Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/y24rB24IWHermlVSDwnxlGzf3Ys.roa
File: y24rB24IWHermlVSDwnxlGzf3Ys.roa (raw, json)
Hash identifier: RbSTG3uwhg+MoRtzCfeI6Xp8b7vhL+dnUy6mhOTBuJ0=
Subject key identifier: CB:6E:2B:07:6E:08:58:77:AB:9A:55:52:0F:09:F1:94:6C:DF:DD:8B
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 018CC795104597A6CD8968BB1ED73DC6F708
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/y24rB24IWHermlVSDwnxlGzf3Ys.roa
Signing time: Tue 02 Jan 2024 00:31:24 +0000
ROA not before: Tue 02 Jan 2024 00:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49478
IP address blocks: 194.150.254.0/23 maxlen: 23
91.234.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 27 Jun 2024 08:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:10:45:97:a6:cd:89:68:bb:1e:d7:3d:c6:f7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Jan 2 00:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb6e2b076e085877ab9a55520f09f1946cdfdd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:45:6c:e1:f4:e3:3e:60:ce:dc:86:ee:38:
c4:c6:6b:46:41:e6:0b:36:1f:5c:b0:45:a3:9f:71:
b7:ad:04:a8:b2:f0:af:d8:1a:41:ab:99:74:32:f2:
7d:08:2d:8e:58:ea:b1:65:a6:c6:d0:d7:7c:54:95:
e7:5e:6c:37:b0:ab:ea:ed:07:7f:32:b5:74:42:7d:
11:86:39:83:cd:2e:dc:6e:42:fa:56:93:9b:98:2e:
77:08:b3:74:e9:b2:05:d6:75:0c:a5:88:1c:69:20:
1e:ea:fd:48:17:b7:e0:30:a5:15:d6:5f:c2:c3:90:
a0:ec:64:88:90:3b:7f:a8:39:c2:fd:fb:1b:ed:45:
c0:d6:3d:ca:28:23:f1:3b:98:63:4a:ea:22:96:5b:
47:c4:01:fe:25:66:3f:f1:e3:e7:c7:50:1c:cd:d6:
22:a0:41:0a:5a:19:2f:a0:90:f8:92:c0:4c:bc:a0:
ae:f0:e2:b2:2e:18:c8:8d:c2:cd:41:21:2d:4c:73:
22:8c:d6:9d:cb:9b:5d:74:93:cf:78:17:3d:40:87:
c9:5e:5b:3c:5b:28:79:71:2f:63:c4:f9:18:5e:2a:
cb:7a:f1:04:88:68:95:2f:ed:61:65:fe:9f:e0:ef:
82:c7:69:b5:ec:7e:00:f5:59:1c:5c:ba:f9:97:77:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6E:2B:07:6E:08:58:77:AB:9A:55:52:0F:09:F1:94:6C:DF:DD:8B
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/y24rB24IWHermlVSDwnxlGzf3Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.164.0/22
194.150.254.0/23
Signature Algorithm: sha256WithRSAEncryption
ef:ce:75:42:6a:e1:86:0b:6d:71:69:ac:0e:1c:63:73:c2:2a:
1f:71:58:93:8c:94:0b:9f:77:c7:6d:db:d8:1f:4e:87:ce:3e:
3f:c8:fb:f8:11:99:ae:4a:3b:86:ef:ba:36:1c:ef:cf:70:aa:
25:4b:b2:3a:c4:c4:e4:a5:f0:5d:9e:e6:7d:a9:75:85:2f:bb:
61:a4:d7:8e:0e:fa:6b:10:3c:d2:95:4c:d4:44:6a:fb:9b:0f:
29:59:e9:2a:9d:f7:47:68:a8:c9:90:0b:25:0a:32:ab:43:a1:
8c:ca:6b:b5:ef:87:05:21:e7:9c:0d:f9:33:76:84:a3:1a:5a:
8e:b2:18:93:ed:3c:43:f9:2e:f7:4b:0d:42:95:f4:df:86:3e:
41:47:19:12:66:5f:2a:6d:75:f2:e2:2a:78:ad:71:3b:32:3d:
07:cd:49:92:3d:7e:da:52:3f:ed:e0:81:a6:70:42:b9:fd:04:
78:7a:3f:e0:4e:9d:51:4c:ed:e3:4d:31:30:93:a9:6a:64:dd:
e5:0e:f8:e6:94:a8:0e:54:1e:77:cb:d6:f2:36:da:9b:34:2c:
36:4a:fb:fa:42:10:60:93:a1:96:79:9f:5f:13:30:1c:dc:50:
65:d7:21:af:99:4b:18:91:71:0a:49:6d:02:9c:7b:04:79:5b:
11:c9:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:13 2025 by rpki-client