Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/Yik3v5wduZ4Crncad7g_dZ0LvEs.roa
File: Yik3v5wduZ4Crncad7g_dZ0LvEs.roa (raw, json)
Hash identifier: DFo7jzUcKUvIV8sJW7LpbYs03FMKXPymWMLsrG7geio=
Subject key identifier: 62:29:37:BF:9C:1D:B9:9E:02:AE:77:1A:77:B8:3F:75:9D:0B:BC:4B
Certificate issuer: /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial: 0196866112FC2149F3C1D96D192229D0AB0A
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/Yik3v5wduZ4Crncad7g_dZ0LvEs.roa
Signing time: Wed 30 Apr 2025 11:07:10 +0000
ROA not before: Wed 30 Apr 2025 11:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58095
IP address blocks: 37.252.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 11:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:61:12:fc:21:49:f3:c1:d9:6d:19:22:29:d0:ab:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Validity
Not Before: Apr 30 11:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=622937bf9c1db99e02ae771a77b83f759d0bbc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:e0:28:a2:63:a6:01:03:bf:09:5c:ca:91:
57:10:1f:6a:28:8b:d6:4f:d9:f3:0a:5a:94:0a:8e:
2d:e3:bd:35:07:2e:74:3e:e6:46:e1:58:33:c0:8d:
f7:8a:64:30:a1:0a:dc:b4:61:19:6b:a9:bd:70:93:
93:f5:0c:57:d4:e9:56:1f:0d:40:63:54:8d:38:d4:
3b:54:7c:88:7f:77:09:65:b6:eb:0b:d6:44:d7:fc:
55:b9:c0:6b:0b:0e:2f:aa:e2:ae:08:7a:a7:37:07:
2b:e8:c7:c4:c6:b8:5c:28:fd:7e:d2:eb:56:33:b4:
35:26:41:8a:29:98:e7:2b:0b:8e:79:14:d8:54:84:
70:cd:45:fd:44:24:7d:68:7c:8e:5c:82:bf:fa:b1:
b8:18:8e:d6:bd:76:eb:de:1f:6a:4c:13:a4:7c:2b:
67:37:60:0f:6c:b3:7c:a9:cd:f3:ff:39:da:c9:5f:
bb:10:37:11:fa:ad:b3:09:9d:ca:4f:10:f0:7e:a5:
3f:e4:b4:1a:4b:4d:43:db:b8:54:80:b6:d7:40:07:
d0:ef:d9:35:03:6d:77:fc:52:cd:fa:1b:f9:73:c5:
61:89:d1:15:15:4e:3d:66:73:6a:e6:19:aa:56:20:
d5:3a:f2:6e:3c:69:91:80:e5:06:22:2e:9a:ff:63:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:29:37:BF:9C:1D:B9:9E:02:AE:77:1A:77:B8:3F:75:9D:0B:BC:4B
X509v3 Authority Key Identifier:
keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/Yik3v5wduZ4Crncad7g_dZ0LvEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.18.0/24
Signature Algorithm: sha256WithRSAEncryption
20:3a:f6:ae:f9:ea:92:ee:da:d1:01:88:23:ce:1c:7c:7c:e3:
1c:81:a0:38:14:67:dd:7b:60:cd:66:54:0b:8e:86:71:ae:da:
cb:a9:7e:ce:82:3c:5c:05:a8:57:df:38:06:50:64:f6:f0:2e:
fe:58:dd:f5:de:46:97:7c:d7:98:d0:98:9b:27:88:51:e4:fb:
e7:08:c7:8d:d6:af:2c:a4:11:b6:7d:c0:8b:06:30:90:ce:9d:
35:43:64:43:1c:bc:87:ae:1a:86:fd:ac:72:81:21:af:ff:45:
b6:e7:9e:1d:c5:3a:6a:e8:d0:ca:e4:92:7a:a6:00:87:2f:b5:
e9:6a:95:7a:dd:66:bd:04:0b:00:2c:a1:a5:0f:40:8a:9e:a5:
f5:be:8f:83:11:22:00:aa:f4:6e:7e:df:68:ac:60:ef:c1:cb:
f6:6d:f7:29:16:9b:e9:29:cf:db:a9:cd:86:a1:de:89:37:c4:
bd:3a:9b:40:17:66:a7:0a:ec:29:fd:b1:bd:54:c4:6a:b7:59:
d1:c8:d2:e6:df:f0:78:18:72:d8:34:18:d7:51:07:69:df:d3:
d4:10:9a:41:1a:b5:b6:68:be:d6:67:90:2b:27:f8:2d:55:82:
e6:9c:b6:69:f3:d3:78:e0:61:27:c4:53:15:99:6a:48:19:1f:
b9:4a:bb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:48:45 2025 by rpki-client