Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/Y5pmOAlJE2IwMsQvd5AuQhVowsA.roa
File: Y5pmOAlJE2IwMsQvd5AuQhVowsA.roa (raw, json)
Hash identifier: AvyDhNJcT+79SLhZjJSlm19+ki7LMJWItTPLEqn6Gt4=
Subject key identifier: 63:9A:66:38:09:49:13:62:30:32:C4:2F:77:90:2E:42:15:68:C2:C0
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 018CC348F2D3C29B7BA31D82EA6947ABC0A4
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/Y5pmOAlJE2IwMsQvd5AuQhVowsA.roa
Signing time: Mon 01 Jan 2024 04:29:46 +0000
ROA not before: Mon 01 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203939
IP address blocks: 185.125.184.0/22 maxlen: 22
2a06:bc40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f2:d3:c2:9b:7b:a3:1d:82:ea:69:47:ab:c0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Jan 1 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=639a6638094913623032c42f77902e421568c2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:52:d0:5c:57:f8:c3:58:59:3c:90:24:3f:
24:73:74:75:8c:19:34:1f:19:44:d0:4d:40:25:0b:
75:65:98:da:25:c7:1c:f2:6e:92:f1:d8:1b:b5:c9:
8a:45:4e:19:c9:75:23:45:d3:23:fb:e6:6f:3d:07:
6b:c1:bb:e7:81:a9:4e:39:5c:bd:1c:e5:e2:73:cf:
9a:93:2b:7d:45:bd:bc:b2:2e:5e:9c:55:be:fa:92:
64:c4:bf:e2:71:99:17:a2:68:f2:43:c8:7d:0e:e4:
a0:17:32:15:34:4b:00:53:de:4a:5c:e7:ff:bf:18:
c9:61:d8:c2:b9:f0:c7:88:47:c5:92:35:75:fe:e9:
7f:53:3e:e5:6c:fa:f6:eb:82:9b:95:8d:46:27:9b:
4f:fa:d8:f4:5e:4f:e8:ba:41:2a:f9:55:5f:2a:ce:
d5:b2:bd:45:4c:b3:55:0f:dd:28:61:f4:f9:06:75:
fe:4d:ae:19:0a:61:e2:c8:eb:a9:8b:56:45:e9:ec:
03:0e:3b:84:be:39:b5:fc:92:76:d8:89:48:0b:00:
6e:42:95:a1:c2:f8:bc:9b:5a:3d:64:ff:62:43:16:
a5:71:36:79:15:19:aa:d0:22:e0:54:68:b5:27:9d:
88:d9:95:30:89:24:de:77:00:2c:ad:b4:f2:c4:e9:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9A:66:38:09:49:13:62:30:32:C4:2F:77:90:2E:42:15:68:C2:C0
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/Y5pmOAlJE2IwMsQvd5AuQhVowsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.184.0/22
IPv6:
2a06:bc40::/29
Signature Algorithm: sha256WithRSAEncryption
61:30:12:b0:83:d2:80:72:f5:0b:a3:3e:7b:12:0b:26:51:bd:
50:24:86:fd:be:5a:67:f0:f1:2b:2e:f6:3e:db:b4:ea:8e:11:
55:ec:b9:ec:f1:c7:79:23:8b:0a:b3:b8:6a:a4:57:f8:a7:93:
af:b9:03:be:6d:b6:e0:4c:dd:dd:cf:9d:c1:34:6a:28:c9:90:
4b:50:d5:5c:1d:d1:7d:4a:c7:2c:1d:82:a1:b0:f9:54:47:ff:
05:dd:c2:02:0e:a0:38:bf:2c:a1:97:1f:b5:d1:c6:15:d9:b5:
62:4d:8c:fb:83:3e:7b:be:ea:e4:4c:5b:9a:1b:12:ce:e2:05:
3d:ca:36:c3:c9:51:05:29:9f:c0:dc:ce:9e:df:13:88:a6:48:
ea:e4:aa:8d:da:87:b6:de:0d:94:ff:be:15:ae:1f:cc:f7:de:
74:d3:c2:e5:55:60:6d:ef:11:e4:52:8e:a5:e2:ef:ff:ff:26:
d5:d5:82:a9:03:08:e4:6c:12:39:40:76:97:68:cd:44:ce:c7:
5f:37:83:e1:8f:68:11:5b:04:30:8a:7d:42:27:8d:5f:81:0d:
09:ce:53:99:22:6a:f1:1d:08:c7:5f:d3:79:51:63:8e:4a:cb:
03:0c:f3:3e:c2:23:a0:17:56:cc:d1:53:7f:ff:56:de:b1:67:
3a:fc:26:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:02 2025 by rpki-client