Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/yK8J9k0487LGjHorU0YrsGuE9a8.roa
File: yK8J9k0487LGjHorU0YrsGuE9a8.roa (raw, json)
Hash identifier: ylSrku5MowgxoYAiTOsM8QEFqK26REKiYJzdaFMBG1g=
Subject key identifier: C8:AF:09:F6:4D:38:F3:B2:C6:8C:7A:2B:53:46:2B:B0:6B:84:F5:AF
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0194DAF4D8FBED53277FA68329733F9092FC
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/yK8J9k0487LGjHorU0YrsGuE9a8.roa
Signing time: Thu 06 Feb 2025 11:11:06 +0000
ROA not before: Thu 06 Feb 2025 11:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57014
IP address blocks: 80.93.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 10:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:f4:d8:fb:ed:53:27:7f:a6:83:29:73:3f:90:92:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Feb 6 11:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8af09f64d38f3b2c68c7a2b53462bb06b84f5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:63:04:9b:21:15:54:02:7c:9d:7c:fe:30:
f2:5e:d4:26:31:66:1e:93:7d:2b:d3:f4:6c:cb:28:
38:b3:b5:d9:22:7d:3e:b6:dd:5e:7f:aa:48:8a:7f:
94:dd:c3:07:39:d1:93:a6:d6:56:05:84:d4:ad:5b:
16:0e:9e:0b:83:fd:b2:4a:c9:c5:b9:0a:2b:e0:f3:
ab:2f:fb:d3:f3:b5:1d:12:63:b4:9d:05:35:4f:9d:
6e:a0:63:85:0a:2a:d8:3b:0d:a2:d6:e1:9a:03:9d:
06:68:dd:c7:49:01:fd:dc:c4:77:58:32:d4:95:2e:
3a:00:a8:92:d5:a1:56:48:55:dc:15:d2:cb:ad:52:
65:61:31:19:76:46:70:4f:4a:41:93:2e:e2:1e:d4:
85:5d:09:09:bd:6e:c2:e4:bb:4a:e7:32:26:68:f8:
65:49:c1:37:d7:58:bc:0a:86:04:33:9c:51:a8:52:
dd:d9:76:c4:79:f8:65:b3:58:96:3a:0c:f0:8e:5f:
fd:4a:77:97:0e:a6:f4:49:ed:a2:60:b0:97:80:1f:
9f:f3:88:d6:5b:ad:3d:aa:3c:94:37:6f:c8:cf:23:
68:06:b2:79:17:af:23:6c:1b:4b:b9:a1:8d:59:34:
b3:4f:35:8d:b7:0c:f8:98:c5:f3:a0:6a:13:0e:0a:
8e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AF:09:F6:4D:38:F3:B2:C6:8C:7A:2B:53:46:2B:B0:6B:84:F5:AF
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/yK8J9k0487LGjHorU0YrsGuE9a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.207.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ff:4a:f9:bc:a9:70:ab:65:36:2a:53:50:8c:d7:11:71:c3:
cc:30:49:58:e8:ae:36:70:c1:2a:e6:16:46:32:4d:2f:f9:b6:
71:72:a7:c1:d9:c0:9d:28:1c:c6:27:36:e9:92:61:c4:31:30:
24:5f:50:0f:3e:e0:c4:8e:0f:cb:d4:c1:8d:a2:ca:4a:ea:bb:
c3:51:b6:ef:51:0e:4b:74:98:c5:d4:32:b4:be:e4:a8:59:7c:
e6:d6:73:af:d7:bc:87:e1:c1:16:95:55:72:c6:a6:bc:3b:f8:
ec:79:92:47:ed:db:89:77:85:c3:c3:db:d7:18:fb:da:04:54:
be:9d:24:a5:91:97:98:34:fc:47:bc:35:43:df:30:16:fd:46:
ce:6e:c8:72:62:67:04:59:4d:bb:22:85:bc:56:85:34:13:ec:
30:35:01:e1:f4:4a:5d:e5:78:a2:17:a0:41:a0:3f:dd:fa:7b:
af:7a:a4:d3:98:ff:5d:c1:c6:65:1e:04:ce:a4:b2:cc:39:3d:
47:a3:6a:1c:1d:ae:05:cd:43:de:5d:4f:18:1d:57:11:13:c4:
73:96:18:41:73:10:2b:b0:68:08:e3:15:a9:ba:5b:e6:dd:29:
05:37:2b:77:4d:18:4e:f2:63:49:88:0f:13:0a:73:82:05:16:
02:3f:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:14:06 2025 by rpki-client