Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YmITH_lk-TB-ycYzK9Tzp4DzBAg.roa
File: YmITH_lk-TB-ycYzK9Tzp4DzBAg.roa (raw, json)
Hash identifier: yDIpKDsxQME4Zd+VSapkjPQW02QWW17K2IgLcvAbHLo=
Subject key identifier: 62:62:13:1F:F9:64:F9:30:7E:C9:C6:33:2B:D4:F3:A7:80:F3:04:08
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194FB0AE59AB6BC765250DDBCCD4C132A81
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YmITH_lk-TB-ycYzK9Tzp4DzBAg.roa
Signing time: Wed 12 Feb 2025 16:43:02 +0000
ROA not before: Wed 12 Feb 2025 16:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 192.71.155.0/24 maxlen: 24
192.176.176.0/21 maxlen: 24
193.180.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 16:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fb:0a:e5:9a:b6:bc:76:52:50:dd:bc:cd:4c:13:2a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 12 16:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6262131ff964f9307ec9c6332bd4f3a780f30408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:35:01:96:fe:3f:37:e0:5d:82:13:ea:35:
e9:89:5b:bb:fb:5a:3c:1b:e1:26:e1:5b:49:91:31:
44:d7:1a:5d:1f:0c:6f:a2:95:82:c6:61:4f:83:49:
8e:ff:a9:98:eb:b6:50:40:19:b2:a1:6a:f5:16:25:
24:23:05:bd:f5:4b:29:45:22:29:07:ab:79:1e:f5:
84:12:65:c0:37:dc:e1:fd:8f:39:2d:18:c4:87:89:
33:ed:15:b5:fb:b5:9e:73:0d:70:18:ae:3c:9a:1c:
28:3b:7b:76:8c:ef:1d:ef:ef:8e:f6:1f:08:1a:39:
20:bd:f8:8d:d0:a2:32:67:56:63:78:0c:63:c4:39:
5f:c0:1b:0a:68:65:34:ac:fd:97:60:11:71:c0:b2:
b8:e9:00:bf:30:cc:29:00:87:f0:b1:7a:9b:31:42:
a9:4e:b1:70:9e:b5:bd:87:26:be:47:9e:e4:50:65:
f1:b2:41:bd:f3:5c:e2:60:fd:78:99:e2:d8:dc:f0:
35:8e:e0:32:5d:8e:75:26:0b:61:0f:a6:0a:13:f1:
76:72:ad:0c:9a:3a:5d:72:36:c8:e3:a8:1c:22:f4:
9a:23:c6:d9:05:0b:d2:44:18:f0:05:16:64:89:5c:
11:54:1b:53:e1:d5:90:ac:73:52:b2:df:4e:16:46:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:62:13:1F:F9:64:F9:30:7E:C9:C6:33:2B:D4:F3:A7:80:F3:04:08
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YmITH_lk-TB-ycYzK9Tzp4DzBAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.155.0/24
192.176.176.0/21
193.180.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:92:d2:cf:c3:b6:1e:e6:99:6a:69:12:bb:6c:42:39:a0:7d:
2b:47:d8:84:e9:19:ab:85:66:2f:29:7d:2b:7a:df:2e:ab:ac:
71:5e:ef:89:44:0e:ee:9e:de:27:75:ff:2d:bc:34:09:ca:44:
96:76:63:08:1c:89:2b:a5:c0:e9:52:a7:97:2b:36:1f:17:ea:
f0:67:64:b9:be:31:84:66:f3:96:8d:11:4c:e2:1f:28:35:ee:
29:9e:50:24:12:e9:ef:ff:d6:62:25:37:79:07:d3:55:30:c5:
66:1a:f9:00:5d:3a:86:fe:a0:05:26:43:4f:f3:e0:02:cc:7e:
7f:1d:74:30:5b:b9:64:2b:05:33:42:b1:08:91:ec:8e:a6:e6:
2e:12:e5:25:ae:45:72:8b:40:13:eb:70:98:3e:f1:c4:a8:cc:
51:83:3e:d9:8c:15:b0:1f:52:05:19:47:93:88:1b:41:ec:c4:
4b:e4:33:c2:06:49:35:d0:fc:aa:b2:30:15:b6:29:f1:ef:ee:
d8:8c:51:2f:6b:3d:63:ee:81:1c:e6:90:ac:d8:eb:ca:58:cd:
a5:a4:b2:c8:81:2f:bc:e8:a1:b2:46:5f:70:e8:ba:92:55:c8:
13:2c:e3:3a:c0:9b:f0:5c:a7:2a:9d:4d:94:65:03:47:5a:94:
c6:3a:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:05:44 2025 by rpki-client