Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/yujEs7MfpU9VPIVDrygbYXij5P4.roa
File: yujEs7MfpU9VPIVDrygbYXij5P4.roa (raw, json)
Hash identifier: beoijymh02bDgqpvrTmowzrqv8wNKhpRwlj5MMASPF8=
Subject key identifier: CA:E8:C4:B3:B3:1F:A5:4F:55:3C:85:43:AF:28:1B:61:78:A3:E4:FE
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 018E50A6145B690437111B1B060970FCC2A0
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/yujEs7MfpU9VPIVDrygbYXij5P4.roa
Signing time: Mon 18 Mar 2024 08:20:45 +0000
ROA not before: Mon 18 Mar 2024 08:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 185.113.66.0/23 maxlen: 24
185.194.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 11:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:a6:14:5b:69:04:37:11:1b:1b:06:09:70:fc:c2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Mar 18 08:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cae8c4b3b31fa54f553c8543af281b6178a3e4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:53:5f:10:7f:3c:2c:77:83:f6:c4:3d:b1:3d:
1d:be:19:cc:69:62:18:f3:6b:0a:fe:f8:05:82:63:
67:b8:e5:f6:de:54:3f:9c:82:e0:54:56:9a:b3:59:
a4:d2:85:1e:96:05:f6:b4:d3:f2:d3:9a:bc:3b:4b:
61:f8:7c:40:66:e2:84:26:91:06:a2:24:9e:5f:ce:
5e:e1:7f:9c:90:63:c7:0b:b4:27:d7:50:a0:9e:d7:
78:d3:b7:f6:e2:a4:74:17:fb:2f:83:04:ed:2b:43:
ff:11:ab:2b:60:e4:8e:cf:59:be:03:86:75:96:00:
00:ab:14:14:81:55:d1:ae:9a:77:ed:fb:3b:59:3f:
b5:9d:0d:7f:12:ec:16:13:fa:ee:73:01:98:e7:12:
f8:fd:1f:ca:35:de:a4:02:65:ec:28:87:e7:ee:6a:
f1:2f:ee:11:b4:b4:da:1e:c0:ef:91:84:78:31:2e:
c6:d0:12:31:3a:15:02:65:a9:38:2c:b5:61:62:8f:
76:a8:5f:af:98:f8:fb:ad:64:2c:b6:56:5b:90:14:
76:21:83:09:f6:48:ae:55:56:1c:18:b3:2a:d1:1f:
86:e8:e9:40:2a:8e:73:19:f1:13:8c:59:b8:46:fc:
07:6e:d6:59:3d:cf:3f:d1:f6:3b:35:07:a0:ce:62:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E8:C4:B3:B3:1F:A5:4F:55:3C:85:43:AF:28:1B:61:78:A3:E4:FE
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/yujEs7MfpU9VPIVDrygbYXij5P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.66.0/23
185.194.204.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:63:8b:db:db:89:ba:6d:00:6c:43:da:7e:ea:22:c7:60:72:
4e:18:61:5d:6e:8a:44:22:56:aa:90:cd:35:31:d7:17:dc:b3:
d5:18:aa:d7:cc:0b:1d:bb:99:d1:2f:ed:3e:2a:3e:26:bf:0f:
ef:74:91:ff:9a:bf:e0:4a:c4:41:29:35:3c:04:d1:32:80:33:
f7:e1:b5:b1:ef:29:a7:ce:6d:4b:97:61:12:88:fc:3b:eb:a3:
8d:63:9f:5f:d2:87:4b:2d:71:2d:fb:fb:d6:4d:fa:b3:88:de:
ea:92:a1:6f:7c:91:40:e4:3a:6a:6f:0b:07:a7:ab:f8:7f:e2:
c8:d5:88:77:9a:18:22:37:bd:3a:22:e3:3d:31:0c:e8:6c:2c:
6d:56:13:92:ac:e5:a0:97:4c:e0:cb:fb:c9:4c:6a:05:5d:3c:
fe:57:c0:ab:92:d8:c6:57:4d:9f:77:1e:0b:2e:6d:dd:09:37:
f0:84:a9:79:05:b5:e6:35:49:a4:f0:23:ee:f9:ca:f0:15:d4:
e2:89:cf:70:ef:29:fb:30:7d:86:9d:6a:5e:da:71:9f:d3:69:
67:07:d4:e8:67:32:ee:13:7b:28:7c:3a:db:98:81:2e:ad:59:
f3:91:88:96:69:f3:c5:d3:cf:56:75:1f:f4:7f:f9:90:fa:6d:
4a:ab:e1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:39 2025 by rpki-client