Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/yfiGZ9xIQkYEZ5ZW7SKBAnlrkGs.roa
File: yfiGZ9xIQkYEZ5ZW7SKBAnlrkGs.roa (raw, json)
Hash identifier: Ep+yAFysQImJDdUHmGvepwLiHl7pwul4TCw/SRHWTCw=
Subject key identifier: C9:F8:86:67:DC:48:42:46:04:67:96:56:ED:22:81:02:79:6B:90:6B
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 0193DE868CEFD47C7DEF1AC6B922A0ED1D16
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/yfiGZ9xIQkYEZ5ZW7SKBAnlrkGs.roa
Signing time: Thu 19 Dec 2024 10:46:20 +0000
ROA not before: Thu 19 Dec 2024 10:46:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29584
IP address blocks: 82.194.0.0/24 maxlen: 24
82.194.1.0/24 maxlen: 24
82.194.2.0/24 maxlen: 24
82.194.3.0/24 maxlen: 24
82.194.4.0/23 maxlen: 23
82.194.6.0/24 maxlen: 24
82.194.7.0/24 maxlen: 24
82.194.8.0/24 maxlen: 24
82.194.9.0/24 maxlen: 24
82.194.10.0/24 maxlen: 24
82.194.11.0/24 maxlen: 24
82.194.12.0/24 maxlen: 24
82.194.13.0/24 maxlen: 24
82.194.14.0/24 maxlen: 24
82.194.15.0/24 maxlen: 24
82.194.16.0/24 maxlen: 24
82.194.17.0/24 maxlen: 24
82.194.18.0/24 maxlen: 24
82.194.19.0/24 maxlen: 24
82.194.20.0/24 maxlen: 24
82.194.21.0/24 maxlen: 24
82.194.22.0/24 maxlen: 24
82.194.23.0/24 maxlen: 24
82.194.24.0/24 maxlen: 24
82.194.25.0/24 maxlen: 24
82.194.26.0/24 maxlen: 24
82.194.27.0/24 maxlen: 24
82.194.28.0/24 maxlen: 24
82.194.29.0/24 maxlen: 24
82.194.30.0/24 maxlen: 24
82.194.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:86:8c:ef:d4:7c:7d:ef:1a:c6:b9:22:a0:ed:1d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Dec 19 10:46:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9f88667dc48424604679656ed228102796b906b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8b:9e:d5:64:66:f5:68:66:c3:22:4a:46:fc:
f5:cf:71:f5:0e:1d:52:0a:72:f2:c7:58:2e:3c:10:
25:84:3b:62:f7:62:3d:66:e3:18:8a:27:94:dc:c0:
a1:86:81:c9:49:3b:de:a7:4f:f6:59:11:62:15:c0:
59:ce:bc:20:04:cc:ae:74:92:1d:db:1d:88:d0:ac:
01:dc:7e:f6:cf:fc:1d:18:fc:e5:72:06:87:7f:e9:
1f:40:45:d2:02:5a:86:90:d6:6a:92:0d:bf:6c:df:
58:d6:0b:14:3b:21:f0:27:7f:10:c7:04:9d:4a:d5:
e6:b5:e1:66:b4:43:c1:0c:3a:54:f8:6b:32:b9:5b:
9e:4c:62:4b:d1:df:71:5c:02:e6:cc:06:a1:73:f3:
98:f9:d4:e9:1a:97:26:13:1c:0b:a2:d1:c6:5c:d5:
cb:80:76:d8:ca:ce:67:6b:37:7d:fa:36:1a:3f:9d:
fb:7e:a6:fa:37:2e:3e:eb:ae:bb:6d:b8:21:bd:94:
e6:5d:06:54:0a:99:6a:9c:86:e7:72:f8:06:8d:b9:
73:95:92:cc:55:c6:e6:c3:e3:04:f3:a2:6d:e0:e8:
3c:db:b9:20:8e:27:ea:21:74:69:ca:33:62:0f:d6:
e2:59:eb:17:f7:48:72:17:b3:27:2c:e2:4a:5f:86:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F8:86:67:DC:48:42:46:04:67:96:56:ED:22:81:02:79:6B:90:6B
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/yfiGZ9xIQkYEZ5ZW7SKBAnlrkGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.194.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:75:cd:fc:59:99:58:af:42:6c:bd:f0:80:7d:72:95:4a:cd:
49:20:28:64:ae:1a:d1:2b:38:d0:8d:49:9a:6f:8e:ab:cf:72:
91:ac:a4:2b:6e:ed:8f:00:cd:0c:f4:16:0f:5e:25:b7:e3:10:
10:b3:f7:6a:17:de:74:3d:f1:5c:bd:40:00:8c:f0:8b:e5:4f:
ab:e0:97:c4:ab:6f:ba:7d:9a:42:b4:e1:eb:9f:4a:5c:94:5d:
cd:c6:22:49:4d:74:20:67:7a:15:57:bf:72:06:0c:ec:ba:5c:
0d:3c:6e:cf:01:d0:5b:74:06:d8:02:14:db:45:3a:88:ab:c1:
ce:85:42:1f:25:a0:ab:54:c2:40:66:5a:0e:46:f4:0b:fa:c1:
ef:71:24:a7:40:e9:c6:16:be:18:48:54:5c:a2:6a:74:70:5b:
0b:d7:ac:10:ff:71:1e:07:ff:da:77:ca:e6:9f:ba:0b:d5:bf:
fa:57:30:93:85:50:15:9f:51:2f:05:a1:d6:40:aa:d0:f0:01:
5e:de:c1:ad:61:96:f4:69:80:39:ea:6d:38:a8:5d:01:20:98:
b0:75:27:46:d4:37:b6:52:e3:86:64:3a:09:59:53:66:e3:e8:
9c:60:fd:73:a9:8a:ec:eb:1c:49:a6:51:8e:18:3e:28:2e:2d:
9d:67:7a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:18 2025 by rpki-client