Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/yiWY1OC9bGFZgpUJeFaVkSQ87BI.roa
File: yiWY1OC9bGFZgpUJeFaVkSQ87BI.roa (raw, json)
Hash identifier: RPm7HJX/Dq7E8uOuhK9AzOs3wETFUVKCKkQtnp2wzvI=
Subject key identifier: CA:25:98:D4:E0:BD:6C:61:59:82:95:09:78:56:95:91:24:3C:EC:12
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01934F33B9257CB9E5BF14409A5CC251E899
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/yiWY1OC9bGFZgpUJeFaVkSQ87BI.roa
Signing time: Thu 21 Nov 2024 14:50:09 +0000
ROA not before: Thu 21 Nov 2024 14:50:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 194.143.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4f:33:b9:25:7c:b9:e5:bf:14:40:9a:5c:c2:51:e8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Nov 21 14:50:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca2598d4e0bd6c615982950978569591243cec12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:c5:7f:92:41:5c:22:60:a4:8d:ad:bb:51:
99:25:fa:c4:a4:1d:4b:19:02:b8:6c:2a:59:3a:b3:
ff:d5:89:3d:aa:6f:e8:b7:80:ee:71:df:23:ba:4f:
17:00:cf:36:ce:05:7a:a7:48:63:fa:8a:21:06:fb:
c0:a6:81:7d:e9:e8:63:34:fb:0e:6c:80:49:a2:9f:
af:8c:ec:b3:ee:b3:bb:2a:e3:16:2b:55:65:06:e2:
b0:ea:64:ae:0f:4f:18:17:38:56:aa:fa:24:e6:9b:
a8:37:34:78:7c:39:39:19:df:26:41:72:37:4e:0f:
4e:e5:b8:9f:f9:2d:9e:ef:44:f2:fe:93:55:55:5b:
3c:93:74:d5:d5:bd:fb:b3:77:5a:5f:8a:27:41:bb:
42:de:e5:7d:ce:6c:9e:99:89:1e:d0:ad:a4:76:c9:
1b:53:76:de:27:5f:3a:8a:52:26:21:a9:20:fc:b7:
3e:00:96:f6:69:ff:64:03:c0:1b:6d:7d:a4:9d:21:
3b:a9:ee:82:a8:a8:d3:ba:0f:53:6f:97:49:a6:64:
27:f5:b0:ce:98:59:1e:85:1e:c0:36:2c:57:55:9b:
f1:84:7b:34:81:36:a7:16:2c:fb:81:98:45:b9:bc:
0a:14:82:92:46:c1:d2:83:dc:2f:f7:73:fe:c5:76:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:98:D4:E0:BD:6C:61:59:82:95:09:78:56:95:91:24:3C:EC:12
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/yiWY1OC9bGFZgpUJeFaVkSQ87BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.217.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:68:f7:e5:9a:43:c0:62:14:e3:fb:5e:5a:9f:cb:ad:66:35:
56:a2:b1:9d:2d:18:15:24:b8:30:0d:d8:b0:3d:4c:3b:c6:cc:
1b:44:f1:9b:e8:68:80:d6:22:5e:d8:92:a2:4c:46:f1:34:75:
46:e8:d5:c0:d1:81:52:04:b9:ff:d7:29:94:e7:a1:06:65:fa:
ed:6a:fb:14:84:35:6f:56:8e:bc:87:f3:a0:6a:f1:65:c4:46:
66:6f:38:c4:f9:00:c6:df:76:8c:c5:75:5f:0c:3d:b5:14:39:
e6:1d:b2:86:e1:d0:72:da:c0:e3:35:88:c1:12:24:76:ea:33:
ae:f0:14:1c:39:c3:2b:be:e8:36:5b:19:50:24:a2:35:68:01:
6d:c0:45:33:fa:fb:3b:44:70:4e:44:9a:33:95:ed:e3:4d:4f:
43:0b:23:55:2f:36:d9:35:9f:cc:6c:93:c5:d6:ae:e5:d0:0f:
15:f8:51:35:8b:2c:0a:65:47:32:02:19:c2:85:cf:4a:9e:05:
1b:fb:35:af:ab:06:8a:58:ba:d1:04:40:8d:89:02:6e:62:6a:
94:76:17:41:c6:3d:ca:cd:43:c1:b9:50:78:bd:4a:09:a3:2a:
bb:b2:69:85:7c:01:a7:8c:7e:5f:e8:b6:bd:e6:04:67:6b:1b:
22:f7:1c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:16:37 2025 by rpki-client