Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/ygcOhBVXpO21ojm12WEZop1A8DY.roa
File: ygcOhBVXpO21ojm12WEZop1A8DY.roa (raw, json)
Hash identifier: txR9VLBC4Ddv1ZutvzHMZaTZRVI7ElRw6nGbt9rYk7o=
Subject key identifier: CA:07:0E:84:15:57:A4:ED:B5:A2:39:B5:D9:61:19:A2:9D:40:F0:36
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 01936DD537DA1642E89638FB8126CE3F18A2
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/ygcOhBVXpO21ojm12WEZop1A8DY.roa
Signing time: Wed 27 Nov 2024 13:35:10 +0000
ROA not before: Wed 27 Nov 2024 13:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 77.95.201.0/24 maxlen: 24
109.71.240.0/24 maxlen: 24
109.71.241.0/24 maxlen: 24
109.71.243.0/24 maxlen: 24
109.71.244.0/24 maxlen: 24
109.71.245.0/24 maxlen: 24
109.71.246.0/24 maxlen: 24
109.71.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 13:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:d5:37:da:16:42:e8:96:38:fb:81:26:ce:3f:18:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Nov 27 13:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca070e841557a4edb5a239b5d96119a29d40f036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:db:7d:41:f2:94:4c:a0:3d:ea:b7:7d:6a:
16:1d:3e:66:e9:80:fd:f3:89:44:62:14:c2:e5:59:
18:67:4e:66:8d:ed:c3:19:8e:11:17:85:56:08:9f:
e5:46:96:00:af:f6:c1:1f:9f:ef:cf:c1:39:df:b5:
b0:22:ce:be:39:97:5d:4d:c3:da:83:de:5f:aa:ef:
49:40:c0:74:2e:f9:72:09:fb:4b:48:cd:23:95:c0:
15:12:48:38:24:31:f8:18:71:55:88:fc:8f:38:61:
78:5f:69:ff:4f:2c:44:71:d7:5a:32:95:d9:c5:93:
96:d5:78:dd:5b:04:c6:80:b9:c7:cf:1e:e0:02:d0:
fe:6a:dd:53:43:4c:0d:ad:94:de:8d:e3:81:c1:6b:
42:0d:40:82:00:09:87:5d:e7:f9:0d:9d:22:c5:f5:
ac:d9:95:11:0a:84:d6:3b:3c:a7:ee:71:66:dc:83:
c1:55:0a:7e:96:e6:d3:47:32:62:44:0e:78:5d:f2:
45:10:1a:f5:d0:80:c3:29:ff:fd:34:a8:24:e6:ea:
64:fd:3e:8a:ea:c1:b4:47:2e:c2:98:86:f2:6d:a3:
71:38:8e:da:fa:9e:d6:99:ba:57:70:da:ee:4a:7a:
62:1d:f1:5f:bd:87:85:57:e6:eb:dd:3d:99:82:a9:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:0E:84:15:57:A4:ED:B5:A2:39:B5:D9:61:19:A2:9D:40:F0:36
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/ygcOhBVXpO21ojm12WEZop1A8DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.201.0/24
109.71.240.0/23
109.71.243.0-109.71.247.255
Signature Algorithm: sha256WithRSAEncryption
30:b2:21:e1:bc:19:1a:2c:5b:3d:82:78:0c:4b:74:4a:2b:aa:
5c:e8:26:18:de:f0:51:1a:ca:9d:d4:b1:a7:4d:fa:54:6c:74:
7e:f9:96:40:74:e3:71:70:ae:a6:c4:6e:74:5d:a6:44:b1:51:
c0:01:3a:a8:8a:67:5d:de:03:aa:c5:df:ad:80:63:2f:b0:db:
ba:ef:43:50:03:48:59:36:44:93:32:09:b6:3b:e6:8b:54:7b:
fa:59:26:60:29:52:45:96:36:cc:42:96:2f:0e:1a:3e:94:cb:
be:4f:74:3c:ea:00:f9:69:b6:f9:22:46:94:db:0f:d1:d9:f6:
f3:b7:88:ca:30:63:17:46:63:d4:f0:90:bf:30:62:cf:7a:5a:
b5:0e:8a:dc:35:a4:e5:ce:b4:b6:10:dc:b8:94:f5:6c:ac:41:
e6:b0:7c:c8:d3:11:7e:31:30:be:22:52:12:74:dc:67:1f:a5:
95:76:63:18:dc:8b:a6:a9:32:e6:b6:59:50:39:23:f8:1c:66:
01:b6:0a:22:80:2f:13:94:79:eb:ff:fe:90:88:c3:57:94:57:
40:eb:47:f3:40:87:b0:16:50:d4:5e:8f:42:87:e6:e1:f1:de:
90:c9:fc:ea:28:39:fe:bd:78:3b:93:e6:50:65:83:40:df:bb:
ed:d8:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:25:57 2025 by rpki-client