Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/yxtJApYm-RiRTr3HHaLhuVAfUO4.roa
File: yxtJApYm-RiRTr3HHaLhuVAfUO4.roa (raw, json)
Hash identifier: 7ImksTx1HHgb5vYAzSADBeGVPNSg2/yPH8fywyGgCr0=
Subject key identifier: CB:1B:49:02:96:26:F9:18:91:4E:BD:C7:1D:A2:E1:B9:50:1F:50:EE
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 018CC2DAF9D95E3D6728F09D8B884E0C2928
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/yxtJApYm-RiRTr3HHaLhuVAfUO4.roa
Signing time: Mon 01 Jan 2024 02:29:39 +0000
ROA not before: Mon 01 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203201
IP address blocks: 45.144.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f9:d9:5e:3d:67:28:f0:9d:8b:88:4e:0c:29:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Jan 1 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb1b49029626f918914ebdc71da2e1b9501f50ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:51:eb:90:de:80:30:a4:72:1a:58:82:59:0e:
f5:cf:ed:2f:21:64:9b:57:5c:e9:6e:65:19:d6:92:
c7:d2:1c:3b:ef:06:0d:8d:5f:2b:c9:37:1a:16:dc:
81:a7:d1:04:15:80:9b:20:26:69:81:0c:c4:66:a6:
c7:cd:d7:37:8e:6f:04:2b:d0:f1:43:43:96:64:fd:
d1:0e:f7:c4:cc:e3:ec:51:7a:5e:59:11:47:ad:38:
4b:6b:a3:21:14:7b:a2:d9:55:43:9f:68:e3:e3:0b:
e2:84:4f:a9:62:b3:92:7e:08:4a:c9:ad:0c:17:a3:
d5:57:40:c5:ac:da:71:48:c8:4e:9c:42:9a:19:2b:
5f:c1:7d:00:74:60:25:77:2c:4a:6d:0a:71:30:23:
c0:ae:9a:e7:00:dc:67:37:63:8c:ee:b5:c4:7f:24:
cc:bc:02:1d:18:49:86:cf:bb:19:bb:dc:8e:e7:d2:
cf:4a:82:b7:ec:09:c9:06:6e:f3:f7:8e:78:26:e8:
16:50:02:ff:31:7b:34:4b:08:a3:76:a2:e0:e6:02:
d1:02:56:b2:0f:2d:dc:8f:6e:83:a6:7d:b5:3d:4f:
01:d8:9e:0b:d6:a7:15:e8:73:ef:e4:f6:cd:a6:fe:
7d:2d:9c:63:6a:11:70:9e:1c:b5:0b:fc:a1:cd:19:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1B:49:02:96:26:F9:18:91:4E:BD:C7:1D:A2:E1:B9:50:1F:50:EE
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/yxtJApYm-RiRTr3HHaLhuVAfUO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.60.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f9:aa:f6:06:b7:aa:fc:43:5d:4c:90:df:07:02:a2:ed:ad:
cc:2f:33:98:d7:96:11:7d:aa:a0:55:94:29:c0:c7:4f:7e:b9:
36:06:d9:82:78:3f:4d:f9:1e:58:31:d3:45:c3:1e:52:80:c5:
89:ca:ec:22:1f:a5:f4:e9:90:ca:85:14:b1:9f:9c:6e:e7:c2:
59:59:b5:f1:be:6f:9d:a9:53:2d:d1:e1:17:35:54:e3:04:7a:
70:e8:57:a6:f7:dd:50:a7:e8:b5:96:71:7d:d9:9a:53:a6:b0:
69:a1:03:d6:11:2a:b9:38:2a:fc:0d:4f:bc:f4:31:8e:cc:15:
15:ba:7a:c6:52:e1:76:f5:bf:fd:cf:74:51:40:d2:fd:a2:e6:
f1:42:d6:a1:a9:ca:98:77:ab:34:84:c6:7e:22:18:42:92:be:
89:a1:05:8c:d0:a7:47:1f:55:64:fb:21:4a:ee:9b:dd:c2:a7:
9a:2f:f1:26:b9:95:06:1b:31:84:1f:37:a0:1f:d9:1a:3e:f8:
f9:c1:ff:6d:a5:b0:41:12:7a:00:fa:b2:05:f5:e7:2b:bf:64:
65:6a:4b:40:1f:23:fe:41:8c:24:9f:fd:8b:71:95:82:24:de:
b3:6c:03:63:0a:93:d5:31:8f:93:66:b4:74:b8:9e:1e:b8:6a:
55:13:0d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:39 2025 by rpki-client