Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/YALYbmLQFHTFNxWJYHO122i60aU.roa
File: YALYbmLQFHTFNxWJYHO122i60aU.roa (raw, json)
Hash identifier: RVTk6zkWZB/JmabB3pWQA7pua0+xfKYdD9uIIP4vgpk=
Subject key identifier: 60:02:D8:6E:62:D0:14:74:C5:37:15:89:60:73:B5:DB:68:BA:D1:A5
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018CC6B8158DD2B3512361B7EA0CDBE5DBA0
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/YALYbmLQFHTFNxWJYHO122i60aU.roa
Signing time: Mon 01 Jan 2024 20:30:01 +0000
ROA not before: Mon 01 Jan 2024 20:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39001
IP address blocks: 85.140.32.0/21 maxlen: 21
85.140.64.0/21 maxlen: 21
85.140.80.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:15:8d:d2:b3:51:23:61:b7:ea:0c:db:e5:db:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 1 20:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6002d86e62d01474c53715896073b5db68bad1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:6a:25:5b:33:0e:9a:31:d1:88:fd:3f:bb:
33:8c:9e:8c:d9:dd:9c:c4:6f:49:fb:61:4f:7b:f2:
ad:21:12:10:40:4d:39:83:62:1b:97:11:2e:a4:b5:
da:06:57:d6:b2:42:7d:c0:53:9f:ce:c9:73:de:97:
b5:ee:44:14:ea:e2:d8:c2:56:85:d5:d3:1f:a3:36:
9f:1b:01:57:25:ae:95:d8:b5:af:e4:b6:62:3a:2a:
c3:86:2f:97:b9:b7:c7:e8:0e:90:da:55:58:88:70:
b8:39:e0:f6:4e:f3:a3:9a:1a:b6:c3:3f:fa:6c:0a:
be:82:5b:55:8c:a3:c6:f3:6e:de:9f:55:bf:28:a9:
e0:cf:e4:37:a4:c4:a7:9a:07:8d:96:81:1d:8a:b9:
65:01:ec:ad:07:22:e5:75:db:fe:06:29:4e:b6:9b:
4f:a1:8a:18:a7:28:60:a8:7e:ae:a9:55:06:cf:7a:
f2:df:5c:19:ed:e9:98:ae:b4:44:d8:29:fa:bb:4d:
cd:32:8e:35:94:dc:b2:d4:34:35:54:26:e5:50:6e:
eb:3d:c2:f8:0a:d1:9f:52:d7:a9:76:8e:a5:b3:3c:
93:5f:60:86:ba:d0:75:ef:66:b3:23:e8:b8:9e:6b:
67:a5:9a:71:06:b0:4d:91:eb:35:b6:ac:c7:8e:94:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:02:D8:6E:62:D0:14:74:C5:37:15:89:60:73:B5:DB:68:BA:D1:A5
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/YALYbmLQFHTFNxWJYHO122i60aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.140.32.0/21
85.140.64.0/21
85.140.80.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:cb:43:03:7d:15:f5:64:3f:27:0c:0d:f7:03:02:5b:0b:0b:
c2:dd:46:41:a6:1c:fd:e5:47:8a:13:20:08:41:69:a6:7f:2c:
f4:cf:0e:79:51:d4:bc:4e:2c:ce:64:80:bf:78:06:3d:2d:c0:
b6:78:f3:51:ec:3b:2f:6c:3d:82:78:4a:be:70:e7:6d:c4:f6:
16:e3:75:e6:60:eb:7f:df:32:a7:ad:44:9f:bf:fa:c6:d9:9c:
2b:3c:e1:98:32:6a:1c:91:23:11:69:20:ea:75:f4:87:4c:d2:
4c:b6:17:a0:50:60:b3:23:c5:52:c0:9b:f7:cf:9a:49:d3:d6:
f3:9e:b6:7b:3d:8b:bf:05:c5:18:d7:74:be:18:08:5b:af:fb:
81:1f:fe:f6:d5:6c:bb:3f:2b:d3:21:f0:c0:ae:2c:6a:7e:57:
ff:06:5c:e7:ca:50:7c:7a:ae:f1:a8:00:1a:60:52:bb:ac:ef:
f7:e6:f2:0b:bc:8e:26:24:6e:11:3a:5a:e0:7b:28:be:28:db:
d9:02:6c:5f:d0:34:27:7c:bc:9d:14:dc:b1:2c:72:0e:d2:45:
3e:30:8f:52:d8:46:87:ab:07:f2:ec:26:e6:64:ce:80:ce:80:
7e:45:36:e5:03:4f:f9:50:03:20:a9:ff:db:d4:e5:ab:93:33:
c1:9b:40:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:12:28 2025 by rpki-client