Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/Y4cLy9U7bM_A3mxc9IPov-mKSRk.roa
File: Y4cLy9U7bM_A3mxc9IPov-mKSRk.roa (raw, json)
Hash identifier: hDAdnx6QcHL1bBZapBQhQTtEtt8xyvbeg/r9fFhrp3M=
Subject key identifier: 63:87:0B:CB:D5:3B:6C:CF:C0:DE:6C:5C:F4:83:E8:BF:E9:8A:49:19
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 018F47CAB0B349828011E3CAFFFDE93BA4A3
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/Y4cLy9U7bM_A3mxc9IPov-mKSRk.roa
Signing time: Sun 05 May 2024 08:06:56 +0000
ROA not before: Sun 05 May 2024 08:06:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210016
IP address blocks: 188.72.10.0/24 maxlen: 24
188.72.11.0/24 maxlen: 24
188.72.13.0/24 maxlen: 24
188.72.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 13:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:47:ca:b0:b3:49:82:80:11:e3:ca:ff:fd:e9:3b:a4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: May 5 08:06:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63870bcbd53b6ccfc0de6c5cf483e8bfe98a4919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:de:87:0f:89:a2:4d:bb:7d:1b:bb:56:9b:
b7:b1:f4:41:17:5a:ed:53:c0:bb:8c:f8:29:a7:a8:
31:26:ff:67:b7:6f:99:31:cc:ac:58:66:09:74:b3:
ae:f7:19:f6:75:02:e4:45:0c:8b:ba:87:9b:02:b2:
24:4b:14:5f:65:d5:e2:2c:ae:5a:71:19:b8:0f:75:
40:46:85:cb:62:fa:e4:90:b0:e0:dd:56:e0:73:76:
f0:55:d0:a8:2c:c0:48:fc:27:82:b6:da:be:2c:6f:
17:a3:35:10:d5:a7:d8:30:45:71:d9:40:30:7b:cd:
80:3f:ea:fd:be:c6:b3:35:5f:e8:20:d8:b0:56:78:
68:df:12:16:a7:07:81:ae:22:93:5a:d3:c6:35:e0:
e1:31:6e:48:1e:26:e2:5c:b1:7a:d8:db:aa:ae:3e:
9e:1d:0f:65:ea:bb:98:10:0e:b1:bf:cc:7e:0d:ee:
90:1a:eb:f7:a2:e1:cb:65:1c:b1:b4:4d:12:14:9b:
7d:00:b4:fa:28:1e:f7:ce:56:90:9d:c7:5a:87:8a:
d4:21:3b:3c:ac:8f:a9:43:4a:1c:b8:c1:28:53:1c:
85:1d:f5:7a:9b:d5:3b:db:88:58:a9:0d:ac:a4:a1:
00:6f:9f:94:15:60:06:cf:06:58:43:4a:ce:ab:8c:
04:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:0B:CB:D5:3B:6C:CF:C0:DE:6C:5C:F4:83:E8:BF:E9:8A:49:19
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/Y4cLy9U7bM_A3mxc9IPov-mKSRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.10.0/23
188.72.13.0-188.72.14.255
Signature Algorithm: sha256WithRSAEncryption
9a:24:4c:c7:c7:cd:45:1d:65:a9:b7:3d:40:c4:0b:e6:b1:93:
29:aa:7b:e2:8c:52:df:e9:29:ed:2a:ec:32:6e:8b:36:1d:07:
fa:34:2a:77:bb:ce:52:3c:19:b8:1d:06:96:e3:a0:5e:27:cd:
13:85:3d:ba:9a:e4:ba:dc:cb:54:7c:76:d5:aa:ff:1a:75:77:
6a:8f:78:e4:87:7b:bb:50:00:31:7b:24:39:d5:12:f5:84:c5:
86:65:a8:ef:9a:d4:b9:51:38:d9:d9:ea:00:07:e6:55:d2:bb:
8f:a0:a3:d9:c5:8f:35:2e:a6:34:15:a0:e7:c6:29:41:0d:e3:
fc:db:0a:09:c1:86:46:45:e7:38:63:b2:39:3e:bf:52:d5:70:
04:4f:5c:d4:a1:ba:5d:85:e4:fb:d9:51:9d:62:f2:39:61:23:
c8:83:03:2c:53:6e:4c:8a:54:66:df:10:74:91:62:3b:82:2f:
f7:17:f2:1f:43:f7:ae:1e:02:05:8c:fe:e4:21:d9:28:df:92:
c4:88:ea:ad:ab:74:f2:18:7f:c2:97:f2:ed:bd:09:eb:74:3e:
06:fa:e2:01:73:bb:61:2b:fc:5b:93:e6:4b:6e:de:cf:de:c6:
4e:06:fa:5f:47:60:6c:20:06:bd:70:2a:98:1a:c2:d8:1e:bb:
28:6d:46:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:34 2025 by rpki-client