Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/YHW79U42UYSXRpEfSbcWICMyPNU.roa
File: YHW79U42UYSXRpEfSbcWICMyPNU.roa (raw, json)
Hash identifier: 9a6xi3jfhcWGENuZH6W4Acd2AtSuNV1zSX/YaPEuHXk=
Subject key identifier: 60:75:BB:F5:4E:36:51:84:97:46:91:1F:49:B7:16:20:23:32:3C:D5
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 018CC3489C5926C07C6795ABE2EF73BFCCCF
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/YHW79U42UYSXRpEfSbcWICMyPNU.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15576
IP address blocks: 193.17.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9c:59:26:c0:7c:67:95:ab:e2:ef:73:bf:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6075bbf54e3651849746911f49b7162023323cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:99:90:fa:5b:cd:9b:db:f8:bd:c6:75:d7:da:
85:1f:86:fc:28:d8:66:0e:50:03:e0:7e:b7:18:af:
36:14:b1:4d:43:04:d4:0f:e7:32:ae:c0:6c:5b:35:
aa:97:df:4a:a7:94:fb:13:79:8f:97:80:21:78:21:
66:8b:f2:f5:8c:aa:27:93:9a:1d:39:b1:90:f3:22:
1a:2c:f0:36:47:ef:e5:86:38:f5:b6:12:39:fb:cb:
b6:35:9c:de:d8:8c:06:a0:fa:6d:64:72:a3:d8:44:
b4:d0:8c:35:5a:e4:72:b1:30:d2:1d:8d:2c:62:b1:
ea:98:c2:59:27:28:8e:80:b2:09:44:ac:5d:ba:5f:
1f:7e:98:c2:7e:5b:75:94:e7:f6:f8:78:42:40:15:
1b:15:be:a4:28:d5:07:5a:e4:3b:03:eb:13:4f:ff:
58:14:27:c7:61:b0:e1:b8:3b:5a:3a:f3:d4:a7:ff:
f5:c2:24:38:b3:e2:9e:af:c5:a0:3e:18:de:5f:96:
da:40:97:94:ff:64:7b:58:4e:2b:4b:ee:75:df:4c:
ad:fb:d0:d8:21:7c:a9:29:9a:1d:3e:ef:47:99:0f:
a8:db:31:f7:23:80:96:78:f8:0c:ec:25:24:7f:c8:
6e:6a:f8:d9:38:29:d8:fa:de:52:e9:0b:d0:25:7a:
f2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:75:BB:F5:4E:36:51:84:97:46:91:1F:49:B7:16:20:23:32:3C:D5
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/YHW79U42UYSXRpEfSbcWICMyPNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.76.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c2:10:13:68:54:ed:54:0e:3b:46:e2:74:ab:30:34:4e:8a:
2e:50:e1:c0:99:9d:7d:3c:6c:6b:bd:0e:8c:94:48:8c:c6:14:
04:da:7d:92:6b:c0:ee:53:b9:33:7d:1e:eb:67:f4:46:3d:e8:
ce:39:9c:98:e7:2d:89:fc:7f:ad:a3:17:29:f1:7b:bc:7d:c0:
1f:93:25:2a:6b:59:0b:1f:c3:26:0c:f2:3b:43:27:9a:b8:60:
e0:3a:6f:20:19:0d:04:16:f4:92:d5:71:ae:c8:6e:76:0b:dc:
9f:b7:b8:31:02:b8:6d:8c:64:7e:21:52:d9:c0:a4:13:0e:20:
28:1d:c4:00:0a:03:72:de:69:45:c5:79:65:07:61:0b:85:4d:
57:3a:ae:85:6b:3f:65:e6:3b:bf:9c:7a:27:9a:c4:fb:43:b2:
35:63:82:79:c8:4c:9a:58:56:94:e5:97:55:2b:1f:8c:65:43:
ef:be:1f:2d:52:63:d1:7e:b8:8b:be:2e:c6:f3:92:9b:77:fa:
1a:bd:32:60:74:77:31:f6:e6:91:36:53:c9:3f:c3:a5:a6:76:
65:58:e8:ef:4c:14:20:5b:6e:fc:eb:16:38:90:c9:6d:9e:21:
03:d5:6e:f8:82:d7:ea:cd:df:6f:40:f2:54:74:ac:ba:0a:cf:
72:c5:1f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:57 2025 by rpki-client