fd:57:f4:3b:8c:96:0e:f0:e8:8a:41:ff:8a:c7:4a:16:84:
a6:1a:02:16:a9:37:61:61:c8:09:58:a0:2e:49:3e:49:3e:c1:
88:1a:c1:23:39:3c:79:79:83:b1:b4:08:87:50:0a:cd:67:62:
b9:86:93:0d:a6:f4:7f:6c:97:6f:1b:3b:79:4f:34:74:af:92:
5e:f9:75:c3:9b:5e:f3:75:cc:4e:9c:9e:50:fb:70:38:88:d1:
a0:fb:2a:f6:ca:26:72:b6:d0:72:0a:05:13:97:a0:cb:41:d9:
e8:27:a6:9e:a3:b1:df:95:af:c0:6d:ef:26:eb:0b:19:3f:c8:
51:c5:ec:f3:3d:86:4e:be:eb:8d:5b:76:64:b3:56:85:4d:2e:
da:f9:49:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:25 2025 by rpki-client