Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Y5WuPiCB8mqm9Q5nF4XVuPvzFpI.roa
File: Y5WuPiCB8mqm9Q5nF4XVuPvzFpI.roa (raw, json)
Hash identifier: ME7JvVAB0qQOS0eNb8ylMDkEIkVEAARVAsEX75cgFwM=
Subject key identifier: 63:95:AE:3E:20:81:F2:6A:A6:F5:0E:67:17:85:D5:B8:FB:F3:16:92
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01963AC4130310A16234A9F441689EA49CE1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Y5WuPiCB8mqm9Q5nF4XVuPvzFpI.roa
Signing time: Tue 15 Apr 2025 18:44:10 +0000
ROA not before: Tue 15 Apr 2025 18:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4637
IP address blocks: 84.32.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 13:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:c4:13:03:10:a1:62:34:a9:f4:41:68:9e:a4:9c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 15 18:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6395ae3e2081f26aa6f50e671785d5b8fbf31692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:8f:af:35:14:80:2b:c5:dd:39:72:d5:a5:
0d:79:3e:de:7a:c3:de:1a:be:81:5c:02:aa:0c:03:
08:0a:37:0b:69:be:7f:a2:57:bd:83:6a:5a:bc:3d:
37:25:c1:09:34:be:0c:0b:d9:b5:4a:1d:b1:27:b8:
61:5e:ed:4a:6b:23:b0:56:a1:55:cf:7f:8a:81:bc:
18:1c:b4:91:16:01:f6:7f:a2:48:e3:d6:30:05:d4:
b5:c8:72:bf:e8:6c:d5:f2:f1:6d:9f:eb:53:45:db:
94:0a:14:a2:43:2b:ec:09:7c:32:fc:09:87:9a:4c:
04:f5:b7:3d:d6:31:56:ef:d7:54:b3:1c:43:fb:77:
89:3c:5d:80:a8:d3:0f:d8:57:a6:03:18:62:e8:be:
50:79:84:9b:60:9e:8a:52:00:34:a7:60:a8:e7:67:
45:e5:af:85:07:2b:09:f0:3b:6d:a2:13:0b:30:c0:
09:bd:eb:34:c8:12:78:15:17:73:0e:aa:63:1b:5f:
65:7f:fd:47:e0:a9:b3:0c:0b:5b:1a:68:8a:49:db:
8a:77:b0:0c:9d:df:31:24:bc:b4:5a:1e:c3:47:26:
3e:ac:50:20:a6:52:17:79:dc:1f:04:17:a6:c9:29:
7b:72:91:6e:70:67:e0:9b:5d:2d:cd:e3:10:45:cf:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:AE:3E:20:81:F2:6A:A6:F5:0E:67:17:85:D5:B8:FB:F3:16:92
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Y5WuPiCB8mqm9Q5nF4XVuPvzFpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:7a:da:ef:45:8f:68:41:42:7e:af:51:ad:0f:0e:8c:95:08:
f1:c2:b9:20:63:ad:b3:3a:52:53:f1:4a:1e:f7:7e:83:bb:d0:
aa:80:44:dc:b6:cf:88:2e:fa:11:a0:52:fa:90:1f:15:07:78:
a8:60:84:14:60:21:a9:85:90:ee:be:24:d4:3e:72:83:ce:16:
9f:6c:8d:b0:59:ea:a1:1d:d4:dc:a6:1e:68:13:37:8c:80:53:
78:0b:57:19:43:ce:c4:8e:f6:12:4a:8a:42:c4:e4:67:bd:9f:
16:7e:5c:4e:c7:58:82:1b:af:5b:f2:f2:14:7e:b5:5a:93:40:
a7:a8:8a:88:f7:7c:d6:1a:7d:c3:4c:fe:d7:9e:46:58:c4:da:
1b:58:01:10:2b:f8:ff:47:29:2e:bb:82:45:40:c8:2c:85:e7:
5d:5d:68:c2:08:0d:12:93:31:52:88:ff:fe:bf:46:3a:49:6c:
b9:93:75:09:c8:e9:4c:51:3c:d7:ab:27:5c:23:67:d8:09:f8:
01:62:2e:66:b5:d1:d2:75:d3:b4:6d:f4:fc:cc:e5:cb:e7:d0:
0c:0c:1e:a5:3c:5e:1e:ae:e1:72:7f:68:ea:6b:53:51:f9:a8:
2a:c6:b8:db:72:27:21:6f:4d:9c:f8:9a:a5:74:bc:d1:2b:91:
79:03:e6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:07:23 2025 by rpki-client