Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/YjMReYTKP7J4waOVmZoCq7SUCZc.roa
File: YjMReYTKP7J4waOVmZoCq7SUCZc.roa (raw, json)
Hash identifier: NzxheVvDj3vl1nImujZWlwfWuhcf1QGbImKUrQiextQ=
Subject key identifier: 62:33:11:79:84:CA:3F:B2:78:C1:A3:95:99:9A:02:AB:B4:94:09:97
Certificate issuer: /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial: 0191DC8328FF18BDEC452EAD143A788E1322
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/YjMReYTKP7J4waOVmZoCq7SUCZc.roa
Signing time: Tue 10 Sep 2024 15:17:48 +0000
ROA not before: Tue 10 Sep 2024 15:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214239
IP address blocks: 185.210.54.0/26 maxlen: 26
Validation: Failed, certificate revoked on Wed 11 Sep 2024 16:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dc:83:28:ff:18:bd:ec:45:2e:ad:14:3a:78:8e:13:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Validity
Not Before: Sep 10 15:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6233117984ca3fb278c1a395999a02abb4940997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:b4:20:01:84:7e:9a:ee:33:a5:4b:2e:e1:
da:db:b1:79:fe:31:f9:f2:bd:ac:ed:e7:cb:3c:dd:
ee:30:f5:9f:a5:b6:6b:7d:b1:c9:06:e6:a2:60:d9:
44:81:26:6c:8b:21:81:9e:e8:11:e1:35:28:4b:62:
95:10:4a:4c:d0:93:0b:74:bc:50:ba:b5:d3:61:9d:
80:a9:4e:d2:88:80:86:04:3a:65:dc:aa:7c:a4:9b:
a5:76:72:fd:6f:f6:97:8b:4e:c8:a2:bc:e5:4e:2b:
15:f7:04:f6:df:19:f7:20:fa:42:5f:d7:00:e3:63:
f9:1a:df:fe:2e:59:fe:c8:81:de:7a:03:0f:99:ce:
1d:06:3e:71:22:fd:26:4b:5c:a7:91:66:3c:0c:88:
14:f1:82:81:24:b6:9b:49:40:3a:3b:7c:3b:e0:1f:
c3:8b:bc:a2:2a:df:fe:29:51:39:cb:ea:a2:42:8e:
6f:23:a9:5c:b3:27:5d:16:97:d6:37:15:c0:c7:ec:
91:df:82:af:38:79:00:22:60:13:03:42:b7:cd:c8:
8f:fd:8c:e5:65:b4:fc:0a:8f:8e:eb:2f:6f:4b:11:
bb:24:0c:3d:ee:90:d8:6b:5f:b9:53:cd:a4:76:ed:
68:3c:8a:1a:92:de:c0:e9:5f:ba:5a:f5:dd:dc:f3:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:33:11:79:84:CA:3F:B2:78:C1:A3:95:99:9A:02:AB:B4:94:09:97
X509v3 Authority Key Identifier:
keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/YjMReYTKP7J4waOVmZoCq7SUCZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.54.0/26
Signature Algorithm: sha256WithRSAEncryption
b3:e1:8e:32:09:5d:10:20:fa:94:57:b9:f6:67:8c:cf:cc:92:
67:ba:7e:5b:80:d7:73:4d:6b:3b:7d:62:65:6a:f4:46:d1:30:
f6:d0:a4:c5:9a:ac:51:18:35:32:7e:03:06:11:91:1c:5b:c9:
84:b4:b7:54:19:f1:c8:42:bd:b6:38:91:5f:04:2b:4c:00:b3:
14:b0:f5:7b:c4:03:d9:1a:8f:96:47:64:c5:8c:52:41:41:b7:
aa:e4:d3:3c:7c:0d:e7:b7:ff:9f:d1:99:c6:79:09:a5:20:b9:
11:9a:ed:97:7a:ce:3e:94:a4:c8:ff:ef:08:30:0e:a2:c2:29:
6a:dd:df:a4:8c:99:4e:4e:98:62:5d:8a:21:09:e4:ee:ec:6e:
2e:c2:15:28:b6:da:13:60:f7:55:4a:7a:5e:a5:c6:6f:48:a9:
90:18:6f:be:91:c1:c5:52:77:4c:89:3c:a4:32:64:f8:2a:81:
11:d7:a8:8e:cb:36:65:d1:21:5a:0f:4a:db:ec:f4:2d:64:bf:
82:92:56:1c:31:06:41:f1:cc:42:07:3d:40:43:90:37:61:0d:
fb:41:b0:e9:62:69:2e:4d:26:32:df:45:b4:73:1f:ad:aa:48:
6b:c7:53:b4:dc:9d:33:93:0d:4e:c4:85:ea:54:af:47:20:0a:
72:4e:21:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:18:34 2025 by rpki-client