Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/9YfN2L4apzvp4xAZc13OD67Mpes.roa
File: 9YfN2L4apzvp4xAZc13OD67Mpes.roa (raw, json)
Hash identifier: +YF5xXMdiJSOhqwkycSzwdITGrTJmjq3x54z4c2qidw=
Subject key identifier: F5:87:CD:D8:BE:1A:A7:3B:E9:E3:10:19:73:5D:CE:0F:AE:CC:A5:EB
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 0194CB6476CFC0855EE5E66F9E84CE6F794F
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/9YfN2L4apzvp4xAZc13OD67Mpes.roa
Signing time: Mon 03 Feb 2025 10:39:06 +0000
ROA not before: Mon 03 Feb 2025 10:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213744
IP address blocks: 91.142.129.0/24 maxlen: 24
212.233.68.0/22 maxlen: 22
212.233.68.0/24 maxlen: 24
212.233.69.0/24 maxlen: 24
212.233.70.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Feb 2025 18:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:64:76:cf:c0:85:5e:e5:e6:6f:9e:84:ce:6f:79:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Feb 3 10:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f587cdd8be1aa73be9e31019735dce0faecca5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:4f:69:b6:c2:5f:8a:d3:22:d1:19:b7:2e:
8f:98:63:58:b5:6b:6f:9a:c3:fe:d0:79:e4:67:c4:
27:df:4d:f7:7f:83:c3:74:c7:d5:2c:9f:d4:e4:42:
7e:79:e8:03:7b:c0:08:9e:ed:65:99:6c:88:fc:70:
9f:c3:85:1f:e7:22:01:13:97:d5:87:c1:02:c2:3e:
67:42:04:42:7f:ed:b7:e5:de:02:28:e1:d2:36:0d:
af:22:45:2d:60:01:cd:93:49:f4:8e:85:ca:a0:15:
83:98:6b:5d:dd:89:3f:f4:0d:93:4c:54:b2:cf:8b:
6d:6a:47:1f:46:be:02:0a:5d:75:d3:a5:c1:22:74:
3a:ca:60:1e:00:2c:39:30:63:1a:56:74:f2:a2:94:
b0:0b:c6:a7:36:b1:80:b8:81:f8:07:c6:3a:7a:f1:
29:a6:ae:f6:43:cb:c6:b6:63:e9:35:ab:04:31:4f:
1e:7b:a0:bf:5d:c4:1f:cf:81:0a:ac:8d:b1:e1:c0:
ab:75:cc:60:cf:70:2e:61:83:f9:66:23:58:72:55:
ac:24:97:f8:94:51:23:1a:51:90:06:e8:31:08:38:
ab:f5:2c:1d:61:cd:b6:26:f2:00:4e:f5:5e:07:ae:
a0:af:c6:af:0c:85:65:2b:9c:a6:87:e3:c1:bf:cc:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:87:CD:D8:BE:1A:A7:3B:E9:E3:10:19:73:5D:CE:0F:AE:CC:A5:EB
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/9YfN2L4apzvp4xAZc13OD67Mpes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.129.0/24
212.233.68.0/22
Signature Algorithm: sha256WithRSAEncryption
53:4a:33:4c:61:b4:88:47:b8:4b:27:ef:12:c3:ba:c1:ed:8c:
59:12:40:26:98:e0:c9:80:9b:80:8e:f0:a2:35:96:67:c9:33:
46:84:3a:24:ad:da:71:59:6c:65:e3:6d:33:22:6f:03:d6:82:
38:94:ae:85:f5:3a:fc:15:f7:dd:45:5c:10:04:25:bf:c2:17:
87:37:dd:08:0e:50:3a:5c:0f:61:29:37:06:13:14:a8:f7:8f:
a0:7c:e0:8b:5b:38:51:74:3a:ba:ad:40:bc:0d:75:cc:8d:0e:
51:a1:2d:a4:b8:97:d9:dc:1d:6d:a9:4d:53:e6:c8:e0:cf:28:
02:22:17:50:e3:9a:a0:70:2a:3e:da:93:a2:0d:35:04:76:12:
d8:b2:58:8e:23:a9:24:31:e5:9e:b1:58:28:5c:f4:46:09:7a:
9b:a2:c1:18:43:e5:9c:0a:ad:cc:cb:43:a3:d5:62:81:dc:13:
7d:13:cd:8d:6f:a6:d2:e9:27:3e:fb:1e:e9:d3:4d:06:f5:e7:
a7:50:34:68:9d:76:a2:3d:f8:ff:05:49:56:db:0b:16:ed:7a:
6a:ed:f2:b6:4d:e6:11:df:5d:b3:47:ce:9d:70:17:33:2b:7f:
25:6d:13:43:c5:4d:e4:6e:f0:df:51:84:7b:48:aa:aa:cc:02:
ed:88:83:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:33 2025 by rpki-client