Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/yXYvm1PwKCFyQE-QUBKU1NkKEdc.roa
File: yXYvm1PwKCFyQE-QUBKU1NkKEdc.roa (raw, json)
Hash identifier: EgPyTwwlg6rjJs3+HMLv0i5yoQ72yOYLhmkvXlI4RA8=
Subject key identifier: C9:76:2F:9B:53:F0:28:21:72:40:4F:90:50:12:94:D4:D9:0A:11:D7
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 018CC348A6EE6AC4750067F96389C646A165
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/yXYvm1PwKCFyQE-QUBKU1NkKEdc.roa
Signing time: Mon 01 Jan 2024 04:29:27 +0000
ROA not before: Mon 01 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13102
IP address blocks: 194.27.150.0/24 maxlen: 24
194.27.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a6:ee:6a:c4:75:00:67:f9:63:89:c6:46:a1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9762f9b53f0282172404f90501294d4d90a11d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:a8:87:43:0d:59:90:d0:16:d0:f8:93:a2:
13:fa:2c:ca:f2:87:d6:d3:c4:ff:3d:a7:df:56:c4:
5a:9a:3f:be:83:03:dc:58:33:3a:d3:4b:5e:de:b5:
ea:cb:87:bb:ec:76:8c:b8:7f:a9:ba:28:3d:84:60:
63:7c:66:ed:a3:36:6b:f4:d8:8e:42:e2:07:b7:6b:
e6:a5:6e:dc:f5:21:56:86:03:2a:8b:af:f9:58:4e:
e6:2e:e2:98:e7:e3:fd:ed:19:84:77:79:d7:74:a5:
9b:4e:af:7b:c5:3b:04:b5:9e:4b:2a:44:f5:b1:c6:
63:79:60:a8:17:8f:5c:38:18:d7:83:05:b3:d8:de:
9b:19:87:3c:d4:d3:e5:04:ff:4c:ec:2e:b8:53:25:
1b:e5:aa:54:01:6e:96:99:e5:22:13:e8:e8:06:e8:
aa:26:ad:88:82:3a:e9:c0:eb:ef:90:37:68:db:e6:
f0:39:1b:d4:75:2b:43:e8:e0:89:de:1d:9c:6d:d2:
cc:c4:8e:7e:9e:dc:61:c1:f8:2a:92:73:1e:0e:4d:
9c:e1:12:42:57:70:37:19:72:b2:d7:21:3c:07:fa:
a1:3e:ef:4c:e8:a6:41:41:5f:4f:2e:77:ec:e2:b0:
ce:cb:65:48:69:9a:60:d2:82:fa:75:78:98:d2:9b:
f4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:76:2F:9B:53:F0:28:21:72:40:4F:90:50:12:94:D4:D9:0A:11:D7
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/yXYvm1PwKCFyQE-QUBKU1NkKEdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.27.149.0-194.27.150.255
Signature Algorithm: sha256WithRSAEncryption
09:d8:e4:c7:4a:0a:e9:9a:63:5a:85:7a:c1:4e:11:5d:19:84:
93:42:11:8a:ac:f3:d4:89:d9:77:25:0a:e2:af:c6:db:34:a2:
f9:00:89:69:55:30:83:48:46:0e:21:d2:33:7a:e1:da:84:04:
f0:f0:5e:f9:79:08:f0:be:4f:19:99:12:ea:36:70:56:80:6e:
78:58:b6:3d:aa:e7:93:5a:32:3b:c9:73:e1:9e:ad:d1:84:4e:
e7:ab:2b:3a:08:fb:a4:a4:d7:fb:e2:22:69:0c:c4:e5:f5:fb:
cb:4e:3c:81:b3:8b:bb:b9:a8:12:b7:a4:61:16:63:60:ba:5c:
2f:93:17:b8:28:3e:49:df:c6:54:53:7b:4b:b3:b1:7e:b8:a9:
b9:57:f9:c7:28:cf:cb:94:bc:1f:4b:6f:db:85:79:29:b9:0a:
82:b9:e7:06:5d:f5:7c:71:9b:a9:b4:de:22:cb:cd:c6:4b:ad:
a9:a8:36:b6:2b:af:47:9a:ae:f3:3d:8e:8c:ae:3f:73:37:79:
ee:d8:c9:2f:b5:34:f7:89:18:9e:78:f8:91:87:1f:98:24:7b:
7a:a5:18:2d:49:ff:a8:22:89:31:71:11:07:df:c3:57:87:5f:
01:56:03:b9:cc:84:09:cc:c0:24:11:dd:bb:6f:04:0b:b9:f5:
c3:e3:9c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:12 2025 by rpki-client