Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/Y2eZfSwB7DsnfOh87tNlJnbIYTU.roa
File: Y2eZfSwB7DsnfOh87tNlJnbIYTU.roa (raw, json)
Hash identifier: GJWtHp4aexwoP0vw14VFltRh93cpE7x31PnNUWj232s=
Subject key identifier: 63:67:99:7D:2C:01:EC:3B:27:7C:E8:7C:EE:D3:65:26:76:C8:61:35
Certificate issuer: /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial: 019421B23C8B4FA446B840A0E766CFE60731
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/Y2eZfSwB7DsnfOh87tNlJnbIYTU.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206114
IP address blocks: 87.255.160.0/19 maxlen: 19
2a04:2800::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 16 Jan 2025 07:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3c:8b:4f:a4:46:b8:40:a0:e7:66:cf:e6:07:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6367997d2c01ec3b277ce87ceed3652676c86135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:af:e9:73:1d:e1:f7:75:df:6a:66:05:ef:
d9:17:d7:7e:95:e5:70:19:21:88:a3:7b:97:7b:66:
87:93:6e:82:22:66:ed:35:87:ae:5d:60:23:a8:33:
e1:07:42:e7:ba:55:d8:40:9f:02:29:51:77:c5:62:
bd:87:08:04:c1:a2:59:25:9e:15:90:01:1b:e9:43:
70:3d:45:84:90:29:3d:0a:37:94:20:d6:09:8a:21:
88:da:eb:c2:6d:4c:a8:7e:9a:c4:13:25:38:1e:6f:
7e:77:17:a5:e0:f6:fb:e8:c7:42:d5:1f:e3:77:b9:
1c:e2:89:04:2f:5a:33:9e:8e:48:9e:84:b0:f5:36:
71:63:81:32:1a:0b:82:3e:f3:fe:30:1f:b4:c2:14:
bf:94:1b:f8:cb:43:bd:01:2e:eb:a1:6e:84:83:fa:
14:f6:dd:b8:b2:5e:17:e5:09:16:63:a7:c8:fc:9b:
ae:82:06:74:1c:e2:7e:df:35:09:3d:7c:f9:63:13:
82:c7:ce:9e:68:36:9c:02:51:08:19:92:ca:cc:99:
c5:43:a6:ce:4f:47:72:d5:ef:31:80:71:31:76:62:
37:a6:fb:8f:46:7f:a0:0f:2a:e0:5d:fc:13:7a:dd:
20:a4:d6:56:04:b1:83:d4:c7:9b:b5:f7:3a:e1:4d:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:67:99:7D:2C:01:EC:3B:27:7C:E8:7C:EE:D3:65:26:76:C8:61:35
X509v3 Authority Key Identifier:
keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/Y2eZfSwB7DsnfOh87tNlJnbIYTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.255.160.0/19
IPv6:
2a04:2800::/29
Signature Algorithm: sha256WithRSAEncryption
9f:c5:f4:73:2d:87:6f:9d:c5:5d:e5:96:a7:6d:60:fe:2b:aa:
99:15:41:f8:57:1f:45:67:84:36:5a:04:20:34:70:be:11:e0:
68:e6:2f:31:8a:fa:5b:8d:33:5c:4b:51:bb:ab:19:b8:9c:1c:
0f:6d:03:83:01:96:ca:d1:4d:8b:25:15:47:7c:30:08:b3:43:
8c:36:cc:de:b5:05:a8:d6:7e:3e:15:f3:ce:75:0b:f4:3d:6a:
69:9a:23:2b:76:ea:0f:d6:f3:68:ab:0f:4a:6d:26:ca:f0:16:
6b:06:3b:09:25:3e:de:e8:fd:3e:d0:26:e2:9f:14:9a:e0:3b:
f9:83:21:8f:f9:81:1e:73:bc:5a:94:0d:0e:b0:cc:2b:d8:00:
73:9e:1b:26:ce:77:42:96:60:34:26:d7:1e:ac:f9:b1:95:a2:
4f:47:7c:b5:44:b7:07:b2:7c:57:88:d4:a5:e6:6e:7b:9a:84:
09:33:22:2e:71:8f:57:9c:71:d7:41:53:52:d7:06:e4:80:d7:
17:ab:ab:67:11:71:35:22:6d:f9:7c:77:71:c6:8a:14:6d:8d:
3f:a0:a1:e3:2c:4f:33:1f:47:bf:cc:41:c8:66:16:3b:2f:2c:
64:53:97:33:09:cc:03:ac:63:a8:8d:1a:27:ca:2a:c4:57:1b:
e6:ea:bf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:16:49 2025 by rpki-client