Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yyNgpxekznGa-NxZ3wPT7P0uTP4.roa
File: yyNgpxekznGa-NxZ3wPT7P0uTP4.roa (raw, json)
Hash identifier: Rc60ZZ+lWAxu/uwTL1D1ikiH50d4i6QiSGUh0Ds7VHI=
Subject key identifier: CB:23:60:A7:17:A4:CE:71:9A:F8:DC:59:DF:03:D3:EC:FD:2E:4C:FE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019519E43CF745E52C5CA4A94869E578ED39
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yyNgpxekznGa-NxZ3wPT7P0uTP4.roa
Signing time: Tue 18 Feb 2025 16:29:02 +0000
ROA not before: Tue 18 Feb 2025 16:29:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216078
IP address blocks: 87.121.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 09:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:e4:3c:f7:45:e5:2c:5c:a4:a9:48:69:e5:78:ed:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 18 16:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb2360a717a4ce719af8dc59df03d3ecfd2e4cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:96:ea:a6:33:90:16:3d:97:95:16:57:72:
8b:0b:7d:89:ad:41:0b:7a:73:59:53:05:19:23:98:
3d:02:f5:28:42:09:ea:3d:f4:f1:3f:c2:58:3b:2d:
ec:7c:46:ff:0d:1c:c3:64:e3:94:15:cc:23:fc:1c:
4f:c3:0d:1f:ee:bc:26:c1:b6:77:53:47:4b:01:5a:
23:44:1a:e0:c6:aa:e3:24:10:8a:03:80:0a:a8:4c:
ac:67:da:8b:0d:e8:be:6e:67:36:74:63:e7:ed:6a:
1b:e6:0c:64:26:00:06:fb:48:f5:0f:2e:b2:51:df:
72:76:8f:6e:2c:ec:9a:68:8b:99:52:cd:00:8e:4d:
ef:c2:d6:fb:d6:36:e0:74:84:6c:bc:cf:33:01:1d:
0a:31:ce:51:bf:51:55:7b:f1:09:89:65:70:0a:d7:
60:75:00:c5:a2:c5:6c:4d:ab:b6:42:a1:51:75:3e:
e9:cf:66:78:3b:a4:33:6d:6f:d2:9c:09:6c:4f:00:
5d:e1:fe:cc:f3:59:97:9c:f6:a3:60:29:6c:d3:fa:
7a:e6:e9:31:dd:f0:7a:47:c9:12:71:de:8e:ed:72:
dd:31:90:8a:16:f4:ab:b8:40:a0:a7:54:45:f1:2a:
f0:c3:61:43:5b:ef:6f:8a:ae:40:0e:dc:cb:0d:af:
53:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:23:60:A7:17:A4:CE:71:9A:F8:DC:59:DF:03:D3:EC:FD:2E:4C:FE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yyNgpxekznGa-NxZ3wPT7P0uTP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.79.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b8:b4:47:8c:f2:ee:c9:43:1c:9e:14:4f:21:4e:e3:3d:22:
e2:87:ec:1b:f8:ed:39:86:ad:91:fc:c8:9a:f5:ba:f2:3c:9b:
3e:0c:01:31:8e:e6:64:fa:49:82:9d:c3:b3:82:c5:41:bb:93:
a5:ea:b7:d4:90:b5:04:cf:02:e2:8c:86:af:1f:0a:7f:77:03:
04:8c:44:b8:ad:ab:75:7b:bc:b9:1f:36:a1:ae:c2:2b:a8:fa:
82:3b:61:c3:e9:32:4a:94:5a:bf:46:ef:9d:a9:ad:98:5e:77:
5b:77:3d:73:fc:a2:74:aa:f1:99:d2:ac:8d:c3:b1:07:58:53:
f8:24:60:da:17:87:7d:e7:97:1f:47:65:5c:f6:9b:13:77:f4:
97:8d:94:08:02:36:4a:e9:66:bd:16:32:9a:a1:b6:d6:5d:c3:
b6:a2:85:97:f2:41:a9:d2:fc:8e:82:67:19:91:a4:a0:bd:ad:
e9:a2:80:94:85:c9:4e:f4:e3:aa:dc:b1:ef:9f:b7:08:95:7d:
c9:df:16:c7:7a:9b:00:f3:16:b8:f1:0d:2e:a0:3c:c4:c7:45:
2d:7a:b6:15:af:ab:46:37:b5:02:29:47:69:94:4a:d2:9a:cc:
e2:3c:a5:a7:33:96:e8:2a:9e:2c:21:2b:a1:64:43:f2:1c:3a:
94:88:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:24:11 2025 by rpki-client