Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/ynv1tiewBipE48vBhIcTLOZ5sgE.roa
File: ynv1tiewBipE48vBhIcTLOZ5sgE.roa (raw, json)
Hash identifier: rJ8xPc/AbyXshJ4L9y1QoaK0ETvLQ1NszqnwN8Mg0SE=
Subject key identifier: CA:7B:F5:B6:27:B0:06:2A:44:E3:CB:C1:84:87:13:2C:E6:79:B2:01
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 018D1B434BF226CF7CD693DF77CF0670581F
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/ynv1tiewBipE48vBhIcTLOZ5sgE.roa
Signing time: Thu 18 Jan 2024 06:30:11 +0000
ROA not before: Thu 18 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48407
IP address blocks: 81.90.17.0/24 maxlen: 24
81.90.18.0/24 maxlen: 24
81.90.19.0/24 maxlen: 24
93.94.50.0/24 maxlen: 24
93.94.55.0/24 maxlen: 24
2a00:8b20::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 13 Sep 2024 19:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1b:43:4b:f2:26:cf:7c:d6:93:df:77:cf:06:70:58:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Jan 18 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca7bf5b627b0062a44e3cbc18487132ce679b201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:a6:c5:31:ff:eb:56:2f:01:e2:72:8c:66:
7a:1a:dd:0e:2d:74:be:34:04:2c:ba:88:96:51:0c:
9a:77:a2:86:54:ce:0c:ac:30:04:1c:d0:77:34:15:
b5:7e:9f:34:8f:ca:96:b8:ea:b9:0b:2f:fd:cf:71:
3a:87:26:46:66:3f:2e:43:75:3d:87:52:e7:b8:02:
27:78:11:d6:65:8f:1c:67:50:b1:49:dd:83:f2:dd:
b1:29:31:c8:40:48:b1:e9:e0:ec:82:13:6b:24:95:
ac:7d:af:14:64:ab:57:e3:7f:ee:74:5f:4c:24:3e:
08:0a:ad:08:d8:9d:7a:dd:0c:7a:8e:36:8f:ce:3a:
e6:e8:6a:a2:cd:f5:5c:9b:73:39:50:7a:60:96:09:
d0:eb:33:1c:25:d4:56:26:4a:4b:c3:ec:f1:d2:2f:
12:f8:ad:ec:b4:b5:a8:60:c4:d0:10:0f:f9:6e:3c:
30:7b:ef:47:ef:a6:5a:5a:da:b8:f5:2c:55:3f:db:
b1:3f:7e:64:71:49:56:57:20:88:32:a1:79:8a:06:
04:f6:c0:8d:80:66:81:11:8c:57:e6:74:a1:4f:c9:
6b:d8:c6:e7:e3:59:07:ae:11:76:f2:9e:a4:7c:06:
f5:ef:a0:84:d7:be:e2:e0:27:3c:e3:d7:2b:c9:9c:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7B:F5:B6:27:B0:06:2A:44:E3:CB:C1:84:87:13:2C:E6:79:B2:01
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/ynv1tiewBipE48vBhIcTLOZ5sgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.17.0-81.90.19.255
93.94.50.0/24
93.94.55.0/24
IPv6:
2a00:8b20::/32
Signature Algorithm: sha256WithRSAEncryption
a3:dc:ab:09:b0:e3:fa:b6:8f:5e:32:5a:fa:2e:e1:11:83:bb:
0c:da:c7:d3:48:7a:34:97:72:3d:c8:d5:82:03:41:9c:ce:a9:
c9:34:61:26:57:5d:06:7a:f4:57:03:bd:67:e6:0c:44:75:2b:
2f:5b:d8:05:65:31:2f:81:07:19:71:d1:8a:e0:fa:dd:28:76:
b2:53:9d:fd:e6:af:5b:da:8a:12:d6:15:68:da:61:55:f4:66:
9e:f1:00:21:13:0b:cf:37:ba:09:14:a8:3c:41:4d:4b:42:3a:
31:22:e4:18:db:9b:cc:9a:c0:d4:61:3d:ce:00:f3:10:fd:c7:
11:8d:21:58:5b:8f:de:bb:ad:ed:9e:7a:c5:a1:73:9c:56:9a:
64:93:63:0b:f8:60:1a:a2:58:31:e6:0e:c9:fc:99:f9:92:30:
49:71:8c:c9:33:f8:aa:26:4a:68:69:81:15:5a:bc:d5:69:55:
f6:2c:f0:70:21:37:74:89:fe:1b:42:45:12:1c:a8:52:73:89:
49:2c:01:fa:76:ad:14:25:4b:50:18:aa:66:f0:61:1e:8d:78:
ad:26:2c:31:b1:39:45:8c:8d:dd:83:93:59:60:31:12:c4:f7:
f9:07:d4:30:91:bf:97:d3:d2:23:6c:5c:7b:45:84:37:cf:95:
20:72:df:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:58 2025 by rpki-client