Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/R_YrENvgKm8U1Y3Z-J2LfsfmMqc.roa
File: R_YrENvgKm8U1Y3Z-J2LfsfmMqc.roa (raw, json)
Hash identifier: 4EFEz3JZTllLzOgQVJ3ASGZiaFKQBp1qy/Ksrgb79eY=
Subject key identifier: 47:F6:2B:10:DB:E0:2A:6F:14:D5:8D:D9:F8:9D:8B:7E:C7:E6:32:A7
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 019408D9CE06DDD50DFF9C1C8F6AF207FED3
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/R_YrENvgKm8U1Y3Z-J2LfsfmMqc.roa
Signing time: Fri 27 Dec 2024 16:01:19 +0000
ROA not before: Fri 27 Dec 2024 16:01:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39305
IP address blocks: 78.24.32.0/21 maxlen: 21
185.88.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:d9:ce:06:dd:d5:0d:ff:9c:1c:8f:6a:f2:07:fe:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Dec 27 16:01:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47f62b10dbe02a6f14d58dd9f89d8b7ec7e632a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:ae:8c:c0:a6:bd:5c:2d:86:24:62:0d:df:
5d:d5:69:55:b6:f9:99:1a:92:5c:c6:cf:63:d0:4f:
e8:7f:c4:ae:6a:86:b2:72:02:d8:0e:71:02:0a:c1:
2a:82:51:a3:c7:a4:41:d2:f8:32:df:0a:e3:07:ac:
28:1e:01:39:72:e8:27:63:f4:59:00:fc:c7:64:58:
48:81:4a:9f:61:5f:75:ce:e4:0b:36:c5:9c:cc:ba:
29:36:d6:b2:6f:ce:62:5b:7f:a0:8b:42:d8:de:1d:
36:72:b3:ed:c5:10:b6:2f:5c:e1:3b:44:01:d0:78:
3e:93:99:94:fb:db:2a:ba:6c:5b:da:66:7b:b1:70:
9e:fb:35:2f:73:f6:9a:b0:67:1e:e4:ad:88:08:f3:
f3:fd:12:67:64:ee:0f:32:70:59:ef:11:b8:8d:5a:
3a:b5:a4:59:e6:6c:81:53:58:da:1b:7a:7c:48:24:
f9:89:76:64:e6:4a:68:2d:bd:e5:f6:a2:15:f6:89:
04:21:43:a3:0a:32:0f:31:38:52:30:26:b5:ff:5b:
6f:13:6a:8e:99:32:e7:7a:26:a4:fb:7a:bf:76:ba:
c1:f3:ec:02:42:d5:f7:19:43:0e:d8:19:27:9c:48:
f0:b8:1c:60:17:b4:0d:5a:59:b5:ed:6e:fe:bf:17:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F6:2B:10:DB:E0:2A:6F:14:D5:8D:D9:F8:9D:8B:7E:C7:E6:32:A7
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/R_YrENvgKm8U1Y3Z-J2LfsfmMqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.32.0/21
185.88.9.0/24
Signature Algorithm: sha256WithRSAEncryption
74:36:48:2e:d2:42:e2:c7:b1:f2:0a:89:f2:28:00:1e:a8:87:
4f:4b:47:4a:9f:83:2e:22:52:4b:a8:c7:76:e9:fe:41:4e:9f:
05:12:c0:f4:2e:ef:cf:21:34:08:d8:77:9b:73:12:78:e5:ee:
ea:0b:e5:1d:40:47:36:45:84:6e:ac:72:7a:85:74:19:e1:98:
3d:ee:c8:af:89:f5:03:19:91:70:4c:d0:4d:d1:fd:d4:38:58:
38:ab:bb:75:97:57:1f:75:aa:b1:01:3e:b7:b2:ef:a4:bc:9a:
99:15:2f:a8:23:fd:98:2c:ca:43:65:8c:b9:6d:09:19:e8:a1:
0c:8d:02:e9:1b:c2:b2:23:87:b1:09:26:98:16:91:8d:20:79:
4f:07:b6:7e:b5:f1:3f:bd:52:5a:58:d7:ae:a5:c4:7b:eb:56:
e4:c5:12:4b:19:1e:01:d0:4f:ee:43:4c:4c:bc:bc:d7:da:10:
cd:a4:41:96:c0:3c:d3:e0:a2:d7:56:fc:f6:d4:43:d0:75:6d:
34:a6:25:41:15:a7:5d:81:4f:60:12:76:5e:56:d5:c6:64:bd:
f0:c8:e5:f2:a9:d9:0a:b4:07:3a:68:4d:95:45:2f:f1:e6:d3:
b2:90:7a:7b:cb:61:e8:18:ec:ff:6f:c5:56:e1:05:d5:80:8c:
3e:15:20:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:45:15 2025 by rpki-client