Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vytnWjIzTiM9Trkt6JiScQDwJcY.roa
File: vytnWjIzTiM9Trkt6JiScQDwJcY.roa (raw, json)
Hash identifier: OOByXuf/08Wa8Em/HVj/QaEbaJ7d8OPgPPFU/dFJARA=
Subject key identifier: BF:2B:67:5A:32:33:4E:23:3D:4E:B9:2D:E8:98:92:71:00:F0:25:C6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192B914BE94A9B64F582711E271E12BE00C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vytnWjIzTiM9Trkt6JiScQDwJcY.roa
Signing time: Wed 23 Oct 2024 11:13:17 +0000
ROA not before: Wed 23 Oct 2024 11:13:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 194.113.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 11:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:14:be:94:a9:b6:4f:58:27:11:e2:71:e1:2b:e0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 23 11:13:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf2b675a32334e233d4eb92de898927100f025c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:e6:bf:ad:f1:48:d8:af:d4:bb:50:05:c2:
da:9c:e5:f4:79:5d:0d:bb:ae:df:33:74:f2:1e:d0:
68:67:6a:ed:8a:7d:f3:0e:4d:ba:e4:93:b2:18:e7:
23:dc:3e:1f:19:f9:6a:90:ad:5b:48:57:18:a4:2f:
6d:b7:39:d4:91:46:ee:4a:0f:9b:fd:8b:e8:ae:da:
ba:bc:69:7a:d6:fe:a7:5c:ae:1c:9f:d6:d5:bf:f8:
58:a4:c4:56:8e:07:f8:7e:19:09:24:72:58:85:87:
31:31:66:a7:3b:5d:8e:64:fb:62:ac:88:c7:a9:7e:
2f:3f:02:ab:bb:20:4d:c9:1b:99:bf:23:07:8a:bc:
1c:b6:2c:9c:53:16:6d:3b:99:e9:ed:c5:32:7f:11:
31:cf:1e:b1:7d:97:0a:86:fc:c4:45:f6:d1:b2:7a:
19:0a:67:41:3f:b4:67:c2:e2:c4:f1:0d:b5:1e:6d:
b8:23:20:3c:8c:1e:6d:c3:6e:9b:31:a1:d2:d6:5f:
9b:f4:2f:0f:42:7e:8e:14:82:0c:ba:96:08:04:54:
ff:bd:f4:d3:33:f2:30:cc:e1:d7:bd:45:b7:88:f4:
44:a6:ad:6a:f9:b0:86:87:ed:65:c7:5c:f6:df:f9:
39:7e:cb:5f:c1:c0:cc:6b:54:6d:c0:98:85:70:8c:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2B:67:5A:32:33:4E:23:3D:4E:B9:2D:E8:98:92:71:00:F0:25:C6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vytnWjIzTiM9Trkt6JiScQDwJcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d8:e0:15:8a:9b:f5:e0:3c:04:d1:80:5b:9c:14:d9:89:8b:
8e:c9:ff:0f:cf:f9:5d:26:dd:6b:70:b3:bb:12:57:22:18:a1:
52:a6:6a:90:21:ce:ca:e8:fc:f2:57:a7:cb:c5:3f:14:b7:3c:
e2:61:70:34:2f:3e:cb:0b:fb:81:aa:cc:08:41:a7:29:bc:bb:
ad:3e:f5:f0:b0:82:60:95:4f:9b:74:a7:6f:f1:d6:4b:b4:34:
ff:ad:c8:58:a4:b6:03:7d:91:4e:5e:5d:98:5d:54:97:af:cb:
13:1e:dc:2b:d3:7e:c6:f1:ea:f1:5b:54:4b:ef:c0:fb:91:74:
1e:01:13:36:56:8d:0b:3c:7d:5d:ab:bb:76:45:9b:5c:96:29:
a7:59:55:2d:41:55:ca:7a:60:20:53:bf:00:32:82:c7:3c:9b:
c2:7a:3b:61:ff:b6:9b:7c:a8:6f:83:a6:31:86:77:60:c4:d8:
1b:54:1d:65:d9:cc:02:32:b6:7b:d0:37:7e:68:2a:6a:2d:13:
83:76:53:f5:0d:cd:71:96:8c:47:fa:f5:ed:c6:72:b7:f0:ba:
e7:62:b9:5d:e9:45:2e:92:3b:5d:75:37:e4:08:5b:0f:3a:14:
a3:c8:fb:92:b1:72:ae:0f:15:5e:8f:be:48:cc:00:ea:8c:ae:
cf:40:ed:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:04:00 2025 by rpki-client