Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/yr6-AKA-CFtDykPyol3QESbPGc4.roa
File: yr6-AKA-CFtDykPyol3QESbPGc4.roa (raw, json)
Hash identifier: FOYxLWdB13kFCkChczKMB0yQ6ICyQoezC44PoKu8nyM=
Subject key identifier: CA:BE:BE:00:A0:3E:08:5B:43:CA:43:F2:A2:5D:D0:11:26:CF:19:CE
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194D74404B34E0BF0A18577006994C9CB9D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/yr6-AKA-CFtDykPyol3QESbPGc4.roa
Signing time: Wed 05 Feb 2025 17:59:06 +0000
ROA not before: Wed 05 Feb 2025 17:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 89.251.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 12:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:44:04:b3:4e:0b:f0:a1:85:77:00:69:94:c9:cb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 5 17:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cabebe00a03e085b43ca43f2a25dd01126cf19ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:b2:10:60:e1:1f:cc:e1:10:8d:35:57:69:
f7:e5:c4:79:c8:aa:6e:55:bf:c3:1a:42:72:85:26:
ef:d4:4c:bc:89:be:eb:08:4f:48:a5:c8:da:ca:e8:
4f:2d:eb:50:3f:4e:80:45:bc:0f:d7:82:7f:27:2c:
d5:fe:a8:6f:e1:d1:b2:b7:60:59:2c:9e:11:c5:ad:
5a:ed:41:05:13:cf:a8:5d:98:2c:f1:5a:8f:0d:f9:
be:a4:46:1b:9f:76:d4:98:30:df:60:ca:31:9e:c5:
96:70:3b:fa:3e:6a:e0:34:68:46:2f:29:5c:fa:e0:
c6:9b:d0:c9:d3:7c:df:cc:59:0f:ec:27:9f:b5:32:
7f:23:9d:7c:34:54:fa:b2:b7:67:46:a5:9b:52:c7:
1c:96:8e:a4:df:55:f6:f4:15:3a:d4:71:c5:c9:5a:
d9:d8:b9:35:fe:4f:0b:5a:d6:31:98:18:1d:64:ec:
7a:a8:e8:48:d8:7a:cd:82:e3:8d:d2:6d:96:c8:a6:
75:52:90:f2:b0:4e:17:99:ed:6e:f4:35:25:1c:db:
63:06:af:32:1c:af:26:8a:a5:ed:02:1a:13:96:91:
f4:12:29:46:c2:f3:ae:56:ef:b9:9f:df:19:02:1d:
07:45:b9:dd:9b:21:ca:0c:46:10:f6:80:c2:4a:d6:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BE:BE:00:A0:3E:08:5B:43:CA:43:F2:A2:5D:D0:11:26:CF:19:CE
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/yr6-AKA-CFtDykPyol3QESbPGc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.22.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ac:2e:35:ee:00:f2:45:84:3f:37:77:5e:e7:1c:d9:23:44:
31:4c:32:13:3f:34:03:4a:8e:89:96:b9:e2:bd:88:61:ea:64:
c3:99:fa:ce:2d:11:a8:a7:22:7b:75:a2:d6:7c:1f:a1:11:15:
f4:df:ed:cd:21:ae:bc:f9:d0:20:ad:69:64:cf:d2:31:1e:f2:
58:72:2c:ed:dc:81:e6:be:85:75:32:9d:62:56:55:7e:34:a4:
bf:81:41:72:3c:3d:36:a6:5d:02:46:aa:2d:44:2d:18:dc:79:
a3:2f:83:00:13:41:16:43:02:95:bb:7b:af:f8:e5:d5:f3:f7:
9a:e3:25:f5:51:e4:54:e6:bb:4f:56:2d:8f:ce:8a:5c:61:9d:
3f:7c:68:c0:68:97:15:a0:26:b8:7c:0a:7b:f1:bb:4f:b6:3f:
ea:35:a5:b1:b1:4c:06:c5:c6:30:a2:89:c5:26:40:92:cf:34:
87:00:5b:37:db:11:63:8b:10:e5:35:ea:2a:3a:26:24:27:30:
93:de:4f:a7:da:52:89:25:fa:b9:b5:d4:d2:13:5f:7d:e3:1e:
5c:e1:8b:f9:9a:38:52:59:76:bd:a0:f0:b5:48:63:16:7b:ef:
5f:b6:d2:ac:8f:a3:bb:ae:8b:9f:6a:4b:90:de:8b:b8:92:24:
56:52:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:40:12 2025 by rpki-client