Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/Y5BuI3IqBGS32NBT88Iwjd8NfU8.roa
File: Y5BuI3IqBGS32NBT88Iwjd8NfU8.roa (raw, json)
Hash identifier: +FD66zPjxSegJfM17hGY02MgO0CZz9DnDIlSw8uJoZo=
Subject key identifier: 63:90:6E:23:72:2A:04:64:B7:D8:D0:53:F3:C2:30:8D:DF:0D:7D:4F
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 01909D0CB708459E1C0E0DFABFD926D413F3
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/Y5BuI3IqBGS32NBT88Iwjd8NfU8.roa
Signing time: Wed 10 Jul 2024 14:29:34 +0000
ROA not before: Wed 10 Jul 2024 14:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25181
IP address blocks: 195.2.41.0/24 maxlen: 24
2a00:1310::/32 maxlen: 48
2a00:1310:802::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 07 Oct 2024 06:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9d:0c:b7:08:45:9e:1c:0e:0d:fa:bf:d9:26:d4:13:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Jul 10 14:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63906e23722a0464b7d8d053f3c2308ddf0d7d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:66:7f:86:3d:95:2c:28:84:af:84:22:52:
71:18:0f:03:07:ee:b9:22:0d:0d:fe:3d:1f:e9:7f:
8b:cf:08:af:ee:84:8a:05:dd:90:12:42:b7:22:93:
0f:a2:96:dc:e0:14:dd:c8:94:9e:12:7d:60:f4:83:
76:82:75:eb:be:38:9a:8d:76:63:f9:e2:0d:8e:1a:
db:0a:79:64:1c:e0:39:d0:ba:6d:72:b1:57:f7:44:
2c:dd:1e:88:b5:11:e0:87:c0:ee:b8:6a:25:96:54:
48:d8:ce:a4:6f:ec:3c:82:a2:80:b3:09:e0:a4:80:
e7:f7:e9:8e:a6:64:93:9d:69:b6:77:4b:e9:52:05:
ed:be:54:87:29:3c:e7:34:99:17:ff:9e:9c:3b:08:
67:62:d7:51:fd:57:5e:22:a1:f5:5a:3c:76:52:a4:
49:06:23:9c:1a:06:4b:a0:67:aa:24:32:34:2a:fe:
b7:66:dc:11:db:6a:72:4b:fe:0c:c8:f4:8d:60:2b:
53:e2:4e:c2:b7:d1:2b:a5:3b:20:d5:a9:44:20:0d:
3d:e4:b5:68:81:12:0c:eb:3a:de:99:63:e5:c1:45:
ac:d0:9d:0f:a2:ea:3c:44:c0:90:f4:34:c1:14:b6:
f7:00:83:b7:a8:29:60:4d:8a:1c:9c:a7:47:4c:3c:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:90:6E:23:72:2A:04:64:B7:D8:D0:53:F3:C2:30:8D:DF:0D:7D:4F
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/Y5BuI3IqBGS32NBT88Iwjd8NfU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.41.0/24
IPv6:
2a00:1310::/32
Signature Algorithm: sha256WithRSAEncryption
2c:5f:71:7a:69:1e:cc:76:43:3c:f6:54:f2:7e:d2:82:eb:a7:
64:6d:cc:58:f8:b3:e5:75:2b:87:41:8a:7b:6c:26:14:36:28:
24:e3:8c:75:3c:d2:57:66:33:6d:95:c8:df:2d:0c:46:2d:0c:
3d:14:c7:64:2c:e8:8e:8e:b7:37:da:4c:7a:4f:d3:79:f5:e0:
81:cb:02:8c:dc:68:eb:d4:70:75:99:b2:ef:09:d1:9d:87:97:
be:26:f1:68:f8:6c:25:1e:8b:c4:ed:09:16:ee:78:46:61:4f:
18:c6:8f:fe:ea:8b:5e:b7:2c:cf:62:b4:02:7d:bd:1c:57:c4:
a9:15:74:86:f6:6c:aa:09:f4:15:86:9a:5c:bc:87:b2:8a:05:
d3:35:72:e6:55:98:87:6f:6a:57:e2:4f:20:bf:68:3f:6f:05:
87:64:b4:56:be:34:9f:0f:0f:b3:13:58:46:bd:c6:55:84:3a:
d8:da:42:cd:1b:eb:99:e3:23:b8:e4:87:75:e4:c3:11:47:2e:
c9:e6:11:8f:69:aa:a6:99:ec:2f:ef:95:e8:14:25:f7:44:a8:
06:9d:ab:3d:a5:22:99:e0:48:bb:ca:ad:d8:cc:e7:c1:18:f1:
db:70:f1:31:eb:73:10:5f:39:95:10:c2:7a:97:ef:31:92:34:
c4:18:93:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:35:40 2025 by rpki-client