Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/YZ7-UzdA9eT496y6HuSF4g8FhUk.roa
File: YZ7-UzdA9eT496y6HuSF4g8FhUk.roa (raw, json)
Hash identifier: nWPNaytoT9ctBjN8DiwaP5TkSZfImM9v+t2R5rueKdg=
Subject key identifier: 61:9E:FE:53:37:40:F5:E4:F8:F7:AC:BA:1E:E4:85:E2:0F:05:85:49
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 019422FB9A9762E48AF1179B7B1AF963F144
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/YZ7-UzdA9eT496y6HuSF4g8FhUk.roa
Signing time: Wed 01 Jan 2025 17:48:21 +0000
ROA not before: Wed 01 Jan 2025 17:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39600
IP address blocks: 79.110.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Mar 2025 23:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9a:97:62:e4:8a:f1:17:9b:7b:1a:f9:63:f1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Jan 1 17:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=619efe533740f5e4f8f7acba1ee485e20f058549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:d1:93:65:60:65:b4:af:f1:ee:16:64:9c:
a9:57:67:d4:c5:0a:aa:e7:96:cc:81:47:6a:67:35:
1b:31:23:a1:f7:78:e1:72:be:77:c0:22:2c:d4:42:
3b:f4:be:33:eb:ee:14:dd:63:87:6f:84:06:40:fd:
23:97:b4:78:1f:08:b2:20:dc:ed:0b:7f:2c:54:68:
33:2f:1c:a8:07:17:dc:61:ae:10:f2:3f:74:a1:f7:
e0:8e:ea:f1:0c:26:2f:34:db:5d:8f:2a:42:c1:c1:
cc:6f:fc:6a:4f:4e:da:4d:fc:b9:d8:33:a3:f1:6d:
30:d6:94:9f:e1:d5:c9:64:30:f7:37:1b:22:d3:da:
8d:92:5a:49:e5:cc:eb:72:e9:16:ae:a3:8e:f5:31:
f8:4b:28:59:dd:4a:cb:ca:a9:45:15:8e:0e:7b:6a:
72:0d:d2:9f:ce:2d:03:05:ea:e9:2a:7d:34:a9:23:
33:2e:bb:4b:bf:4a:fc:36:be:17:14:c1:d9:8a:b8:
c4:5a:82:65:c0:c2:c1:a5:f4:d5:51:05:43:dd:8b:
5c:db:db:ed:f9:2d:e8:47:87:5a:d5:05:d8:6e:38:
97:70:bc:d8:51:ee:24:9d:fe:8c:43:aa:16:57:73:
43:bb:34:6d:3c:67:07:1f:5c:f5:92:ef:46:79:65:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9E:FE:53:37:40:F5:E4:F8:F7:AC:BA:1E:E4:85:E2:0F:05:85:49
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/YZ7-UzdA9eT496y6HuSF4g8FhUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.167.0/24
Signature Algorithm: sha256WithRSAEncryption
54:aa:fe:01:93:31:62:d0:b9:62:11:47:e7:37:95:fc:f4:14:
3d:95:ca:d0:43:d3:da:83:bc:86:cf:3c:bd:88:c1:bc:d3:37:
2b:fa:30:3f:9a:e2:a5:a7:1b:41:14:6d:f4:5d:38:68:5b:bb:
89:9b:dc:ec:b6:e5:ab:e7:15:9d:fe:30:c0:43:f4:5c:8d:6d:
76:16:7f:49:2a:75:f0:00:4a:94:54:c6:1b:6c:65:73:97:f6:
01:94:72:0a:17:db:29:0d:b4:c7:09:07:1e:73:63:37:b4:58:
ed:24:73:cb:2a:e7:66:a8:74:c7:8a:c4:d4:cd:c2:7d:d3:dc:
3c:5d:10:b6:38:99:c3:5e:9b:41:bf:65:41:75:da:1d:3a:db:
1b:00:9d:9c:75:3d:f4:1f:d3:cb:ee:ec:8a:4e:38:fd:fe:d4:
50:91:d3:e5:89:5a:df:5d:ce:f9:1e:8a:60:fe:7d:44:6a:71:
44:24:ae:fa:32:a8:d4:11:b6:dc:5a:6a:7f:78:32:94:2c:89:
bc:50:0c:12:28:23:dc:8a:40:4a:79:be:e3:3f:b4:95:06:a1:
72:6d:56:88:0c:d9:f3:6b:a4:14:43:d3:12:d2:75:7e:b7:a1:
0e:2a:d6:2c:b1:91:12:95:4d:9c:b2:57:32:00:cd:43:6a:aa:
7b:a7:db:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+5qXYuSK8Rebexr5Y/FEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm
YmE1MmUwHhcNMjUwMTAxMTc0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTllZmU1MzM3NDBmNWU0ZjhmN2FjYmExZWU0ODVlMjBmMDU4NTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSrRk2VgZbSv8e4WZJypV2fUxQqq
55bMgUdqZzUbMSOh93jhcr53wCIs1EI79L4z6+4U3WOHb4QGQP0jl7R4HwiyINzt
C38sVGgzLxyoBxfcYa4Q8j90offgjurxDCYvNNtdjypCwcHMb/xqT07aTfy52DOj
8W0w1pSf4dXJZDD3Nxsi09qNklpJ5czrcukWrqOO9TH4SyhZ3UrLyqlFFY4Oe2py
DdKfzi0DBerpKn00qSMzLrtLv0r8Nr4XFMHZirjEWoJlwMLBpfTVUQVD3Ytc29vt
+S3oR4da1QXYbjiXcLzYUe4knf6MQ6oWV3NDuzRtPGcHH1z1ku9GeWX5dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGGe/lM3QPXk+Pesuh7kheIPBYVJMB8GA1UdIwQY
MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It
MWRkNWRhYjM2ZjlmLzEvWVo3LVV6ZEE5ZVQ0OTZ5Nkh1U0Y0ZzhGaFVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm
LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT26nMA0G
CSqGSIb3DQEBCwUAA4IBAQBUqv4BkzFi0LliEUfnN5X89BQ9lcrQQ9Pag7yGzzy9
iMG80zcr+jA/muKlpxtBFG30XThoW7uJm9zstuWr5xWd/jDAQ/RcjW12Fn9JKnXw
AEqUVMYbbGVzl/YBlHIKF9spDbTHCQcec2M3tFjtJHPLKudmqHTHisTUzcJ909w8
XRC2OJnDXptBv2VBddodOtsbAJ2cdT30H9PL7uyKTjj9/tRQkdPliVrfXc75Hopg
/n1EanFEJK76MqjUEbbcWmp/eDKULIm8UAwSKCPcikBKeb7jP7SVBqFybVaIDNnz
a6QUQ9MS0nV+t6EOKtYssZESlU2cslcyAM1Daqp7p9tB
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:52:55 2025 by rpki-client