Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/Yc7BsOkteU1cvA_kgevsArxZou8.roa
File: Yc7BsOkteU1cvA_kgevsArxZou8.roa (raw, json)
Hash identifier: U9Pc7D19YSiE9uKvZ6S5flmD9iVubFMveK5eILaiDAM=
Subject key identifier: 61:CE:C1:B0:E9:2D:79:4D:5C:BC:0F:E4:81:EB:EC:02:BC:59:A2:EF
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 0194D5F983F5865C43EC63EA5B92ECB42F7A
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/Yc7BsOkteU1cvA_kgevsArxZou8.roa
Signing time: Wed 05 Feb 2025 11:58:06 +0000
ROA not before: Wed 05 Feb 2025 11:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 89.184.0.0/21 maxlen: 21
193.222.251.0/24 maxlen: 24
193.223.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 12:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:f9:83:f5:86:5c:43:ec:63:ea:5b:92:ec:b4:2f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Feb 5 11:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61cec1b0e92d794d5cbc0fe481ebec02bc59a2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:91:0f:fa:ea:6a:c9:6c:ad:b9:64:ca:fb:
d6:ad:49:5f:42:3c:0f:d7:67:49:e6:f9:23:e5:f8:
47:18:21:aa:e1:67:39:50:81:6e:ad:90:62:8e:e0:
bf:4d:02:26:36:5f:89:57:30:3f:8e:d2:51:91:0d:
92:b4:e3:37:fd:5e:02:78:cf:1f:2d:77:64:39:b8:
16:f1:b6:1a:b8:f7:46:da:94:08:50:a1:fb:b8:47:
c1:95:f8:0f:a8:ab:60:12:18:6c:e3:61:35:ff:3a:
bc:f3:73:ff:45:4a:24:0c:c4:6f:3b:2d:d9:aa:20:
d0:5d:8f:71:7b:06:86:3b:47:ff:27:85:96:48:b2:
43:bd:c4:64:19:44:d5:80:fd:c0:bc:5f:1f:ab:0a:
44:f2:ff:32:69:7d:29:e4:4c:e7:8f:09:e7:fa:64:
2f:45:a8:2d:d4:9b:b6:d2:dc:d5:df:2f:49:15:f6:
47:c6:ea:dc:04:bd:a5:49:e7:50:26:88:81:9c:19:
11:94:24:41:bf:30:5d:e2:f3:fe:2b:60:30:c4:5f:
38:35:9c:df:42:d6:68:87:dc:64:82:a1:00:f2:66:
46:f1:13:61:fa:c5:c5:d8:a8:45:3c:3f:fc:7b:df:
0c:4f:e7:27:7c:33:c7:a3:c5:72:85:a6:64:9b:c5:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CE:C1:B0:E9:2D:79:4D:5C:BC:0F:E4:81:EB:EC:02:BC:59:A2:EF
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/Yc7BsOkteU1cvA_kgevsArxZou8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.0.0/21
193.222.251.0/24
193.223.69.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:48:16:8c:ce:35:fe:20:0b:d3:c8:d8:39:4c:47:90:6c:8b:
47:5c:80:6c:42:74:3a:68:9e:04:ff:a4:0f:fa:1d:35:bb:8e:
a0:7a:d3:01:0c:bd:04:f8:dd:24:6c:9f:19:db:c1:7e:41:16:
82:6a:a2:17:7e:46:0b:ad:1f:7b:cd:6c:83:af:47:74:30:d9:
ca:81:db:0f:af:2f:83:4b:cf:8c:2f:05:f5:25:49:d5:48:29:
30:43:1d:4e:99:a8:b4:7b:dd:ae:58:e8:91:65:1f:c8:16:f4:
5d:35:55:e5:e1:8d:fd:b0:b7:2d:b7:88:13:c7:ff:5f:9d:95:
58:68:75:7a:01:55:ee:88:6d:66:ff:b4:69:d9:9c:5b:21:44:
db:23:58:ee:9c:30:c3:23:ee:d8:56:55:66:32:1e:ba:cd:ab:
f6:01:7e:18:b0:61:37:4f:ea:b0:cf:ee:39:b5:ed:8a:8c:7d:
f1:1b:cb:d8:d1:c8:be:25:b0:a4:3d:cc:5d:2c:2b:1e:f3:6e:
30:7a:64:ee:95:46:75:6f:9c:5e:4c:78:3f:ce:fb:d3:8f:5c:
18:d4:f5:21:18:04:48:c0:21:76:73:df:d8:4e:fb:d6:ea:3e:
5d:bc:25:2e:1d:d4:46:07:ae:e3:f7:39:6d:c7:1d:c1:a8:78:
12:e0:57:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:14:18 2025 by rpki-client